$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/ca23bed2-54e5-3c41-bc4d-c6ac2b2c032e.roa File: ca23bed2-54e5-3c41-bc4d-c6ac2b2c032e.roa (raw, json) Hash identifier: NkS3pRMRh/b62m+G+atNe+vtnPI2HPmFU1x5fvLy2fw= Subject key identifier: 9F:08:51:3C:D8:E1:16:DD:5C:06:18:49:73:27:6F:16:09:BE:42:E2 Certificate issuer: /CN=4f12be01-5f55-4434-8f8a-921808f7c306 Certificate serial: 010D0C9F4328584B9177830E905A947D82EE9340 Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/ca23bed2-54e5-3c41-bc4d-c6ac2b2c032e.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 62582 IP address blocks: 2607:c780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:83:0e:90:5a:94:7d:82:ee:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=56e9df55-97b7-4ce3-896f-4a1df9f62447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:43:8e:c2:ae:be:95:e8:9a:a7:b3:7a:f3: 99:be:09:dc:24:37:bb:d3:b7:45:cc:20:cc:a2:b0: e3:5c:e5:10:e2:c8:cf:2a:70:f4:70:95:c9:17:96: 28:61:1b:05:3e:7c:2f:5e:39:69:cc:8a:e0:ac:2a: 6e:e0:c9:11:fe:c9:f7:a4:77:cd:8a:a1:ff:27:f0: 25:35:56:11:78:f2:4c:92:5e:8c:66:e8:ac:4f:36: 68:34:ef:db:72:be:e4:cc:8e:66:5a:ad:c5:7b:ee: c5:d6:7e:16:2b:19:25:ee:49:46:25:57:92:e1:8a: 72:76:de:0f:ab:2c:ec:34:67:20:2a:52:7f:34:68: e3:88:f6:9f:de:9e:f0:a5:aa:f0:e8:92:66:2e:a6: 3b:7f:0a:95:92:a5:2d:c2:c7:8c:3c:39:1b:ad:b7: c9:5e:25:93:72:20:cc:72:0f:9c:81:14:35:6c:0e: 96:1c:98:85:b3:40:1c:2c:2d:18:d4:4a:35:2e:1f: e4:dc:18:d0:8b:4e:f3:fe:4b:ae:56:e3:4c:93:e9: fa:30:d4:9e:9f:7b:9d:7d:05:62:e6:63:ac:ac:a2: 43:0c:15:e8:8e:a3:f6:04:3e:38:82:1c:68:f2:78: 1b:5b:2a:40:68:d5:00:c3:07:b7:36:9b:96:cc:17: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:51:3C:D8:E1:16:DD:5C:06:18:49:73:27:6F:16:09:BE:42:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/ca23bed2-54e5-3c41-bc4d-c6ac2b2c032e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl X509v3 Authority Key Identifier: keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer sbgp-ipAddrBlock: critical IPv6: 2607:c780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:24:08:1d:b3:1f:20:7e:15:01:21:0c:4a:99:e5:69:d1:ff: 80:22:be:b9:ca:86:17:09:4c:1f:bf:e2:d1:cc:bb:f1:02:ba: 4c:d0:a7:9f:d2:05:77:66:1f:fc:1c:fa:ec:f3:20:9f:ef:eb: ef:dd:75:1a:89:17:6b:5b:fd:02:2b:7c:db:40:8a:c5:47:92: cc:56:59:0c:38:c0:46:60:1a:74:e4:5f:b3:a7:f9:47:a0:82: 61:05:14:50:46:a9:ab:d8:8c:24:1b:26:88:b6:be:5e:83:67: b8:0d:ee:52:28:17:53:a6:df:42:46:55:de:76:1b:9f:53:ef: 8f:bb:01:f5:5e:18:bd:72:3b:71:b6:e1:17:a8:c0:1c:4b:3e: 37:c8:dc:2d:09:ef:cd:29:dd:8b:67:38:1f:79:e5:a6:99:ec: ce:ae:e5:7f:4c:16:99:f9:fb:ee:79:39:52:0e:22:ad:82:ed: 38:2a:3c:ae:67:79:27:fd:17:ad:f1:1f:56:5b:2d:7d:b5:bb: 17:58:25:0e:be:3d:ac:f3:aa:5e:93:d3:a2:7c:73:4a:2e:b1: 92:38:c0:d6:d7:81:29:91:64:2c:4a:8a:a6:f3:63:ea:b6:ca: ec:2a:52:de:c3:cd:7e:af:90:bc:56:98:cc:0f:aa:e4:3d:77: 39:7f:0b:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuRd4MOkFqUfYLuk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj MzA2MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk NTZlOWRmNTUtOTdiNy00Y2UzLTg5NmYtNGExZGY5ZjYyNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxNDjsKuvpXomqezevOZvgncJDe707dFzCDM orDjXOUQ4sjPKnD0cJXJF5YoYRsFPnwvXjlpzIrgrCpu4MkR/sn3pHfNiqH/J/Al NVYRePJMkl6MZuisTzZoNO/bcr7kzI5mWq3Fe+7F1n4WKxkl7klGJVeS4Ypydt4P qyzsNGcgKlJ/NGjjiPaf3p7wparw6JJmLqY7fwqVkqUtwseMPDkbrbfJXiWTciDM cg+cgRQ1bA6WHJiFs0AcLC0Y1Eo1Lh/k3BjQi07z/kuuVuNMk+n6MNSen3udfQVi 5mOsrKJDDBXojqP2BD44ghxo8ngbWypAaNUAwwe3NpuWzBfEfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ8IUTzY4RbdXAYYSXMnbxYJvkLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvY2EyM2JlZDItNTRlNS0z YzQxLWJjNGQtYzZhYzJiMmMwMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3 YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4 MDhmN2MzMDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeJAgdsx8gfhUBIQxKmeVp0f+AIr65yoYXCUwfv+LRzLvxArpM0Kef 0gV3Zh/8HPrs8yCf7+vv3XUaiRdrW/0CK3zbQIrFR5LMVlkMOMBGYBp05F+zp/lH oIJhBRRQRqmr2IwkGyaItr5eg2e4De5SKBdTpt9CRlXedhufU++PuwH1Xhi9cjtx tuEXqMAcSz43yNwtCe/NKd2LZzgfeeWmmezOruV/TBaZ+fvueTlSDiKtgu04Kjyu Z3kn/Ret8R9WWy19tbsXWCUOvj2s86pek9OifHNKLrGSOMDW14EpkWQsSoqm82Pq tsrsKlLew81+r5C8VpjMD6rkPXc5fwsJ -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:16 2025 by rpki-client