$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa File: 2288a65b-8997-3334-ad1f-8f6eb9cce018.roa (raw, json) Hash identifier: g4mozGUixDIFa3G2Q83vm7fbIPGlhiEvURjoRBWozBE= Subject key identifier: 5A:3C:72:10:72:43:1C:4E:35:B0:9F:AE:ED:4F:23:86:F6:CF:BD:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201FB036885C3CDC30AA880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:3800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fb:03:68:85:c3:cd:c3:0a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=012b2829-bb14-4616-b139-cacbff2b4839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:92:81:45:39:97:58:fc:4a:bf:b0:b5:66: e9:5f:a4:1e:6c:ff:cc:14:4d:ae:12:37:ed:37:c3: 4c:81:22:fe:f4:eb:96:32:eb:23:7a:5f:52:3d:57: 6d:0b:1f:40:1f:6a:1c:26:af:e5:5c:cd:5c:b6:38: 8e:5b:ff:0c:10:09:5b:ad:52:27:65:e7:fa:77:ba: 9b:78:a0:da:c7:8d:44:e1:73:6d:57:a3:b6:49:aa: 5d:2e:06:b6:14:7c:17:12:e7:6c:6a:31:ed:59:ae: 48:98:7d:d9:25:90:02:ba:a7:de:73:16:00:a6:2f: b4:ec:ab:64:83:d0:81:ea:bb:ee:6a:c5:b8:9d:83: 06:f4:82:d8:24:c2:4f:80:3a:25:b3:74:1a:53:58: 54:14:c8:fd:37:34:16:76:7f:70:24:79:54:c4:70: 0a:b6:c4:4d:66:f6:28:d6:96:19:c0:bb:36:05:00: 86:a4:16:6e:6d:68:f8:ff:4e:29:36:49:3c:4d:f2: bc:cc:a9:3a:08:c0:8e:fe:9c:7e:b0:33:cd:e5:e6: af:99:d0:48:96:37:c3:02:c5:13:b2:ed:4d:71:6b: e4:50:62:22:5c:5d:0f:5d:db:48:8c:5f:33:4d:c4: 63:81:73:ee:30:19:38:3f:b9:b6:ad:49:9e:ea:df: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:72:10:72:43:1C:4E:35:B0:9F:AE:ED:4F:23:86:F6:CF:BD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:aa:24:43:e1:e2:47:19:68:e7:be:ea:c3:e1:86:7f:1e:30: bc:7b:3c:0a:97:c8:68:dc:ad:3e:5e:13:09:0d:4b:2b:04:66: 94:4c:d9:25:03:0f:3e:9e:f2:10:91:a7:31:f5:df:23:7b:44: e3:f9:44:d4:46:4b:33:3d:88:18:34:a1:f1:64:8f:c7:e4:4a: 5f:a8:72:9e:85:89:6d:05:e4:48:f0:87:15:bf:a9:e0:dd:0a: 70:e1:b0:03:84:14:6c:3e:7c:3c:0f:31:d3:5a:7f:5f:60:e0: 78:63:59:35:2a:34:65:26:cf:c3:44:bf:11:0f:6d:9f:30:91: 90:f9:45:db:d8:ea:50:d2:c3:91:87:9e:ad:e0:6f:3b:37:ce: 66:15:7f:88:07:c7:54:44:97:a6:9e:73:79:86:e9:88:9f:aa: 64:33:54:25:c4:c9:04:e3:89:9e:68:19:71:31:3f:d0:42:c4: 36:9a:73:b5:0b:a2:e1:4b:47:82:dc:9c:19:e0:2e:f9:74:5f: ae:06:ca:2d:13:1f:b3:08:56:32:8d:be:9f:4b:2f:dc:0d:7a: 46:c9:78:93:2d:66:22:2d:c4:60:eb:43:67:d7:4f:dc:f9:31: bd:01:6e:f5:45:7b:e7:cf:84:62:be:dd:ca:48:85:5c:c6:27: 16:2c:a7:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfsDaIXDzcMKqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDEyYjI4MjktYmIxNC00NjE2LWIxMzktY2FjYmZmMmI0ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VqSgUU5l1j8Sr+wtWbpX6QebP/MFE2uEjft N8NMgSL+9OuWMusjel9SPVdtCx9AH2ocJq/lXM1ctjiOW/8MEAlbrVInZef6d7qb eKDax41E4XNtV6O2SapdLga2FHwXEudsajHtWa5ImH3ZJZACuqfecxYApi+07Ktk g9CB6rvuasW4nYMG9ILYJMJPgDols3QaU1hUFMj9NzQWdn9wJHlUxHAKtsRNZvYo 1pYZwLs2BQCGpBZubWj4/04pNkk8TfK8zKk6CMCO/px+sDPN5eavmdBIljfDAsUT su1NcWvkUGIiXF0PXdtIjF8zTcRjgXPuMBk4P7m2rUme6t8qywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFo8chByQxxONbCfru1PI4b2z73/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjI4OGE2NWItODk5Ny0z MzM0LWFkMWYtOGY2ZWI5Y2NlMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGqJEPh4kcZaOe+6sPhhn8eMLx7PAqXyGjcrT5eEwkNSysEZpRM 2SUDDz6e8hCRpzH13yN7ROP5RNRGSzM9iBg0ofFkj8fkSl+ocp6FiW0F5EjwhxW/ qeDdCnDhsAOEFGw+fDwPMdNaf19g4HhjWTUqNGUmz8NEvxEPbZ8wkZD5RdvY6lDS w5GHnq3gbzs3zmYVf4gHx1REl6aec3mG6YifqmQzVCXEyQTjiZ5oGXExP9BCxDaa c7ULouFLR4LcnBngLvl0X64Gyi0TH7MIVjKNvp9LL9wNekbJeJMtZiItxGDrQ2fX T9z5Mb0BbvVFe+fPhGK+3cpIhVzGJxYsp2A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:04 2025 by rpki-client