$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa File: 108d38b5-d516-319e-93f7-5d3c6a4ba434.roa (raw, json) Hash identifier: Ziy7SK1XO4I+uzc6R/ke0vZI6zu27EV/ra1L7qORPtA= Subject key identifier: 65:FD:BB:D1:A1:26:80:2B:28:2B:A1:99:F8:5D:E1:C6:07:42:A0:E8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620233974855DADD72C0FD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:b400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:33:97:48:55:da:dd:72:c0:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2a20e657-a337-448e-a666-dfbd81a8bf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:59:79:82:4b:93:82:e7:ab:2e:bd:c1:26:07: f1:5b:83:5b:a2:9f:8b:2c:04:3e:ab:23:cc:42:3b: af:b8:48:39:7d:f4:77:be:84:c6:5f:3c:79:69:c4: d4:ca:77:05:d8:ad:6c:7a:1f:e5:cf:f4:c8:39:55: 7e:d5:69:91:16:e8:a1:f7:6e:d9:dd:6f:6b:9c:4a: 42:c1:f0:98:ee:16:b3:40:91:48:f9:1d:a6:22:e8: 28:3f:2e:73:ce:4f:f6:e2:61:e6:c5:63:b1:81:84: d4:a0:c9:bd:58:ae:fa:62:93:2f:3d:b1:ae:eb:84: 23:64:6c:cc:0d:71:44:d4:4a:35:44:49:5e:20:75: 5b:42:fa:8c:bc:6a:4a:0a:91:6a:27:6d:f9:0f:6a: a6:eb:da:12:03:f6:a9:31:4e:87:08:ab:41:36:59: ce:3d:cc:b6:2d:80:4e:4a:16:ba:dc:d3:75:8a:05: 59:7b:33:54:39:84:76:60:55:ef:06:02:52:54:13: 4e:08:21:02:b5:d2:69:1a:cc:bb:ec:82:0c:f5:f6: 4d:66:c8:a5:46:1c:87:78:44:02:d2:46:d0:95:84: a5:8f:2f:68:1b:e8:3b:a9:44:fb:52:e7:e8:70:20: e9:8f:5c:4a:07:62:3e:d2:eb:8a:7c:5e:5c:52:d2: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:BB:D1:A1:26:80:2B:28:2B:A1:99:F8:5D:E1:C6:07:42:A0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:26:78:22:cb:1d:1b:ff:5a:2b:bf:c5:9a:e4:3b:18:34:36: 66:77:f7:27:f8:cb:d6:c8:8a:f0:fd:03:a3:2e:30:f4:ad:34: 8a:9e:80:4f:21:5c:ee:69:60:28:30:e0:68:75:cb:44:c4:02: 8b:99:60:58:b3:4f:2c:2a:c8:9c:13:b7:19:6a:05:af:4a:40: b6:29:53:10:88:c3:47:7b:db:ed:4a:f3:4b:31:fa:c2:67:99: e0:f8:6e:49:2b:df:55:66:6d:18:18:7b:2c:0c:a4:1a:81:a4: 83:92:d9:00:cb:f4:bd:75:97:97:14:62:8d:62:88:02:92:72: f0:5e:62:49:ad:c6:b6:ba:9a:b1:af:c6:19:dc:d6:4a:2e:a7: 4a:0c:7a:9f:5f:2b:3f:8c:27:3e:73:47:9f:e6:0a:99:f3:da: 60:19:d7:49:c8:98:93:a7:8f:a8:45:86:95:90:63:f9:af:48: b1:6f:95:5e:9a:2f:1c:a9:d0:04:0a:22:c9:bd:2f:07:1e:b3: 75:2b:a8:9e:31:69:c2:25:78:69:c0:d5:5e:12:89:3c:c6:fa: bb:95:3c:ec:74:ec:bb:2d:fb:5e:3c:00:c5:ef:d9:df:3c:00: 5b:08:28:61:30:da:b5:bb:0a:58:fa:a5:3d:34:e3:94:30:18: 60:87:8a:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjOXSFXa3XLA/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmEyMGU2NTctYTMzNy00NDhlLWE2NjYtZGZiZDgxYThiZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFl5gkuTguerLr3BJgfxW4Nbop+LLAQ+qyPM QjuvuEg5ffR3voTGXzx5acTUyncF2K1seh/lz/TIOVV+1WmRFuih927Z3W9rnEpC wfCY7hazQJFI+R2mIugoPy5zzk/24mHmxWOxgYTUoMm9WK76YpMvPbGu64QjZGzM DXFE1Eo1REleIHVbQvqMvGpKCpFqJ235D2qm69oSA/apMU6HCKtBNlnOPcy2LYBO Sha63NN1igVZezNUOYR2YFXvBgJSVBNOCCECtdJpGsy77IIM9fZNZsilRhyHeEQC 0kbQlYSljy9oG+g7qUT7UufocCDpj1xKB2I+0uuKfF5cUtI9XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGX9u9GhJoArKCuhmfhd4cYHQqDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTA4ZDM4YjUtZDUxNi0z MTllLTkzZjctNWQzYzZhNGJhNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4meCLLHRv/Wiu/xZrkOxg0NmZ39yf4y9bIivD9A6MuMPStNIqe gE8hXO5pYCgw4Gh1y0TEAouZYFizTywqyJwTtxlqBa9KQLYpUxCIw0d72+1K80sx +sJnmeD4bkkr31VmbRgYeywMpBqBpIOS2QDL9L11l5cUYo1iiAKScvBeYkmtxra6 mrGvxhnc1koup0oMep9fKz+MJz5zR5/mCpnz2mAZ10nImJOnj6hFhpWQY/mvSLFv lV6aLxyp0AQKIsm9Lwces3UrqJ4xacIleGnA1V4SiTzG+ruVPOx07Lst+148AMXv 2d88AFsIKGEw2rW7Clj6pT0045QwGGCHiu0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:43 2025 by rpki-client