$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa File: cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa (raw, json) Hash identifier: k3zUu5KAo+X8TEmkuaSAyRtyP6zgrO+1/qWIkRHvyLE= Subject key identifier: 8F:0B:59:2D:5E:8D:64:D8:71:4F:1A:F4:E6:88:6C:FD:C3:2A:54:48 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584BBB75941E3749D504EC8F5D80 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 23158 IP address blocks: 2606:d580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:94:1e:37:49:d5:04:ec:8f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=596189cb-b92a-4597-bde2-bd3269ba1170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:b6:87:72:02:e9:68:ca:5e:db:c9:57:c8: d6:bc:cc:7b:07:c6:5d:02:7f:f0:b3:c1:b7:9a:20: a2:0d:4a:d1:c0:bd:47:2a:91:b6:5c:99:8b:33:e5: ea:45:51:b8:39:0e:29:a3:ec:72:56:e7:38:5f:8d: 0f:09:29:44:5f:2d:95:49:24:44:02:47:0d:c4:d0: 17:b9:94:df:a6:8b:37:4f:71:e7:d9:87:50:77:23: 39:42:c8:f4:e2:e8:11:c9:07:25:8a:61:3c:4d:3c: 11:86:a8:47:46:52:a8:4e:cc:1c:14:fb:07:0f:c9: bd:e4:37:ad:4b:f2:18:b4:fc:2b:b7:5a:5b:99:65: b1:c8:78:97:0f:c3:a1:35:82:d7:e3:df:8f:4c:52: 18:26:8e:a8:36:74:0c:b5:8a:2a:54:36:7d:db:c9: d2:d0:b9:5b:5f:b7:ba:04:da:a7:f2:18:d3:9f:a1: 49:99:65:7f:97:65:97:e5:d7:bf:fa:eb:f4:5d:fd: d4:05:4c:c3:d9:fe:20:10:29:0b:0c:78:6c:db:7f: 27:b3:d1:82:f9:85:08:89:c9:ce:e3:fb:69:06:2b: 9d:65:ac:4f:35:fa:8f:77:19:ac:f2:cb:d7:36:f1: de:ee:cf:0e:83:72:e9:1c:0d:c1:d2:41:40:ca:c1: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:59:2D:5E:8D:64:D8:71:4F:1A:F4:E6:88:6C:FD:C3:2A:54:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv6: 2606:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e5:7d:40:40:79:11:98:70:10:1b:89:5e:43:0e:17:3d:76: 82:2c:aa:f0:72:8f:57:48:72:75:1c:02:30:8a:45:b6:da:33: 8d:9f:b3:f8:ff:6c:cc:81:85:b2:ac:a6:55:bf:a4:90:27:fc: 1a:e7:16:2a:fb:b4:05:d0:13:04:60:2d:5f:88:e1:4b:38:34: 76:d1:db:f2:bb:69:28:b7:f8:b8:fe:2e:bf:3b:bc:98:c0:00: 05:3e:39:d2:f5:cf:53:9c:81:c3:42:71:ba:d4:be:97:74:40: 4b:36:10:b4:cc:8d:ac:35:e8:04:b1:c9:9d:05:f7:b9:d4:30: 26:79:56:ff:a0:9a:11:e6:32:39:88:7d:da:6a:1a:7f:be:38: 7e:66:b3:d7:ce:24:82:ac:d3:bf:3b:ec:b8:19:da:91:d5:48: 5e:e0:da:20:58:02:b9:35:33:98:98:d4:83:80:c8:08:15:74: 43:3e:9e:f6:67:8d:bb:51:a8:c9:7b:92:51:e2:fc:eb:fc:bd: b2:fe:f0:d3:4d:b5:81:5a:60:a8:df:ff:0a:78:e8:a4:aa:6c: c5:77:aa:19:f3:2a:03:6c:b0:06:a4:a0:a9:df:5b:e6:ea:59: 54:8c:de:dc:dc:15:90:d8:7d:cf:16:ce:57:7e:8d:ec:33:f3: 27:f0:ae:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu7dZQeN0nVBOyPXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NTk2MTg5Y2ItYjkyYS00NTk3LWJkZTItYmQzMjY5YmExMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk862h3IC6WjKXtvJV8jWvMx7B8ZdAn/ws8G3 miCiDUrRwL1HKpG2XJmLM+XqRVG4OQ4po+xyVuc4X40PCSlEXy2VSSREAkcNxNAX uZTfpos3T3Hn2YdQdyM5Qsj04ugRyQclimE8TTwRhqhHRlKoTswcFPsHD8m95Det S/IYtPwrt1pbmWWxyHiXD8OhNYLX49+PTFIYJo6oNnQMtYoqVDZ928nS0LlbX7e6 BNqn8hjTn6FJmWV/l2WX5de/+uv0Xf3UBUzD2f4gECkLDHhs238ns9GC+YUIicnO 4/tpBiudZaxPNfqPdxms8svXNvHe7s8Og3LpHA3B0kFAysF6/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI8LWS1ejWTYcU8a9OaIbP3DKlRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvY2MwYTVmMTQtMGY0Zi0z YThiLWFkNjAtYzZlNjQ0NDZiN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCX5X1AQHkRmHAQG4leQw4XPXaCLKrwco9XSHJ1HAIwikW22jONn7P4 /2zMgYWyrKZVv6SQJ/wa5xYq+7QF0BMEYC1fiOFLODR20dvyu2kot/i4/i6/O7yY wAAFPjnS9c9TnIHDQnG61L6XdEBLNhC0zI2sNegEscmdBfe51DAmeVb/oJoR5jI5 iH3aahp/vjh+ZrPXziSCrNO/O+y4GdqR1Uhe4NogWAK5NTOYmNSDgMgIFXRDPp72 Z427UajJe5JR4vzr/L2y/vDTTbWBWmCo3/8KeOikqmzFd6oZ8yoDbLAGpKCp31vm 6llUjN7c3BWQ2H3PFs5Xfo3sM/Mn8K6a -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:39 2025 by rpki-client