$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa File: 0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa (raw, json) Hash identifier: q3r2iK56ckbFGJzgihYZRcmqgAxAWK+O7ONkpVywPnY= Subject key identifier: D9:55:C1:FD:E3:21:82:B9:55:B0:4D:35:A6:09:90:BF:2F:5C:9C:CF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC802AFDDA92119CF35C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:6000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:80:2a:fd:da:92:11:9c:f3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8b4d0bf5-4830-4ce7-9ea2-ef740db037bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:20:9c:71:53:63:95:b5:75:aa:29:84:15: 8d:e8:0d:4b:21:85:98:a0:5f:b5:c8:a4:12:e1:38: a7:2b:9c:c3:2a:08:92:75:f8:7d:ab:f0:71:de:bd: 0e:7e:38:f1:9a:8c:f9:e8:d3:02:c8:fe:e2:24:38: 94:e0:c9:6b:67:c2:2e:7a:80:06:a3:c5:d6:4a:32: 4a:4f:f9:f6:c0:33:53:1c:7a:1c:df:65:e2:a6:6a: c7:8d:06:2e:2b:fd:99:0a:f9:60:f9:5d:1d:81:d7: 01:5a:49:90:e0:b0:1c:ed:9d:3d:92:5b:dc:c0:1c: 31:a0:24:c8:20:a8:cd:8d:29:f2:04:12:23:95:b9: af:a0:a8:81:ad:6f:b5:54:64:c8:44:32:ba:51:a6: 57:3a:25:00:41:59:d7:e3:6a:9d:d3:c2:15:50:f3: a0:a4:e4:e6:2e:21:ce:92:32:f5:ca:d8:c1:b0:a9: fa:22:ad:5b:cf:ad:ae:99:ac:1b:8e:e7:ae:c0:72: 00:15:21:84:88:5f:94:08:d8:b4:86:22:dd:01:3c: 10:e7:8f:af:45:22:32:03:4a:2d:c6:e4:39:6e:ef: 43:17:b8:69:3c:58:ed:3d:e5:a0:1d:8b:a4:5b:62: ec:38:1f:bb:e5:62:c2:60:79:f0:53:45:b7:ff:05: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:55:C1:FD:E3:21:82:B9:55:B0:4D:35:A6:09:90:BF:2F:5C:9C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:da:8f:a8:d6:d1:84:22:30:ff:1a:14:73:ca:c6:dd:cc: 28:8b:18:cf:2e:04:6c:e5:7d:81:0f:18:9d:bf:d7:5f:ae:68: 9b:04:63:96:05:38:6b:f2:60:8e:4f:49:65:25:d4:f9:77:23: 65:18:c0:a1:bf:35:10:89:b2:9e:be:24:bf:88:01:be:31:77: ff:7b:8b:aa:4e:57:b4:fc:e5:5d:85:ce:88:49:13:cb:77:6b: d8:3e:eb:21:2f:7c:45:1a:5e:cf:18:ca:24:32:9a:e7:65:1b: 7a:5a:49:32:5b:23:12:87:ac:90:78:65:51:de:0d:d6:82:37: 17:0b:90:ff:a5:8e:98:12:93:17:74:b8:8c:90:33:5f:6c:4d: 55:69:b4:7b:dc:4c:fa:65:e4:df:f8:40:7e:16:dc:68:83:05: ea:4a:ef:e6:2d:08:1e:87:26:06:3c:ac:f9:c7:a0:96:7f:e0: ce:c9:e1:e8:4a:61:0d:d5:c1:94:57:68:44:a2:cd:ae:27:21: 3c:64:d9:7a:5b:b7:38:fd:4a:dd:c7:1d:f1:80:a2:9c:21:1b: 5a:f5:7e:bf:8d:67:5c:32:31:00:78:d1:2c:cf:8e:aa:b8:c6: b3:b3:8c:13:65:08:bc:5e:d0:c9:67:34:18:69:5d:48:cc:d7: db:ae:4e:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzIAq/dqSEZzzXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGI0ZDBiZjUtNDgzMC00Y2U3LTllYTItZWY3NDBkYjAzN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT8gnHFTY5W1daophBWN6A1LIYWYoF+1yKQS 4TinK5zDKgiSdfh9q/Bx3r0Ofjjxmoz56NMCyP7iJDiU4MlrZ8IueoAGo8XWSjJK T/n2wDNTHHoc32XipmrHjQYuK/2ZCvlg+V0dgdcBWkmQ4LAc7Z09klvcwBwxoCTI IKjNjSnyBBIjlbmvoKiBrW+1VGTIRDK6UaZXOiUAQVnX42qd08IVUPOgpOTmLiHO kjL1ytjBsKn6Iq1bz62umawbjueuwHIAFSGEiF+UCNi0hiLdATwQ54+vRSIyA0ot xuQ5bu9DF7hpPFjtPeWgHYukW2LsOB+75WLCYHnwU0W3/wVQnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlVwf3jIYK5VbBNNaYJkL8vXJzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZWE0YzQtMDJjYy0z MjNlLTlhZmMtYTUzNGJkNDkxOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITo2o+o1tGEIjD/GhRzysbdzCiLGM8uBGzlfYEPGJ2/11+uaJsE Y5YFOGvyYI5PSWUl1Pl3I2UYwKG/NRCJsp6+JL+IAb4xd/97i6pOV7T85V2FzohJ E8t3a9g+6yEvfEUaXs8YyiQymudlG3paSTJbIxKHrJB4ZVHeDdaCNxcLkP+ljpgS kxd0uIyQM19sTVVptHvcTPpl5N/4QH4W3GiDBepK7+YtCB6HJgY8rPnHoJZ/4M7J 4ehKYQ3VwZRXaESiza4nITxk2Xpbtzj9St3HHfGAopwhG1r1fr+NZ1wyMQB40SzP jqq4xrOzjBNlCLxe0MlnNBhpXUjM19uuThs= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:19 2025 by rpki-client