$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29689592-51c3-3908-8ebe-20a2155b5a1f.roa File: 29689592-51c3-3908-8ebe-20a2155b5a1f.roa (raw, json) Hash identifier: ZcSDVXx83OfN1zXf3klyyQZPaSfzhlA3lc72D5RBntg= Subject key identifier: 25:57:DC:57:AE:20:A0:DF:3A:4E:6B:E3:90:91:94:02:6A:B6:9E:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620206B2365E23284422C080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29689592-51c3-3908-8ebe-20a2155b5a1f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:c100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:06:b2:36:5e:23:28:44:22:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=24ca2257-ebc1-48ea-ad33-29ac58e2391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:5b:88:60:68:50:e2:52:d4:f9:54:f9:5f: 7d:8a:66:1c:33:aa:6a:92:67:bf:ea:26:f6:f8:83: 93:ce:70:50:ed:0a:9c:da:a8:0f:4f:78:5d:81:a4: 9d:9b:d6:a3:23:2b:e6:d1:f8:90:2d:fd:5a:0c:f4: ca:1b:67:78:20:44:e6:a5:34:21:af:46:df:a9:68: 28:14:d5:fc:f6:24:75:d1:e2:bc:f2:dd:96:73:ca: 13:ef:3b:2d:4f:76:21:bd:c1:3d:4a:11:03:65:31: 55:94:02:22:8d:fe:09:87:7d:e3:5f:ee:da:77:6f: 0e:21:e1:ea:84:10:ad:1b:3a:9d:f2:a7:4b:e6:52: 34:44:86:a9:6b:5f:2d:17:0e:06:b8:3d:64:74:21: 57:d2:1f:44:02:58:a0:75:01:1f:d4:53:49:89:33: 73:9b:ed:10:14:af:aa:82:4f:12:3e:6d:6d:e7:bb: b5:be:7f:56:bd:94:df:5b:23:e2:50:03:49:3d:8a: 5b:77:97:46:e3:ab:45:e7:4d:a4:6a:c2:a4:c9:f5: 56:76:fd:be:a1:28:42:3e:5f:42:cf:da:1c:07:f5: bc:7e:11:93:d4:af:03:fe:ee:59:fd:f1:1b:35:f8: 6a:1e:3c:dc:2f:f4:ae:d2:a5:0a:18:25:90:c7:d0: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:DC:57:AE:20:A0:DF:3A:4E:6B:E3:90:91:94:02:6A:B6:9E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29689592-51c3-3908-8ebe-20a2155b5a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:00:b9:60:1f:68:ef:b0:18:7c:bf:94:8b:0d:73:2d:5a:2d: a8:7c:19:b4:19:1f:26:30:89:b4:dc:14:a4:af:7c:60:42:f5: ef:b1:8f:8b:39:08:42:ad:39:03:95:72:03:03:b7:35:a9:c5: be:2c:ab:cd:a4:1f:82:9e:9b:3a:d1:e3:07:6b:ff:56:14:0b: 56:0b:5a:fb:b4:6f:1b:5b:d6:e6:d7:87:fe:da:a0:f2:cc:aa: 6c:9d:7b:6d:02:0b:ea:88:09:66:12:b8:07:64:35:22:c7:a2: 67:cc:68:11:84:60:b4:82:ec:fa:dc:72:33:8e:60:f2:39:e4: b2:30:ef:b4:5c:21:8f:b4:4c:bd:40:9d:84:15:74:cd:88:ad: b3:10:a1:6f:d0:9e:e9:e4:c6:fe:fd:2a:20:06:c5:08:ea:a6: ff:9d:83:c5:c1:b3:25:7d:d4:fb:0a:88:44:5c:24:ed:6d:b5: a4:93:36:e8:9c:18:ac:c2:90:5e:81:3e:76:25:f5:77:27:e1: 4d:2f:9a:dc:f9:e8:1e:36:5a:5d:19:e3:fa:e5:8b:89:70:93: d6:7d:70:ab:e6:37:cb:29:6c:25:be:ad:f4:43:df:5d:96:cc: 84:f2:0e:33:32:91:df:0a:22:fb:e8:ad:42:ef:80:43:d8:e6: 6e:a4:5a:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgayNl4jKEQiwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjRjYTIyNTctZWJjMS00OGVhLWFkMzMtMjlhYzU4ZTIzOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8NbiGBoUOJS1PlU+V99imYcM6pqkme/6ib2 +IOTznBQ7Qqc2qgPT3hdgaSdm9ajIyvm0fiQLf1aDPTKG2d4IETmpTQhr0bfqWgo FNX89iR10eK88t2Wc8oT7zstT3YhvcE9ShEDZTFVlAIijf4Jh33jX+7ad28OIeHq hBCtGzqd8qdL5lI0RIapa18tFw4GuD1kdCFX0h9EAligdQEf1FNJiTNzm+0QFK+q gk8SPm1t57u1vn9WvZTfWyPiUANJPYpbd5dG46tF502kasKkyfVWdv2+oShCPl9C z9ocB/W8fhGT1K8D/u5Z/fEbNfhqHjzcL/Su0qUKGCWQx9BVIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVX3FeuIKDfOk5r45CRlAJqtp5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk2ODk1OTItNTFjMy0z OTA4LThlYmUtMjBhMjE1NWI1YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgMEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMAuWAfaO+wGHy/lIsNcy1aLah8GbQZHyYwibTcFKSvfGBC9e+x j4s5CEKtOQOVcgMDtzWpxb4sq82kH4KemzrR4wdr/1YUC1YLWvu0bxtb1ubXh/7a oPLMqmyde20CC+qICWYSuAdkNSLHomfMaBGEYLSC7PrccjOOYPI55LIw77RcIY+0 TL1AnYQVdM2IrbMQoW/Qnunkxv79KiAGxQjqpv+dg8XBsyV91PsKiERcJO1ttaST NuicGKzCkF6BPnYl9Xcn4U0vmtz56B42Wl0Z4/rli4lwk9Z9cKvmN8spbCW+rfRD 312WzITyDjMykd8KIvvorULvgEPY5m6kWq0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:08 2025 by rpki-client