$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa File: 0013c481-b1c3-3f22-ac9e-7711e14fd828.roa (raw, json) Hash identifier: qgOFqfwyyZ6IP+cVNputKI4JGzvDhQJqaliX3xa9KvI= Subject key identifier: D6:78:88:57:89:4D:27:56:57:F3:84:3D:BF:82:CE:E8:10:0C:55:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B3C51B5BC6D1AF87EDCF16300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 2604:2d80:3380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b5:bc:6d:1a:f8:7e:dc:f1:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=8fe81536-69a7-494c-a4f6-81e6d87abd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:9c:8d:a5:74:7a:3d:ea:d8:11:24:64:fa: f3:83:0c:2e:83:a9:e0:c6:a7:71:98:af:4e:31:a4: 70:c1:6f:b3:35:15:0d:6f:cd:ce:80:56:32:9e:ad: 74:c7:b6:5b:1f:36:fe:4a:55:0f:bc:c0:de:21:12: a0:81:cd:e8:7c:d0:b2:98:3b:89:bc:cb:eb:47:4f: 74:e3:cf:81:39:5d:54:20:ea:55:24:8b:b6:d9:dd: 6e:4a:18:f4:53:2c:d8:a5:c7:86:16:4d:4f:4a:04: 93:cb:08:45:e3:fc:68:0e:a9:f8:01:cc:56:2c:21: 9e:3e:35:33:e2:a9:37:ca:68:b6:00:9f:19:98:d7: 91:60:37:a8:3f:ce:51:ec:82:2e:eb:9d:ed:b1:f1: aa:6d:8e:aa:d6:e0:d3:78:79:6c:7d:53:6d:8b:12: 60:45:86:a8:3b:e7:46:37:21:05:06:eb:10:ae:b4: 6f:37:1b:6f:56:bd:c5:bf:fd:5f:56:ac:4f:3a:5f: b5:46:f4:a5:01:b6:a4:c8:65:b9:60:b0:05:a0:1e: e5:e5:09:7b:f3:46:6e:62:99:6b:cd:13:50:71:99: 24:9e:ce:bf:54:2a:45:bd:48:6e:80:fd:8d:43:13: 79:1e:00:57:ba:35:57:26:cb:b6:8b:f1:96:b6:7b: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:78:88:57:89:4D:27:56:57:F3:84:3D:BF:82:CE:E8:10:0C:55:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:64:42:d5:da:2f:60:35:c0:e2:e2:6b:a4:a7:b5:9a:36:d9: f7:a9:9c:f2:6e:4b:32:ad:30:33:ad:df:4a:c0:c9:db:21:02: dd:be:7f:5c:8c:78:33:98:3d:50:68:77:3c:a7:88:fd:7d:9c: 28:9d:c3:c7:63:03:ed:2a:94:35:37:b6:37:22:b5:82:9b:9c: 2b:15:8c:4d:38:0b:a5:95:df:8e:d3:30:93:20:5f:3a:2f:83: d1:9b:96:5f:ff:e0:2a:7a:c3:ca:01:d5:5a:0a:1c:b4:92:37: 03:9e:f2:5e:63:0a:8d:bf:0e:a8:78:f2:6d:b6:15:2f:2d:17: 99:47:df:94:f8:19:0f:99:4a:a0:3b:93:19:e6:21:57:d0:1c: 49:da:84:c1:0a:bd:99:78:3a:93:31:1b:39:88:60:8f:1c:e1: f4:df:cb:f3:25:26:b2:04:f4:0a:09:ef:09:6c:79:34:9b:1e: 4b:bf:93:5c:d8:1c:8c:c9:93:71:1c:ac:46:44:34:41:01:89: b3:73:b9:d2:59:44:b9:8f:66:14:e0:df:8a:8c:52:4f:70:8f: ec:6b:eb:9c:a4:1a:b0:c2:e1:fa:67:98:81:0d:ea:bf:b3:a7: 81:73:39:20:97:81:59:39:d7:9f:78:38:36:c6:d4:3e:2c:bb: 33:d3:43:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs8UbW8bRr4ftzxYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OGZlODE1MzYtNjlhNy00OTRjLWE0ZjYtODFlNmQ4N2FiZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCScjaV0ej3q2BEkZPrzgwwug6ngxqdxmK9O MaRwwW+zNRUNb83OgFYynq10x7ZbHzb+SlUPvMDeIRKggc3ofNCymDuJvMvrR090 48+BOV1UIOpVJIu22d1uShj0UyzYpceGFk1PSgSTywhF4/xoDqn4AcxWLCGePjUz 4qk3ymi2AJ8ZmNeRYDeoP85R7IIu653tsfGqbY6q1uDTeHlsfVNtixJgRYaoO+dG NyEFBusQrrRvNxtvVr3Fv/1fVqxPOl+1RvSlAbakyGW5YLAFoB7l5Ql780ZuYplr zRNQcZkkns6/VCpFvUhugP2NQxN5HgBXujVXJsu2i/GWtnu33wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZ4iFeJTSdWV/OEPb+CzugQDFWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDAxM2M0ODEtYjFjMy0z ZjIyLWFjOWUtNzcxMWUxNGZkODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZkQtXaL2A1wOLia6SntZo22fepnPJuSzKtMDOt30rAydshAt2+ f1yMeDOYPVBodzyniP19nCidw8djA+0qlDU3tjcitYKbnCsVjE04C6WV347TMJMg Xzovg9Gbll//4Cp6w8oB1VoKHLSSNwOe8l5jCo2/Dqh48m22FS8tF5lH35T4GQ+Z SqA7kxnmIVfQHEnahMEKvZl4OpMxGzmIYI8c4fTfy/MlJrIE9AoJ7wlseTSbHku/ k1zYHIzJk3EcrEZENEEBibNzudJZRLmPZhTg34qMUk9wj+xr65ykGrDC4fpnmIEN 6r+zp4FzOSCXgVk51594ODbG1D4suzPTQ1c= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:14 2025 by rpki-client