$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa File: 3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa (raw, json) Hash identifier: TKVc4dbAgdOtl29xM9lPlw80+/e79ElQZru8MEddnto= Subject key identifier: 7A:50:4E:BD:06:3D:52:01:E0:1B:81:DA:D1:6F:C8:9C:E8:C8:8A:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C6F6C6F782D0027A3CB60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2d80:d600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:6f:6c:6f:78:2d:00:27:a3:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=a3bb4af9-a9b6-481a-bb3e-04dd4ed0b3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:9e:c7:38:e5:eb:cc:dc:dc:cf:b7:72:d2: f9:6c:92:c5:85:aa:6e:7e:b8:b6:57:c9:38:1a:8a: 7a:8d:92:4c:18:12:85:44:3b:81:1c:f9:c7:8c:70: dc:47:e7:11:57:51:bf:53:65:e0:6e:75:e6:bb:12: 12:81:1b:ca:85:22:bd:ef:8a:ec:47:29:85:29:6f: 77:bc:4b:8e:a9:b4:26:05:9b:65:12:51:5a:fd:90: 0c:6a:c8:01:70:6d:d2:52:66:2e:6f:27:58:2f:4b: d7:f2:26:4f:aa:2f:78:2e:72:de:12:1a:27:4e:8e: 81:6c:0f:4c:a8:c4:fa:7e:6d:1e:e6:87:83:51:2d: cf:38:5a:6e:a8:e1:c1:98:25:6e:9e:81:cb:ca:12: cc:33:cf:54:e7:a9:96:1a:c1:f3:09:bb:3b:76:48: c4:29:b3:19:5a:35:21:8a:ef:09:9f:89:a2:18:d4: eb:ef:d7:0b:85:b9:62:ce:bc:4f:14:2a:c4:75:0e: c8:cc:86:41:b3:14:38:6d:d2:20:14:ca:ff:2d:34: 9d:96:e2:b6:6b:cd:8e:be:10:e1:85:02:d5:b6:26: eb:e5:8d:28:5c:99:e9:7e:7a:8f:11:38:d6:87:17: c3:23:d6:91:5c:14:41:df:ac:73:37:b9:25:c8:67: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:50:4E:BD:06:3D:52:01:E0:1B:81:DA:D1:6F:C8:9C:E8:C8:8A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fb:59:25:53:82:e5:d5:6a:3a:f9:b9:b0:52:a8:3f:b3:4a: 1b:93:52:a8:67:80:e8:b6:56:77:82:b7:4d:d2:56:5c:28:2e: 40:27:6b:4c:56:3b:38:99:59:d1:d1:c6:69:8f:60:d2:60:5e: 58:5b:6a:e9:24:ee:6e:40:85:14:38:0a:74:eb:94:f8:e8:59: 62:0f:ad:42:94:cf:11:44:fd:7a:67:2d:72:b6:5f:16:42:83: f5:86:fe:c4:ba:d0:b9:54:d2:72:5d:85:9e:7d:41:eb:c0:ab: e1:e1:03:c3:08:f7:c4:b9:7f:84:c6:c7:a5:ec:e6:47:41:50: 6d:35:e2:40:34:f2:0c:5c:6a:1d:6e:e9:61:50:95:80:4d:e2: 9c:68:40:1c:6e:26:d1:e1:7e:51:88:f0:cd:77:e2:c4:71:67: 76:a2:7a:b1:31:ee:e0:81:ac:f7:24:14:bc:c4:6f:00:c1:9f: 20:b4:27:a9:d4:c2:29:3b:12:a5:66:2a:21:96:52:37:d3:91: 1e:04:e4:98:e8:38:54:2e:b5:e2:15:f0:af:37:55:35:d6:05: 44:30:83:49:34:c0:7e:e4:65:e5:3a:d4:ac:40:c6:60:b9:59: 51:10:4e:fb:88:e1:4a:57:19:8d:d4:0c:c3:8f:af:4d:be:a1: 1f:e9:2d:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbG9sb3gtACejy2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YTNiYjRhZjktYTliNi00ODFhLWJiM2UtMDRkZDRlZDBiM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR+exzjl68zc3M+3ctL5bJLFhapufri2V8k4 Gop6jZJMGBKFRDuBHPnHjHDcR+cRV1G/U2XgbnXmuxISgRvKhSK974rsRymFKW93 vEuOqbQmBZtlElFa/ZAMasgBcG3SUmYubydYL0vX8iZPqi94LnLeEhonTo6BbA9M qMT6fm0e5oeDUS3POFpuqOHBmCVunoHLyhLMM89U56mWGsHzCbs7dkjEKbMZWjUh iu8Jn4miGNTr79cLhblizrxPFCrEdQ7IzIZBsxQ4bdIgFMr/LTSdluK2a82OvhDh hQLVtibr5Y0oXJnpfnqPETjWhxfDI9aRXBRB36xzN7klyGfO4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpQTr0GPVIB4BuB2tFvyJzoyIrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzAxM2RhOTEtOTFlMi0z ZDhjLWE0ZDktMjkyMTZiOWMwNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIL7WSVTguXVajr5ubBSqD+zShuTUqhngOi2VneCt03SVlwoLkAn a0xWOziZWdHRxmmPYNJgXlhbaukk7m5AhRQ4CnTrlPjoWWIPrUKUzxFE/XpnLXK2 XxZCg/WG/sS60LlU0nJdhZ59QevAq+HhA8MI98S5f4TGx6Xs5kdBUG014kA08gxc ah1u6WFQlYBN4pxoQBxuJtHhflGI8M134sRxZ3aierEx7uCBrPckFLzEbwDBnyC0 J6nUwik7EqVmKiGWUjfTkR4E5JjoOFQuteIV8K83VTXWBUQwg0k0wH7kZeU61KxA xmC5WVEQTvuI4UpXGY3UDMOPr02+oR/pLVw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:27 2025 by rpki-client