$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa File: 23e65f7f-9582-3182-acd5-2c4e73dd7547.roa (raw, json) Hash identifier: ZjH6u62gFTnAeFESB4iF84lGPdW8C/601zX94m1xzCs= Subject key identifier: 88:68:22:A7:37:44:F1:37:02:8E:95:8B:92:23:74:30:F4:9A:E7:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4B491D721DABDF165B3D85C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa Signing time: Tue 23 Sep 2025 21:40:39 +0000 ROA not before: Tue 23 Sep 2025 21:40:39 +0000 ROA not after: Mon 22 Dec 2025 22:40:39 +0000 asID: 30036 IP address blocks: 2604:2d81:3100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:49:1d:72:1d:ab:df:16:5b:3d:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 23 21:40:39 2025 GMT Not After : Dec 22 22:40:39 2025 GMT Subject: CN=8c7dfd2d-9ebe-47bd-93e7-5e24443135e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:f0:f9:dd:9d:2c:80:3d:8c:ec:b0:11:8f: 77:9c:dc:97:6c:f0:9c:e8:08:db:3f:61:ac:ef:ab: a8:4c:30:ae:46:f4:2d:b2:da:fa:db:d2:7a:dc:81: a6:92:a8:c6:3f:54:15:7a:67:99:18:35:df:a2:0b: e7:ed:1a:10:7e:cc:c8:48:e1:8d:cb:9d:4b:28:b9: 60:7d:e4:a4:84:0c:91:7e:26:d0:16:e2:c1:30:21: 38:fa:4b:f3:f3:4a:9c:6c:72:26:7f:1a:16:be:7b: 12:6a:0b:9b:23:59:e3:df:2d:79:75:e6:d8:e4:d9: 9d:22:bc:a8:72:38:21:70:0e:43:6a:9b:db:53:c2: 7d:e7:5b:2f:bf:a8:a2:a8:f2:33:25:46:32:0c:0e: ce:28:73:dc:c3:b2:22:d4:26:64:f6:f9:ab:4e:91: 90:33:98:34:65:a7:57:ce:22:11:f2:36:36:8d:7b: 0b:0c:dd:3e:15:98:d1:8f:dd:4d:c9:b6:48:7e:d3: de:aa:6f:b2:43:4a:c5:53:9b:54:4b:fe:f7:1a:b3: a3:99:c9:2a:1a:fa:d9:5f:34:db:67:84:e6:0c:87: 1f:47:43:93:45:de:d9:7b:2b:5d:f4:ba:bf:15:44: e2:99:48:b9:86:3f:79:23:45:77:68:ca:e3:f4:2a: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:68:22:A7:37:44:F1:37:02:8E:95:8B:92:23:74:30:F4:9A:E7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d4:20:8e:f4:8b:33:62:67:e7:b9:d6:54:40:0d:72:44:bd: 75:16:ca:70:02:ee:30:fb:a0:7e:9f:30:73:d5:c9:69:cf:e2: 0f:fc:17:e8:59:f4:d1:d0:a6:08:f7:45:14:f0:64:9c:7a:1c: dd:4e:d4:04:c7:bb:7c:55:84:43:9b:7e:d6:62:23:de:31:5c: 89:e8:17:bf:74:e1:71:ac:b8:98:fc:ee:72:93:6c:69:9c:bc: a2:81:e3:9b:96:e5:3b:fe:67:c1:eb:55:f7:05:b2:35:d0:3b: ac:67:d1:15:d2:de:76:65:4b:56:47:4d:b3:37:6b:25:91:65: 39:31:77:39:12:10:a2:b9:ed:91:1e:43:fd:b5:1b:e8:a2:57: 45:fb:31:82:85:c7:c1:d1:51:8d:c8:08:ae:ce:c7:a6:6c:25: f9:94:84:91:43:d9:84:b5:03:88:a0:87:d5:67:fd:80:f7:ee: 20:c3:bb:c1:d6:64:32:ff:86:55:b3:8b:55:1b:d7:92:ba:67: 14:45:3f:23:20:c3:47:ad:1f:af:a0:84:75:c8:31:3d:ce:14: 91:73:9d:45:4e:71:77:54:18:45:0d:98:83:58:06:41:13:f4: 14:72:15:19:6e:08:4e:67:21:c5:96:6e:06:40:f7:be:93:bb: 71:4f:72:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLSR1yHavfFls9hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMzIxNDAzOVoXDTI1MTIyMjIyNDAzOVowLzEtMCsGA1UEAxMk OGM3ZGZkMmQtOWViZS00N2JkLTkzZTctNWUyNDQ0MzEzNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbbw+d2dLIA9jOywEY93nNyXbPCc6AjbP2Gs 76uoTDCuRvQtstr629J63IGmkqjGP1QVemeZGDXfogvn7RoQfszISOGNy51LKLlg feSkhAyRfibQFuLBMCE4+kvz80qcbHImfxoWvnsSagubI1nj3y15debY5NmdIryo cjghcA5DapvbU8J951svv6iiqPIzJUYyDA7OKHPcw7Ii1CZk9vmrTpGQM5g0ZadX ziIR8jY2jXsLDN0+FZjRj91NybZIftPeqm+yQ0rFU5tUS/73GrOjmckqGvrZXzTb Z4TmDIcfR0OTRd7Zeytd9Lq/FUTimUi5hj95I0V3aMrj9CoW/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhoIqc3RPE3Ao6Vi5IjdDD0mudzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjNlNjVmN2YtOTU4Mi0z MTgyLWFjZDUtMmM0ZTczZGQ3NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzUII70izNiZ+e51lRADXJEvXUWynAC7jD7oH6fMHPVyWnP4g/8 F+hZ9NHQpgj3RRTwZJx6HN1O1ATHu3xVhEObftZiI94xXInoF7904XGsuJj87nKT bGmcvKKB45uW5Tv+Z8HrVfcFsjXQO6xn0RXS3nZlS1ZHTbM3ayWRZTkxdzkSEKK5 7ZEeQ/21G+iiV0X7MYKFx8HRUY3ICK7Ox6ZsJfmUhJFD2YS1A4igh9Vn/YD37iDD u8HWZDL/hlWzi1Ub15K6ZxRFPyMgw0etH6+ghHXIMT3OFJFznUVOcXdUGEUNmINY BkET9BRyFRluCE5nIcWWbgZA976Tu3FPcpY= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:26 2025 by rpki-client