$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa File: 1cb2e1d6-44b8-325d-9057-3618672be5a1.roa (raw, json) Hash identifier: hdm29JTKqOahj1kqu0audhwcVvgxQW4KIYR0C4d39LI= Subject key identifier: D6:B3:4C:93:C2:D5:3A:90:E7:08:15:A6:7E:F1:B1:24:0B:16:66:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE6095FF4ED338AB941AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:e100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:60:95:ff:4e:d3:38:ab:94:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f7744dc9-71c2-450f-bff2-2b64d1172179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:56:65:ab:ce:97:1d:88:4b:e7:22:6c:7e: 66:c1:a3:4c:8e:45:a4:25:0d:63:fd:4f:fb:fa:38: bb:71:4f:f4:86:75:90:da:71:a1:8f:7d:b0:c5:bf: bf:e7:9b:2a:68:59:1e:79:cc:24:e2:6f:e2:3e:b0: 4c:3e:3a:3e:23:eb:51:50:93:05:ed:ad:54:e5:a0: 62:a5:31:7d:6b:e6:bc:ff:db:fe:98:45:75:ed:5e: df:40:19:ab:b3:85:f8:6c:62:fa:f6:ba:90:33:e3: ce:82:0d:51:1a:70:5d:60:93:aa:b0:07:6a:02:23: c7:1d:82:95:eb:c1:53:be:81:28:58:c7:d0:25:a1: 40:dc:ac:08:6c:1b:03:b3:8d:c9:23:e3:30:04:c1: 1c:b7:c5:be:c5:14:9d:7b:90:ea:b7:88:65:2f:b3: e0:7f:ab:2a:52:e0:fa:e5:fc:ca:70:cf:aa:94:f6: 5c:0d:49:43:55:3b:f5:08:c8:12:0f:c6:8e:9e:b3: 3b:6b:23:2e:0f:8b:76:e9:22:fe:ff:36:dd:a8:a6: 81:87:f4:59:0d:32:57:64:ab:2c:eb:a1:c8:c7:d7: d5:f5:fb:9d:0c:db:b1:bf:1b:e3:8d:7a:fe:3a:94: a7:49:0b:fe:f8:7e:92:7b:90:c6:a1:6c:99:de:ee: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:4C:93:C2:D5:3A:90:E7:08:15:A6:7E:F1:B1:24:0B:16:66:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:98:34:ec:f7:f8:55:78:c6:8d:c3:7c:b0:3b:9c:da:19:5c: dc:6d:89:05:12:e6:9c:06:d7:2e:49:0d:b5:5b:ab:f2:ba:a3: 7c:0b:d4:35:d6:db:23:e6:e5:ef:7e:46:72:d0:ac:9c:35:0e: 81:6c:95:3f:5f:c3:cb:c4:80:95:f6:07:50:ba:57:67:e9:cf: fe:c7:aa:d9:10:5d:92:59:c5:4e:c4:eb:fd:c7:b4:93:07:32: fd:b1:41:ec:9d:97:34:7a:4f:1e:11:76:ed:b9:d1:51:6c:88: 12:22:d2:79:0c:89:00:5f:37:5a:9d:f8:34:89:d1:fd:25:c9: 82:f1:a2:33:2e:12:c8:2f:2d:53:27:3a:22:71:a3:3c:37:2b: e6:32:ea:f9:40:5b:41:bc:3b:07:da:76:f1:70:11:92:ce:1f: 85:0c:bd:c3:46:ce:24:02:ca:f2:b7:5d:d0:10:24:4c:6d:ab: 68:7e:5b:44:e6:61:2c:d3:40:bd:97:31:2e:e9:5e:c7:c7:6b: 91:40:f0:23:34:1d:e7:54:cf:38:a3:30:f9:70:e4:f7:81:90: aa:21:f9:a2:b9:53:99:9a:ed:25:af:45:1e:6a:33:3d:00:74: 33:6d:26:21:6d:f8:a7:ec:a1:9e:14:9b:b7:a7:38:35:dd:a2: 67:32:62:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzmCV/07TOKuUGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Zjc3NDRkYzktNzFjMi00NTBmLWJmZjItMmI2NGQxMTcyMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhThWZavOlx2IS+cibH5mwaNMjkWkJQ1j/U/7 +ji7cU/0hnWQ2nGhj32wxb+/55sqaFkeecwk4m/iPrBMPjo+I+tRUJMF7a1U5aBi pTF9a+a8/9v+mEV17V7fQBmrs4X4bGL69rqQM+POgg1RGnBdYJOqsAdqAiPHHYKV 68FTvoEoWMfQJaFA3KwIbBsDs43JI+MwBMEct8W+xRSde5Dqt4hlL7Pgf6sqUuD6 5fzKcM+qlPZcDUlDVTv1CMgSD8aOnrM7ayMuD4t26SL+/zbdqKaBh/RZDTJXZKss 66HIx9fV9fudDNuxvxvjjXr+OpSnSQv++H6Se5DGoWyZ3u4crwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNazTJPC1TqQ5wgVpn7xsSQLFmYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNiMmUxZDYtNDRiOC0z MjVkLTkwNTctMzYxODY3MmJlNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSYNOz3+FV4xo3DfLA7nNoZXNxtiQUS5pwG1y5JDbVbq/K6o3wL 1DXW2yPm5e9+RnLQrJw1DoFslT9fw8vEgJX2B1C6V2fpz/7HqtkQXZJZxU7E6/3H tJMHMv2xQeydlzR6Tx4Rdu250VFsiBIi0nkMiQBfN1qd+DSJ0f0lyYLxojMuEsgv LVMnOiJxozw3K+Yy6vlAW0G8OwfadvFwEZLOH4UMvcNGziQCyvK3XdAQJExtq2h+ W0TmYSzTQL2XMS7pXsfHa5FA8CM0HedUzzijMPlw5PeBkKoh+aK5U5ma7SWvRR5q Mz0AdDNtJiFt+KfsoZ4Um7enODXdomcyYqY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:09 2025 by rpki-client