$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa File: 9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa (raw, json) Hash identifier: QYc6PglyRsdhdc2XRkJ/5R6GKzVYCQQ+fEf74ZPRsg8= Subject key identifier: BA:45:3A:9D:78:9E:94:88:8A:9E:89:95:73:36:92:47:F4:A1:2F:CF Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C0A4BE1A41D602CAD380 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 2604:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c0:a4:be:1a:41:d6:02:ca:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=0186721b-d2dd-4825-9c28-f1c4ad96c158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:47:82:cd:1a:ee:13:c7:4d:ab:2d:6e:65: f7:7d:09:11:66:9f:33:3d:e0:1e:08:d2:64:be:18: 83:40:bf:ab:11:7f:2e:87:19:dd:6e:8d:d4:85:ec: d2:f8:5f:57:be:f3:11:c4:73:8e:61:3c:4c:ff:e4: f2:31:2d:22:28:4b:09:28:69:8b:f7:8f:71:cd:fb: 78:a6:68:fb:13:57:fe:f6:f5:2b:bd:d1:89:5c:a6: 63:f9:5d:4a:24:d8:06:2e:89:2c:41:f7:2e:10:e0: 1a:ed:da:89:a7:24:1d:74:2f:bd:e4:94:75:f5:f7: e5:05:2f:5c:d4:34:32:b8:21:96:bb:d0:2c:0d:04: ef:69:33:5c:ee:71:c0:49:70:b9:37:01:d5:80:8b: f3:e0:66:dc:4f:c7:43:a6:8e:41:3c:5c:27:dc:c2: 21:df:de:fe:6c:b1:86:b6:df:7e:d1:09:31:62:e2: 38:43:3a:53:10:c2:e2:fb:d9:4c:28:3a:36:9b:66: 1e:78:26:cb:d6:f2:93:7e:3d:c8:ef:a7:82:d3:ee: d4:8e:c2:54:29:9c:4e:31:ab:24:c6:74:bc:dc:0b: 20:97:0c:1b:0c:bf:63:70:1e:5e:55:6a:49:62:0f: 23:27:fb:35:e0:74:0f:b4:a0:4e:3d:51:fa:f6:16: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:3A:9D:78:9E:94:88:8A:9E:89:95:73:36:92:47:F4:A1:2F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9794ff8d-1efa-3765-9d69-8c31ae6a2dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2604:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f8:ab:80:b5:55:30:df:0f:10:cf:5c:7e:d3:89:92:75:9c: 5f:ca:50:7b:99:29:e3:23:58:04:91:49:32:37:96:82:e3:67: cb:9d:d2:aa:30:bb:4b:72:fd:a2:43:73:ca:03:25:a0:f4:ef: eb:04:cb:68:da:56:e8:2f:ef:2b:b6:1c:20:00:0a:bf:fa:e5: eb:a3:cf:ea:1b:ff:89:19:92:aa:a7:9e:86:29:74:00:ad:56: d1:a8:c6:16:74:f5:aa:ac:f1:a2:97:34:1b:7a:87:12:45:5d: 2d:be:3f:cd:21:de:92:0d:a3:36:a1:d9:06:32:69:fa:52:e6: 70:61:10:d9:b9:8a:aa:e5:00:f4:c2:35:35:dd:df:78:b0:56: 0a:53:36:6c:8a:08:74:d4:cf:a2:ec:c0:17:ba:93:25:bd:c2: 38:c8:bd:2b:da:38:0c:93:57:06:01:d0:34:5f:fe:d2:37:61: 48:2b:a4:9c:b6:01:df:3e:a2:ea:e9:45:c1:e2:5d:d7:40:b4: 90:bc:65:de:f2:61:1f:cc:e1:49:71:98:e0:6f:fb:ba:1b:85: bb:c0:b2:92:f1:80:a1:84:49:e8:5c:ab:2c:38:12:7e:16:9c: 3e:77:9e:4d:48:0b:da:bb:85:72:5d:c1:20:d7:49:f4:45:7b: 16:55:7b:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1sCkvhpB1gLK04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MDE4NjcyMWItZDJkZC00ODI1LTljMjgtZjFjNGFkOTZjMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9dHgs0a7hPHTastbmX3fQkRZp8zPeAeCNJk vhiDQL+rEX8uhxndbo3UhezS+F9XvvMRxHOOYTxM/+TyMS0iKEsJKGmL949xzft4 pmj7E1f+9vUrvdGJXKZj+V1KJNgGLoksQfcuEOAa7dqJpyQddC+95JR19fflBS9c 1DQyuCGWu9AsDQTvaTNc7nHASXC5NwHVgIvz4GbcT8dDpo5BPFwn3MIh397+bLGG tt9+0QkxYuI4QzpTEMLi+9lMKDo2m2YeeCbL1vKTfj3I76eC0+7UjsJUKZxOMask xnS83AsglwwbDL9jcB5eVWpJYg8jJ/s14HQPtKBOPVH69hZJ9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLpFOp14npSIip6JlXM2kkf0oS/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTc5NGZmOGQtMWVmYS0z NzY1LTlkNjktOGMzMWFlNmEyZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAx+KuAtVUw3w8Qz1x+04mSdZxfylB7mSnjI1gEkUkyN5aC42fLndKq MLtLcv2iQ3PKAyWg9O/rBMto2lboL+8rthwgAAq/+uXro8/qG/+JGZKqp56GKXQA rVbRqMYWdPWqrPGilzQbeocSRV0tvj/NId6SDaM2odkGMmn6UuZwYRDZuYqq5QD0 wjU13d94sFYKUzZsigh01M+i7MAXupMlvcI4yL0r2jgMk1cGAdA0X/7SN2FIK6Sc tgHfPqLq6UXB4l3XQLSQvGXe8mEfzOFJcZjgb/u6G4W7wLKS8YChhEnoXKssOBJ+ Fpw+d55NSAvau4VyXcEg10n0RXsWVXv4 -----END CERTIFICATE-----Generated at Mon Nov 3 14:45:53 2025 by rpki-client