$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25d9c9aa-6d32-3b73-bea9-4865e23138c6.roa File: 25d9c9aa-6d32-3b73-bea9-4865e23138c6.roa (raw, json) Hash identifier: kMsKL2n/XKL1P+zJZYfuipj9md40qmMggXg6bNiH/ts= Subject key identifier: 31:57:B8:32:74:2A:83:3F:A4:E6:CB:14:ED:98:58:6B:4D:64:11:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5571E63E4711CDD34463F000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25d9c9aa-6d32-3b73-bea9-4865e23138c6.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80:3c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e6:3e:47:11:cd:d3:44:63:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=a3200abb-2226-4600-afff-5c0766438f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:13:f8:37:6f:81:6a:37:10:8e:2c:51:e0: 98:e6:58:e1:00:96:0b:27:78:53:1c:bf:bf:c8:41: 51:c1:f4:53:be:b4:fa:b0:b9:cf:0d:1d:c7:b1:46: 94:f2:d8:b5:60:d2:27:40:55:10:4e:8d:57:17:10: 76:10:34:b5:0e:5d:76:e9:43:52:2b:4c:93:64:0c: a6:05:6e:b9:3d:4c:36:0f:0e:4f:f5:78:dd:78:b2: 92:bb:20:12:5b:cd:6a:43:bf:c0:3d:4d:1c:93:4f: 07:ba:09:41:a9:11:e3:be:88:e9:47:f3:d5:6b:f3: 47:36:71:31:0b:b2:51:1f:53:f0:3b:df:45:e7:07: 88:4d:69:d5:c8:82:3c:64:ce:58:1c:52:94:8f:03: cc:51:f3:3b:de:b4:6d:5e:ec:11:1b:97:f7:06:3e: 3a:d5:36:cf:0a:4a:48:3e:89:a1:22:f4:71:4f:5c: 54:e0:a4:73:f5:8e:dc:b8:f1:1b:02:1f:88:2b:99: 82:b0:e1:29:bc:f4:0f:a4:4b:1e:62:19:8b:26:54: 69:a0:b3:b1:d4:f7:62:86:3d:38:df:6b:fb:dc:2e: fa:38:35:d6:df:d1:b5:f0:cb:d9:eb:43:47:ad:44: 71:86:3d:c0:9b:f4:f3:a9:e4:c3:46:36:51:e1:51: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:57:B8:32:74:2A:83:3F:A4:E6:CB:14:ED:98:58:6B:4D:64:11:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25d9c9aa-6d32-3b73-bea9-4865e23138c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1d:4b:22:84:e3:c8:80:0d:64:d2:e3:03:12:86:71:7a:82: 6d:76:d9:6f:cc:6f:9b:00:65:e0:67:27:24:35:0f:66:45:2b: 51:e6:1b:a7:df:69:1b:3d:32:32:08:95:44:f7:fb:ee:70:bf: 31:e9:34:c3:56:e1:ce:97:66:82:7d:a8:3b:13:3e:c2:53:c5: 35:75:e7:2a:02:59:9c:34:6f:f8:fb:38:65:ca:5a:d7:7e:81: d2:db:30:d4:60:d5:ec:8c:40:2a:51:cc:e0:6f:b0:4f:e5:3d: 52:62:66:77:ec:5c:a2:c7:4e:3b:d9:46:d6:5e:b6:d1:71:8c: 03:f1:47:4f:76:68:07:a8:8e:b5:2c:13:b2:18:59:75:99:2e: e9:64:b3:a8:b7:77:80:c0:bd:e6:32:e2:78:16:ff:2c:0a:b5: be:5a:4a:3b:4b:d5:ff:43:55:b2:8d:d2:d4:c3:00:be:2d:4b: 6b:37:c5:5a:e0:53:5c:dc:86:2d:91:da:81:40:57:97:f0:df: 82:f2:08:5d:a3:6d:f0:e7:e2:ea:19:78:a1:e4:d5:50:88:fc: 12:55:ad:a2:5c:8c:9d:7f:01:a7:93:95:66:bc:f6:e6:93:ea: 44:c4:95:3d:ee:13:aa:12:b1:aa:6b:d3:a9:48:87:6e:9c:06: e5:82:d8:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVceY+RxHN00Rj8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YTMyMDBhYmItMjIyNi00NjAwLWFmZmYtNWMwNzY2NDM4ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE8T+DdvgWo3EI4sUeCY5ljhAJYLJ3hTHL+/ yEFRwfRTvrT6sLnPDR3HsUaU8ti1YNInQFUQTo1XFxB2EDS1Dl126UNSK0yTZAym BW65PUw2Dw5P9XjdeLKSuyASW81qQ7/APU0ck08HuglBqRHjvojpR/PVa/NHNnEx C7JRH1PwO99F5weITWnVyII8ZM5YHFKUjwPMUfM73rRtXuwRG5f3Bj461TbPCkpI PomhIvRxT1xU4KRz9Y7cuPEbAh+IK5mCsOEpvPQPpEseYhmLJlRpoLOx1Pdihj04 32v73C76ODXW39G18MvZ60NHrURxhj3Am/TzqeTDRjZR4VHdYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFXuDJ0KoM/pObLFO2YWGtNZBHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjVkOWM5YWEtNmQzMi0z YjczLWJlYTktNDg2NWUyMzEzOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEdSyKE48iADWTS4wMShnF6gm122W/Mb5sAZeBnJyQ1D2ZFK1Hm G6ffaRs9MjIIlUT3++5wvzHpNMNW4c6XZoJ9qDsTPsJTxTV15yoCWZw0b/j7OGXK Wtd+gdLbMNRg1eyMQCpRzOBvsE/lPVJiZnfsXKLHTjvZRtZettFxjAPxR092aAeo jrUsE7IYWXWZLulks6i3d4DAveYy4ngW/ywKtb5aSjtL1f9DVbKN0tTDAL4tS2s3 xVrgU1zchi2R2oFAV5fw34LyCF2jbfDn4uoZeKHk1VCI/BJVraJcjJ1/AaeTlWa8 9uaT6kTElT3uE6oSsapr06lIh26cBuWC2MA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:07 2025 by rpki-client