$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23854ff4-9ba0-3205-a093-c2b4a75ee0ae.roa File: 23854ff4-9ba0-3205-a093-c2b4a75ee0ae.roa (raw, json) Hash identifier: LHmSEwdsl2McCK5+gA8xWRI9i/gAnc2Zz2iiHeZ8FqM= Subject key identifier: 22:42:8B:F5:FD:8A:B0:0A:BE:E2:A0:BE:7A:33:01:40:9F:E6:61:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201FCF5983410B3E7DFEC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23854ff4-9ba0-3205-a093-c2b4a75ee0ae.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:e180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fc:f5:98:34:10:b3:e7:df:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f2bae27c-86b2-4739-96da-987684ef7086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:ee:d1:7a:2d:76:7c:80:54:8e:74:8e:8a: e3:4e:0a:11:23:4c:9e:e7:40:56:ef:4e:fb:d7:f7: 15:63:fa:8e:7a:da:5e:f9:e5:b2:82:8b:28:65:06: 4a:c0:82:e5:83:4c:42:b1:f4:e7:a9:25:63:59:68: 02:19:36:d2:83:46:f7:6f:65:6c:dc:65:4b:a4:2e: 0d:2e:06:98:81:50:38:49:15:83:1f:27:9c:30:72: 4c:a2:a6:9e:45:ad:db:62:ab:c6:f0:f1:f3:f9:85: 2f:11:3e:d4:9a:ad:4d:2f:6d:67:19:ef:a3:3f:7f: 62:af:1c:d5:eb:0b:6b:26:7e:dc:41:aa:bb:d3:85: 54:f9:65:75:06:c2:d3:e1:b1:95:2d:77:16:fb:83: 16:b4:d2:a7:e7:30:1b:12:db:32:3e:e5:7c:5b:65: 37:c2:76:fc:20:20:13:57:e7:5a:93:3f:72:4b:9d: a9:78:2b:fc:44:7c:38:e8:9c:46:fc:f4:af:8e:4c: 5a:08:be:01:73:83:33:ec:f5:88:2f:e5:01:94:3c: 9d:42:9b:f4:27:00:2a:ef:43:1b:59:09:75:e8:4c: ab:31:77:d8:cc:74:38:56:fd:81:d0:44:f6:7e:5e: bb:bf:da:88:4d:07:61:62:f7:2b:60:8c:21:ec:34: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:8B:F5:FD:8A:B0:0A:BE:E2:A0:BE:7A:33:01:40:9F:E6:61:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23854ff4-9ba0-3205-a093-c2b4a75ee0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:16:61:44:89:57:e9:e0:02:71:7a:99:7f:6a:25:a2:ec:af: 8f:98:1c:89:7a:bb:bb:73:cb:1f:22:13:3c:c5:09:1e:73:f6: 03:af:3a:75:3e:e9:b9:7e:7a:2a:31:e4:7b:c5:58:4a:0f:7f: c7:2c:d0:28:db:28:e0:eb:90:12:39:b7:6b:8c:ea:94:f5:cd: da:fc:d2:19:f9:85:bc:55:e9:93:bd:ae:1d:2b:14:4c:56:4d: 13:42:38:99:24:c1:69:f2:da:46:36:97:24:be:ae:40:a0:64: 42:0a:14:ce:9c:d6:36:9b:4f:21:26:97:01:91:f4:ba:c6:cd: e2:d2:c6:2d:07:9e:fd:3e:78:32:c4:48:18:01:c7:8e:eb:77: e9:61:dc:a4:78:c1:f6:af:5a:53:0a:90:57:04:db:30:9b:62: 53:ed:5b:ff:bf:60:09:31:59:3d:2e:06:02:c5:2f:84:2f:79: 24:01:f3:97:7d:91:7d:47:ea:ee:8e:86:51:b4:8b:69:7a:18: 66:21:6d:8e:3c:1b:09:03:41:74:8c:34:15:02:c7:3d:96:3d: 11:66:85:2b:ca:b9:a2:14:92:46:38:25:98:20:34:cc:b2:c0: 0c:75:b5:29:1c:c9:4e:c6:54:c2:4c:26:6d:9f:6d:72:92:7b: 77:66:34:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfz1mDQQs+ff7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjJiYWUyN2MtODZiMi00NzM5LTk2ZGEtOTg3Njg0ZWY3MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKru0XotdnyAVI50jorjTgoRI0ye50BW7077 1/cVY/qOetpe+eWygosoZQZKwILlg0xCsfTnqSVjWWgCGTbSg0b3b2Vs3GVLpC4N LgaYgVA4SRWDHyecMHJMoqaeRa3bYqvG8PHz+YUvET7Umq1NL21nGe+jP39irxzV 6wtrJn7cQaq704VU+WV1BsLT4bGVLXcW+4MWtNKn5zAbEtsyPuV8W2U3wnb8ICAT V+dakz9yS52peCv8RHw46JxG/PSvjkxaCL4Bc4Mz7PWIL+UBlDydQpv0JwAq70Mb WQl16EyrMXfYzHQ4Vv2B0ET2fl67v9qITQdhYvcrYIwh7DTxywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJCi/X9irAKvuKgvnozAUCf5mEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM4NTRmZjQtOWJhMC0z MjA1LWEwOTMtYzJiNGE3NWVlMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8WYUSJV+ngAnF6mX9qJaLsr4+YHIl6u7tzyx8iEzzFCR5z9gOv OnU+6bl+eiox5HvFWEoPf8cs0CjbKODrkBI5t2uM6pT1zdr80hn5hbxV6ZO9rh0r FExWTRNCOJkkwWny2kY2lyS+rkCgZEIKFM6c1jabTyEmlwGR9LrGzeLSxi0Hnv0+ eDLESBgBx47rd+lh3KR4wfavWlMKkFcE2zCbYlPtW/+/YAkxWT0uBgLFL4QveSQB 85d9kX1H6u6OhlG0i2l6GGYhbY48GwkDQXSMNBUCxz2WPRFmhSvKuaIUkkY4JZgg NMyywAx1tSkcyU7GVMJMJm2fbXKSe3dmNBE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:07 2025 by rpki-client