$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa File: 3a40369b-9e90-3db3-b866-f8235d484158.roa (raw, json) Hash identifier: hjgxKJ5Bs9+lj1on5QNr20C8KwLScd1hYNAoqwD+a+s= Subject key identifier: 92:1E:97:F4:1D:5A:DF:44:5B:D8:D1:9E:51:96:32:5B:22:26:A4:26 Certificate issuer: /CN=1d65e3c3-96e5-425b-b926-48d278136d48 Certificate serial: 010D0C9F4328584B84E782F000FE7473A1492600 Authority key identifier: B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 10821 IP address blocks: 2604:7040::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:82:f0:00:fe:74:73:a1:49:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65e3c3-96e5-425b-b926-48d278136d48 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=982ca816-849c-4440-9aa9-07f5ab51470d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:5e:6c:5f:92:10:f8:25:7f:c7:73:e5:76: f6:53:1c:d3:1b:b6:da:61:11:de:d9:f4:0d:82:27: 73:f2:19:14:81:8d:f9:69:b5:38:ea:a3:33:56:27: 89:9f:07:cb:79:c7:67:61:d9:ea:46:0a:3f:51:53: 0f:bc:ab:a6:b2:fc:41:ce:d8:54:71:f1:fc:2c:8f: 30:20:39:d2:00:78:16:aa:b1:09:6f:2f:73:ad:a7: 5a:00:a4:8a:c4:6a:50:d0:d9:ec:cc:88:53:56:75: b2:1a:4d:cb:ed:e1:e0:34:55:5b:5d:7b:ba:f3:42: 44:2f:55:d9:c9:68:54:b9:af:e1:31:ec:59:84:d5: ab:7e:84:5a:2c:e2:29:78:39:94:82:e0:d6:64:1b: 53:79:90:41:ec:9a:b9:d0:75:80:df:03:01:f5:b9: ca:55:5e:9f:cb:04:ae:e4:2d:79:51:10:16:78:fa: 92:03:15:f2:68:60:0f:77:7f:00:5a:8a:b5:4f:7c: 4a:cf:86:31:1e:e8:b4:f0:f9:cd:19:c1:b8:82:13: bb:07:16:b3:3a:10:ea:38:5c:9b:fe:5b:34:ab:bc: b1:c5:94:a5:b7:99:ff:65:26:b3:b2:3f:0f:fc:36: 86:3d:40:92:06:1e:b5:17:bc:40:3e:2e:7e:2d:44: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1E:97:F4:1D:5A:DF:44:5B:D8:D1:9E:51:96:32:5B:22:26:A4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl X509v3 Authority Key Identifier: keyid:B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer sbgp-ipAddrBlock: critical IPv6: 2604:7040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8a:0d:a1:a8:d9:2b:89:e7:c0:84:90:43:bb:30:3a:26:72: b1:2d:4b:21:5c:64:3f:e8:25:c2:f1:37:4a:bb:8f:cd:8c:9e: c2:a4:c3:e2:c4:e6:0c:62:6b:81:83:3c:38:a6:1b:82:5f:40: 77:91:7f:11:b4:5f:76:7e:bb:c2:e9:ab:ca:bf:3a:6b:3c:38: 3b:58:c5:67:57:12:81:be:70:bd:55:17:c1:88:93:bf:c3:05: 74:af:1e:b2:ff:76:37:c2:89:5c:25:3b:59:ce:e6:53:e2:0c: 71:06:bb:c7:23:6b:99:a4:75:1d:34:bc:f4:b0:6f:dd:5e:55: 89:f0:80:cd:ac:4a:c6:10:76:70:8a:d7:b4:2a:54:98:54:88: 74:75:4c:96:10:08:23:f9:09:07:08:92:8b:95:6f:a7:29:9f: e7:7f:8d:2e:24:3f:8f:97:d0:cf:16:96:96:ca:c3:b0:cd:61: 51:01:da:c1:c6:e5:a5:c4:6f:59:69:1b:d7:a2:50:af:3f:4c: be:d9:b6:0e:82:1f:38:1b:1e:84:18:f0:86:41:3f:7c:d9:77: 00:94:9e:45:8d:46:bb:55:2d:0d:be:93:cb:e7:71:0b:76:06: c9:1e:da:42:7b:3e:9f:5d:08:88:5a:17:fe:e5:b9:58:ff:c0: b8:2d:0f:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE54LwAP50c6FJJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2NWUzYzMtOTZlNS00MjViLWI5MjYtNDhkMjc4MTM2 ZDQ4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTgyY2E4MTYtODQ5Yy00NDQwLTlhYTktMDdmNWFiNTE0NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSlebF+SEPglf8dz5Xb2UxzTG7baYRHe2fQN gidz8hkUgY35abU46qMzVieJnwfLecdnYdnqRgo/UVMPvKumsvxBzthUcfH8LI8w IDnSAHgWqrEJby9zradaAKSKxGpQ0NnszIhTVnWyGk3L7eHgNFVbXXu680JEL1XZ yWhUua/hMexZhNWrfoRaLOIpeDmUguDWZBtTeZBB7Jq50HWA3wMB9bnKVV6fywSu 5C15URAWePqSAxXyaGAPd38AWoq1T3xKz4YxHui08PnNGcG4ghO7BxazOhDqOFyb /ls0q7yxxZSlt5n/ZSazsj8P/DaGPUCSBh61F7xAPi5+LUTwVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJIel/QdWt9EW9jRnlGWMlsiJqQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZDY1 ZTNjMy05NmU1LTQyNWItYjkyNi00OGQyNzgxMzZkNDgvM2E0MDM2OWItOWU5MC0z ZGIzLWI4NjYtZjgyMzVkNDg0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWQ2NWUzYzMtOTZlNS00MjViLWI5 MjYtNDhkMjc4MTM2ZDQ4LzFkNjVlM2MzLTk2ZTUtNDI1Yi1iOTI2LTQ4ZDI3ODEz NmQ0OC5jcmwwHwYDVR0jBBgwFoAUtikShy6FplBuJkeFNV2oZFnMgXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZDY1ZTNjMy05NmU1LTQyNWItYjkyNi00OGQy NzgxMzZkNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIig2hqNkriefAhJBDuzA6JnKxLUshXGQ/6CXC8TdKu4/NjJ7CpMPi xOYMYmuBgzw4phuCX0B3kX8RtF92frvC6avKvzprPDg7WMVnVxKBvnC9VRfBiJO/ wwV0rx6y/3Y3wolcJTtZzuZT4gxxBrvHI2uZpHUdNLz0sG/dXlWJ8IDNrErGEHZw ite0KlSYVIh0dUyWEAgj+QkHCJKLlW+nKZ/nf40uJD+Pl9DPFpaWysOwzWFRAdrB xuWlxG9ZaRvXolCvP0y+2bYOgh84Gx6EGPCGQT982XcAlJ5FjUa7VS0NvpPL53EL dgbJHtpCez6fXQiIWhf+5blY/8C4LQ81 -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:06 2025 by rpki-client