$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ae5cee6-c5a6-352a-98a5-0f5beb50c74a.roa File: 1ae5cee6-c5a6-352a-98a5-0f5beb50c74a.roa (raw, json) Hash identifier: 3eaJ6HV87nltutUfY0NYXcFTAZC5IbqBYocaNQk0gFA= Subject key identifier: F1:CC:A9:99:C5:B0:30:0F:A4:37:A9:BA:38:AE:AC:CC:23:0B:A7:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973B4152CC360B4E81E640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ae5cee6-c5a6-352a-98a5-0f5beb50c74a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:c080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3b:41:52:cc:36:0b:4e:81:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=aac84db4-fbe3-433f-9852-f7c441fb5cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:6b:af:1b:4d:4d:8c:2b:85:ae:8e:7f:fd: f2:52:83:40:2c:08:b7:41:05:00:02:9f:10:28:c2: d0:b1:65:93:eb:94:d0:ef:c3:8a:53:4b:da:b0:9e: d5:42:7b:f9:cf:75:e9:55:3d:4e:66:6f:32:a7:eb: d4:9a:1b:5d:15:19:f0:92:36:ad:ae:35:c6:51:88: de:93:81:80:c1:0c:f3:03:7b:4e:1a:df:ca:ae:60: 19:bb:74:7a:3e:2d:d3:a2:29:77:96:d3:80:c1:b5: ba:40:df:19:a1:eb:e0:71:15:62:7a:8c:23:dd:ca: e8:e3:2c:75:db:b7:d8:78:9d:16:b2:f6:db:bc:34: 6f:76:79:73:cf:33:2d:7a:63:1a:ac:d5:04:69:0b: a7:de:55:5d:c6:e2:d8:11:01:cf:7d:98:f4:d3:9a: 64:24:97:9c:0c:a8:7f:6c:23:54:f9:49:bd:4f:d1: 08:06:de:8c:03:90:3d:8d:c5:4d:65:b5:20:87:d3: 2c:a1:87:06:28:ee:c9:a5:ba:ba:f5:43:97:f4:15: 40:16:23:31:d9:85:3e:26:d0:c1:85:ca:08:b3:90: 66:6e:ee:6a:4f:ae:73:1c:52:48:38:52:ad:32:81: 06:b9:a0:82:1f:e9:9a:22:7b:d1:67:12:bc:d5:6e: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CC:A9:99:C5:B0:30:0F:A4:37:A9:BA:38:AE:AC:CC:23:0B:A7:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ae5cee6-c5a6-352a-98a5-0f5beb50c74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0f:8a:94:ac:24:5f:5b:68:fc:22:49:a5:54:3d:ec:6d:e0: 1a:fc:12:2f:44:fc:da:8f:d9:db:0c:6a:85:d1:7a:fa:07:11: 77:81:5b:15:45:65:c3:d6:a2:39:25:f3:53:e9:32:7b:68:0a: f4:be:cf:ef:c3:57:d1:cd:59:ad:8a:fe:1c:c9:75:71:26:13: a9:35:ec:cc:75:c2:89:36:2f:55:00:ce:b5:e2:b1:ef:98:09: e8:6b:70:5a:76:e0:be:ba:f7:20:54:9e:8a:ee:16:26:1a:3b: 32:9c:17:c2:cf:7a:a2:45:ae:a9:9e:44:80:13:49:c4:6e:23: 53:9f:a3:dd:8d:22:c1:8b:47:6f:ec:b8:ee:7e:68:66:86:f7: f0:21:c1:7a:22:f8:ef:d2:99:2c:f2:6c:d7:f5:e9:0b:1f:a6: 16:48:d8:00:97:71:1c:58:3e:5c:e8:8d:85:b0:76:7e:75:1e: a3:e7:97:04:b9:2d:35:19:fd:7c:c2:f4:bc:11:3b:ab:d5:0a: 15:73:ce:06:af:37:a8:44:a5:b5:f2:19:15:cb:47:81:8c:32: 8c:32:2d:3d:7d:11:17:a4:b5:e2:3c:4b:70:6e:0c:0e:65:b2: b9:e1:86:07:16:c6:a8:81:84:92:95:09:e1:65:d6:36:b1:19: 9c:e3:f9:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnlztBUsw2C06B5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWFjODRkYjQtZmJlMy00MzNmLTk4NTItZjdjNDQxZmI1Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PprrxtNTYwrha6Of/3yUoNALAi3QQUAAp8Q KMLQsWWT65TQ78OKU0vasJ7VQnv5z3XpVT1OZm8yp+vUmhtdFRnwkjatrjXGUYje k4GAwQzzA3tOGt/KrmAZu3R6Pi3Toil3ltOAwbW6QN8ZoevgcRVieowj3cro4yx1 27fYeJ0WsvbbvDRvdnlzzzMtemMarNUEaQun3lVdxuLYEQHPfZj005pkJJecDKh/ bCNU+Um9T9EIBt6MA5A9jcVNZbUgh9MsoYcGKO7Jpbq69UOX9BVAFiMx2YU+JtDB hcoIs5Bmbu5qT65zHFJIOFKtMoEGuaCCH+maInvRZxK81W4gLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPHMqZnFsDAPpDepujiurMwjC6f6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFlNWNlZTYtYzVhNi0z NTJhLTk4YTUtMGY1YmViNTBjNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgMCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMPipSsJF9baPwiSaVUPext4Br8Ei9E/NqP2dsMaoXRevoHEXeB WxVFZcPWojkl81PpMntoCvS+z+/DV9HNWa2K/hzJdXEmE6k17Mx1wok2L1UAzrXi se+YCehrcFp24L669yBUnoruFiYaOzKcF8LPeqJFrqmeRIATScRuI1Ofo92NIsGL R2/suO5+aGaG9/AhwXoi+O/SmSzybNf16QsfphZI2ACXcRxYPlzojYWwdn51HqPn lwS5LTUZ/XzC9LwRO6vVChVzzgavN6hEpbXyGRXLR4GMMowyLT19ERekteI8S3Bu DA5lsrnhhgcWxqiBhJKVCeFl1jaxGZzj+SA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:07 2025 by rpki-client