$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0858ed76-971f-3a6c-965c-acbc30bc1dbc.roa File: 0858ed76-971f-3a6c-965c-acbc30bc1dbc.roa (raw, json) Hash identifier: dtg7S0zHS7rcFOEI8lMKn1vKhrdt6g12KlffMjPd1IU= Subject key identifier: 36:10:AC:63:0C:88:FE:B2:47:C9:F9:1D:90:46:24:AA:1F:E4:18:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79BCC50B2FFFB4B3FCE6CC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0858ed76-971f-3a6c-965c-acbc30bc1dbc.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 30036 IP address blocks: 2604:2d80:3f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c5:0b:2f:ff:b4:b3:fc:e6:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9cfc7b09-c739-4058-af61-dd4a97fc3a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:3c:db:da:d3:db:54:b0:d4:21:40:72:f5: 84:87:cb:ac:9b:18:4b:27:09:86:0f:96:c5:18:20: 08:12:5e:23:e0:85:6f:2f:15:9a:ba:3c:c3:15:f0: e5:56:b4:23:ef:de:67:51:a6:ba:df:3e:5b:e7:b7: 43:21:16:74:8a:38:bb:a1:ea:73:bb:1d:d4:7a:d1: 21:4b:3c:a8:1f:ee:11:f7:f4:82:04:fc:cb:c9:45: f2:a7:8a:d0:12:6b:30:12:7a:1d:37:dd:75:d1:04: f2:87:43:bb:f4:98:c2:9a:dc:53:88:70:37:26:18: 60:72:89:0d:f3:18:72:92:98:59:ff:cb:ac:b3:b2: 7d:8c:b0:57:ec:95:7f:41:7a:86:40:53:dc:3b:3e: 65:f9:44:22:47:66:06:74:33:a5:7d:09:97:90:01: 16:2d:09:d8:49:28:0c:18:1b:02:07:e6:d2:e0:2f: 64:e5:33:dc:5c:c0:a5:1a:a3:9f:c0:df:0d:ba:db: da:76:5d:9c:b1:20:4e:7c:e6:1a:d7:b6:18:ff:a7: 36:7b:a7:ef:a1:35:c4:79:15:c8:54:79:5c:cd:e0: 7e:75:75:9d:df:f0:43:fd:98:4c:6a:65:f8:0d:71: 36:9d:8e:dc:2f:af:9c:0f:bb:70:da:08:01:6a:a1: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:10:AC:63:0C:88:FE:B2:47:C9:F9:1D:90:46:24:AA:1F:E4:18:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0858ed76-971f-3a6c-965c-acbc30bc1dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ce:aa:bb:c5:dd:61:e5:ec:28:47:ce:f5:de:54:2c:fb:ef: cf:12:a7:cc:28:d0:17:6f:01:fa:b3:a1:74:86:89:4f:58:06: 9f:51:ee:68:84:25:2a:40:54:5f:24:e0:2c:ab:87:37:92:f6: 09:58:b2:89:f0:c5:88:d2:7b:00:3e:cf:6a:c9:2d:62:91:37: 6e:4e:59:87:32:8f:9b:29:b3:65:36:e6:a4:f1:13:6b:a4:48: 85:41:32:c1:4f:86:3b:e8:da:56:71:77:03:ac:c8:e3:a8:51: ed:d1:78:03:b9:4b:62:78:af:68:74:a5:85:bd:24:f8:eb:fc: ab:74:30:a2:5f:01:cf:fc:e4:05:71:dd:e6:36:7a:45:7a:c6: 91:f1:ce:c7:e8:59:53:c0:58:5c:55:eb:7a:30:31:59:7f:d0: 21:9b:42:1d:18:4e:29:21:1a:d2:97:99:ee:51:ba:63:79:34: 5c:48:8c:5c:c7:a1:1c:50:5e:86:c3:46:2e:42:21:c0:90:f3: b5:8e:9e:8a:97:3f:11:2b:6a:8e:61:d0:6c:64:55:eb:3d:3f: 65:9a:0f:dd:fc:9b:1c:bb:1c:00:05:01:65:ac:f2:26:be:b3: 10:ec:d7:ee:59:2b:8e:71:47:70:b7:79:59:38:bd:4b:de:6c: 44:2d:db:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMULL/+0s/zmzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWNmYzdiMDktYzczOS00MDU4LWFmNjEtZGQ0YTk3ZmMzYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iw829rT21Sw1CFAcvWEh8usmxhLJwmGD5bF GCAIEl4j4IVvLxWaujzDFfDlVrQj795nUaa63z5b57dDIRZ0iji7oepzux3UetEh SzyoH+4R9/SCBPzLyUXyp4rQEmswEnodN9110QTyh0O79JjCmtxTiHA3JhhgcokN 8xhykphZ/8uss7J9jLBX7JV/QXqGQFPcOz5l+UQiR2YGdDOlfQmXkAEWLQnYSSgM GBsCB+bS4C9k5TPcXMClGqOfwN8Nutvadl2csSBOfOYa17YY/6c2e6fvoTXEeRXI VHlczeB+dXWd3/BD/ZhMamX4DXE2nY7cL6+cD7tw2ggBaqEvUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDYQrGMMiP6yR8n5HZBGJKof5BgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg1OGVkNzYtOTcxZi0z YTZjLTk2NWMtYWNiYzMwYmMxZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnOqrvF3WHl7ChHzvXeVCz7788Sp8wo0BdvAfqzoXSGiU9YBp9R 7miEJSpAVF8k4CyrhzeS9glYsonwxYjSewA+z2rJLWKRN25OWYcyj5sps2U25qTx E2ukSIVBMsFPhjvo2lZxdwOsyOOoUe3ReAO5S2J4r2h0pYW9JPjr/Kt0MKJfAc/8 5AVx3eY2ekV6xpHxzsfoWVPAWFxV63owMVl/0CGbQh0YTikhGtKXme5RumN5NFxI jFzHoRxQXobDRi5CIcCQ87WOnoqXPxErao5h0GxkVes9P2WaD938mxy7HAAFAWWs 8ia+sxDs1+5ZK45xR3C3eVk4vUvebEQt22E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:55 2025 by rpki-client