$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa File: 04d89a5f-3251-354c-86c6-5061befcb41c.roa (raw, json) Hash identifier: +E7xUvUrrPbKzejzj0AJBTy7c9U4V3sONrVxrHUYQM0= Subject key identifier: 20:70:F6:E6:2D:50:CE:AE:98:0F:2F:B5:7C:1C:A9:3E:35:15:9E:9A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4A3517B2F55D14022300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:9180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4a:35:17:b2:f5:5d:14:02:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=20d6010e-8580-40e9-af11-31ea97e99e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:e4:b5:67:e7:69:8c:6c:60:0a:45:c3:0d: f0:d5:cd:c5:fc:cd:ff:79:ad:f5:16:f7:f3:5f:ab: 65:55:e5:d2:96:fa:49:17:03:d4:48:d1:6b:6f:4c: 5f:78:96:d6:ae:84:d5:e4:f5:53:79:3c:34:ee:2b: 6b:39:4b:bc:29:89:c2:53:ce:2b:e5:8e:16:9f:28: 7a:50:ac:39:6a:5f:7e:1c:e2:88:41:02:19:bc:14: ca:48:c4:42:44:90:1d:a3:26:c4:9f:50:7f:19:c9: 40:05:5b:e4:80:2d:fb:7d:42:4a:63:91:52:16:3a: ad:90:9a:dc:32:c3:86:17:2b:10:62:23:15:fe:52: f9:c7:20:51:8e:9c:4f:0f:61:bd:b6:66:32:a2:2d: 41:46:7d:58:93:84:d9:a9:0f:ce:3e:c7:3e:00:52: fb:66:4c:a6:aa:4d:52:33:a4:7d:0c:38:17:03:29: d3:a0:de:95:b1:c1:93:9c:b9:95:f3:de:23:f7:69: 91:56:33:81:1a:dc:e4:b4:c7:e3:33:74:57:0e:69: 24:93:e1:eb:02:1d:84:d7:cc:50:80:2a:76:15:e7: be:47:1e:a3:b0:f5:06:6c:f4:95:b5:99:0b:01:4b: fb:e7:6a:95:4d:e4:4c:db:eb:18:99:d7:f2:59:ca: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:70:F6:E6:2D:50:CE:AE:98:0F:2F:B5:7C:1C:A9:3E:35:15:9E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9c:9a:b4:24:de:cd:13:57:f6:8d:dd:61:8c:39:49:03:5d: 0e:24:c8:76:c3:8a:0d:41:62:10:b6:b7:ff:d6:26:b4:3d:fd: ae:2b:72:8f:76:f8:d1:df:07:8b:eb:ba:cc:52:0b:5a:61:fa: 0f:18:84:a0:f8:84:c4:02:b6:87:45:7a:32:79:15:e9:d1:23: b1:e5:1d:b6:fe:2f:41:c6:77:55:15:92:0c:9d:f5:1d:a6:24: 95:15:cf:9a:41:8d:f3:11:25:65:fa:c1:d7:48:28:4d:37:7b: b4:b8:2a:a1:41:f2:6b:24:56:25:ea:7a:6d:0c:82:b2:3b:e0: f2:9c:74:ea:22:e3:45:82:b1:f2:8b:77:aa:83:54:7b:6e:c4: 64:71:b5:f1:f8:20:f0:fa:2f:e0:cf:ed:eb:5d:60:a7:f0:68: ba:bd:68:39:68:43:a7:22:44:3a:7b:55:1f:23:13:01:97:7b: a4:10:c0:78:6e:1d:30:21:09:19:eb:bb:f8:67:b4:b3:4c:25: d7:eb:e2:5a:da:ae:3a:01:7b:a0:3c:ba:2c:87:17:9f:e5:f8: 42:a2:ee:b9:26:d6:f0:fb:e9:90:bd:bc:ca:9d:b9:f2:14:72: 37:78:38:55:bc:03:3c:8a:0e:0f:6f:3c:aa:fd:fb:49:10:16: 8d:44:33:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzko1F7L1XRQCIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjBkNjAxMGUtODU4MC00MGU5LWFmMTEtMzFlYTk3ZTk5ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyLktWfnaYxsYApFww3w1c3F/M3/ea31Fvfz X6tlVeXSlvpJFwPUSNFrb0xfeJbWroTV5PVTeTw07itrOUu8KYnCU84r5Y4Wnyh6 UKw5al9+HOKIQQIZvBTKSMRCRJAdoybEn1B/GclABVvkgC37fUJKY5FSFjqtkJrc MsOGFysQYiMV/lL5xyBRjpxPD2G9tmYyoi1BRn1Yk4TZqQ/OPsc+AFL7Zkymqk1S M6R9DDgXAynToN6VscGTnLmV894j92mRVjOBGtzktMfjM3RXDmkkk+HrAh2E18xQ gCp2Fee+Rx6jsPUGbPSVtZkLAUv752qVTeRM2+sYmdfyWcrNywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBw9uYtUM6umA8vtXwcqT41FZ6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDRkODlhNWYtMzI1MS0z NTRjLTg2YzYtNTA2MWJlZmNiNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmcmrQk3s0TV/aN3WGMOUkDXQ4kyHbDig1BYhC2t//WJrQ9/a4r co92+NHfB4vrusxSC1ph+g8YhKD4hMQCtodFejJ5FenRI7HlHbb+L0HGd1UVkgyd 9R2mJJUVz5pBjfMRJWX6wddIKE03e7S4KqFB8mskViXqem0MgrI74PKcdOoi40WC sfKLd6qDVHtuxGRxtfH4IPD6L+DP7etdYKfwaLq9aDloQ6ciRDp7VR8jEwGXe6QQ wHhuHTAhCRnru/hntLNMJdfr4lrarjoBe6A8uiyHF5/l+EKi7rkm1vD76ZC9vMqd ufIUcjd4OFW8AzyKDg9vPKr9+0kQFo1EM1U= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:49 2025 by rpki-client