$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa File: 3089f031-91f3-3b37-81e2-09fe84597232.roa (raw, json) Hash identifier: xRlZUlo8Qe7Pv0UMHyLXm01Nrztbz+fDrgTuxDWjq/0= Subject key identifier: B3:83:1C:43:F2:71:31:79:F6:73:C4:3D:4A:B1:40:F3:92:17:2A:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797E91324EE6D5D216B2240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:1600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e9:13:24:ee:6d:5d:21:6b:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b369ad49-482f-4e33-bf19-7d598afe266a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:4e:48:79:86:8d:58:48:a6:ab:0a:55:e1: 79:06:1f:32:29:53:41:c3:80:6e:a0:ee:da:32:54: a7:cc:1b:32:fb:86:e2:2f:4e:b1:b7:96:d4:1e:8d: 65:c6:e1:b7:e2:78:5c:4a:df:0d:31:72:5b:36:f5: 3f:9f:b0:8b:d3:0d:6b:29:18:22:08:b1:d9:56:f1: 1a:27:77:c6:7a:17:4f:b8:a3:02:b2:b5:a2:b7:2c: 2b:8a:9f:ba:e7:86:4d:23:3b:46:34:0a:a5:4f:e5: 70:70:0e:41:71:0a:83:c3:d2:71:1e:a7:32:f4:a8: 2e:ea:f2:26:79:9f:30:35:07:b2:4a:da:24:c1:34: ab:d5:0e:7d:8f:f5:fd:f1:44:99:0a:76:1d:6b:a8: c3:c2:ec:e7:84:b0:76:3c:e1:c7:fd:90:7f:26:0b: 40:58:f7:7b:d4:18:76:f8:2f:14:f0:39:8c:b0:4d: 9f:b6:13:d1:10:20:b2:40:6b:5c:f4:a5:82:c1:1e: 88:8f:00:1a:1a:a3:6c:26:e1:ae:20:a4:23:ee:5b: 1f:44:15:22:50:d8:88:7a:d7:cc:12:6e:8f:5a:71: 6d:eb:c0:82:e0:7d:d5:06:65:9c:59:d4:cf:47:0e: d9:8c:54:bc:96:14:eb:a2:61:d3:ca:0a:b4:22:3b: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:83:1C:43:F2:71:31:79:F6:73:C4:3D:4A:B1:40:F3:92:17:2A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:82:7e:a9:7a:36:1d:b0:8e:66:87:8f:a5:07:56:e4:68:13: 90:3e:80:58:24:d7:1f:b7:43:37:ed:26:3d:40:8b:d0:3e:01: c3:60:d3:90:d9:3e:51:45:02:58:38:e9:1b:86:32:be:03:3c: 7d:91:3a:42:ad:7c:56:b3:33:85:8d:cc:25:78:c7:d3:8b:e9: 53:5d:fe:0a:1b:85:62:8e:50:24:5a:0e:fe:51:f8:11:ff:5f: 14:53:90:22:08:a1:e5:2a:9d:2b:78:6b:cb:b0:6a:e4:f7:4a: a7:08:21:f0:de:a6:a8:fa:24:7c:75:9c:cc:6d:6a:81:e3:0b: b8:37:ab:76:6c:7d:0d:0f:5d:f9:3e:10:fd:35:55:12:3a:c4: 6f:cf:07:69:28:95:39:ff:d6:ef:12:4c:b5:97:65:f7:77:b1: be:83:02:2e:14:7c:21:27:df:dd:5c:3e:84:3c:2b:d2:59:da: 56:4a:a6:ec:da:a7:af:2d:d6:95:b8:b7:b7:0d:09:ad:47:90: e4:60:3d:d7:5f:69:c2:18:26:f0:10:3c:c7:bc:f0:96:6a:7d: 61:65:85:2a:3d:ea:6f:c8:cf:ac:ac:e7:af:3a:45:74:a0:74: f3:9b:40:f5:8e:2d:ed:1b:ab:31:3d:8b:9e:1c:35:11:b9:eb: 66:1b:31:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnl+kTJO5tXSFrIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjM2OWFkNDktNDgyZi00ZTMzLWJmMTktN2Q1OThhZmUyNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLBOSHmGjVhIpqsKVeF5Bh8yKVNBw4BuoO7a MlSnzBsy+4biL06xt5bUHo1lxuG34nhcSt8NMXJbNvU/n7CL0w1rKRgiCLHZVvEa J3fGehdPuKMCsrWitywrip+654ZNIztGNAqlT+VwcA5BcQqDw9JxHqcy9Kgu6vIm eZ8wNQeyStokwTSr1Q59j/X98USZCnYda6jDwuznhLB2POHH/ZB/JgtAWPd71Bh2 +C8U8DmMsE2fthPRECCyQGtc9KWCwR6IjwAaGqNsJuGuIKQj7lsfRBUiUNiIetfM Em6PWnFt68CC4H3VBmWcWdTPRw7ZjFS8lhTromHTygq0Ijvj7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLODHEPycTF59nPEPUqxQPOSFyopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzA4OWYwMzEtOTFmMy0z YjM3LTgxZTItMDlmZTg0NTk3MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWCfql6Nh2wjmaHj6UHVuRoE5A+gFgk1x+3QzftJj1Ai9A+AcNg 05DZPlFFAlg46RuGMr4DPH2ROkKtfFazM4WNzCV4x9OL6VNd/gobhWKOUCRaDv5R +BH/XxRTkCIIoeUqnSt4a8uwauT3SqcIIfDepqj6JHx1nMxtaoHjC7g3q3ZsfQ0P Xfk+EP01VRI6xG/PB2kolTn/1u8STLWXZfd3sb6DAi4UfCEn391cPoQ8K9JZ2lZK puzap68t1pW4t7cNCa1HkORgPddfacIYJvAQPMe88JZqfWFlhSo96m/Iz6ys5686 RXSgdPObQPWOLe0bqzE9i54cNRG562YbMRA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:37 2025 by rpki-client