$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa File: 3525b946-e088-30a0-80a8-0242eeac1d5e.roa (raw, json) Hash identifier: dje6irSOpPsQU4HJg0w7BbNStDU9l5f0Wf7kKMzQZaI= Subject key identifier: F7:F8:DC:A8:65:3E:D3:BF:EE:60:1C:51:8D:22:56:4C:DB:80:05:53 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0FDFBC4A8B85F63A1B55AC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa Signing time: Tue 02 Sep 2025 14:55:37 +0000 ROA not before: Tue 02 Sep 2025 14:55:37 +0000 ROA not after: Mon 01 Dec 2025 15:55:37 +0000 asID: 30036 IP address blocks: 2604:2d81:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:df:bc:4a:8b:85:f6:3a:1b:55:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 14:55:37 2025 GMT Not After : Dec 1 15:55:37 2025 GMT Subject: CN=38bf8322-bab8-475f-a1ec-8f8556e2adbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:2b:34:02:90:df:d0:70:59:b4:24:fb:6b: a7:17:b7:c6:52:2e:e1:d0:76:c4:70:19:fb:48:8e: f0:3d:73:37:d5:85:3e:33:f3:58:84:72:e7:20:7d: 56:f1:ba:76:f8:d2:66:06:b9:fa:aa:23:a3:5c:55: d5:51:8e:73:39:b4:62:5b:04:a2:fb:30:77:5f:d3: 69:bd:b5:ee:d0:0d:aa:3d:25:cd:08:26:d7:17:13: 97:51:26:b7:20:53:e6:b5:d3:0e:a9:45:8d:66:94: c8:99:fc:2b:85:42:f6:86:9f:01:3c:e8:d8:f2:bc: 15:04:09:f1:dd:e6:12:e6:a0:4e:e8:0f:9d:85:09: 49:ac:a2:82:c1:51:71:9f:c0:1f:e8:9f:bc:c8:86: 3b:3e:61:3b:99:a7:46:5e:31:7a:8f:d5:ed:d9:ff: 17:2b:4f:01:5e:29:4f:81:ba:00:04:50:49:e0:0f: 68:98:3f:33:52:30:97:96:ac:f2:c3:65:67:e4:22: 1c:45:17:c6:77:aa:f3:90:ef:21:71:29:10:aa:56: d3:90:7a:7c:57:ea:14:b0:04:92:54:50:27:cb:39: 6d:0a:72:32:16:b2:57:64:b8:45:62:15:7b:36:55: 52:ad:30:60:c2:5c:5b:2d:c2:aa:2a:78:40:31:b0: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:DC:A8:65:3E:D3:BF:EE:60:1C:51:8D:22:56:4C:DB:80:05:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:46:c3:50:92:6a:f4:83:54:8b:28:b8:b6:66:b4:bc:0e:56: 8f:25:87:7b:96:57:87:a7:37:43:59:53:5f:19:81:02:2a:c9: ff:22:b1:19:53:58:40:59:c2:5c:1f:63:52:0e:fb:f4:52:4c: af:6d:6e:c1:65:11:11:fa:06:7f:11:1f:e3:c1:e9:33:4d:bc: 7f:66:72:5f:ce:87:9d:e4:8e:10:2c:33:23:0e:f8:88:eb:b5: 16:93:56:5b:91:11:09:a5:6c:e2:70:b7:b6:06:f0:74:71:f7: 4c:a3:74:48:e1:6f:48:e9:02:7b:ae:bd:54:45:9b:ff:c3:26: 77:33:93:f7:cc:8b:6b:6b:b1:fc:02:d9:6f:01:f3:65:31:d7: 35:28:fe:fd:ae:6f:aa:19:55:87:d2:81:10:fe:7b:75:ce:c1: c8:c5:bc:b5:25:d1:4a:4d:46:11:67:17:43:ee:aa:b1:f4:c2: 10:6d:b9:09:46:67:ee:8c:f9:21:4b:63:cb:e4:0d:9f:71:9c: 76:4e:c6:ef:37:32:54:09:c6:aa:79:21:70:2e:01:41:df:06: 35:f1:5a:b9:9f:fa:11:6b:3c:3b:2b:d0:08:42:39:c8:a1:f4: a7:8a:56:7c:89:9b:f4:80:1e:33:dc:b1:13:9e:f1:c3:c6:5f: 3f:53:73:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsP37xKi4X2OhtVrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMjE0NTUzN1oXDTI1MTIwMTE1NTUzN1owLzEtMCsGA1UEAxMk MzhiZjgzMjItYmFiOC00NzVmLWExZWMtOGY4NTU2ZTJhZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0krNAKQ39BwWbQk+2unF7fGUi7h0HbEcBn7 SI7wPXM31YU+M/NYhHLnIH1W8bp2+NJmBrn6qiOjXFXVUY5zObRiWwSi+zB3X9Np vbXu0A2qPSXNCCbXFxOXUSa3IFPmtdMOqUWNZpTImfwrhUL2hp8BPOjY8rwVBAnx 3eYS5qBO6A+dhQlJrKKCwVFxn8Af6J+8yIY7PmE7madGXjF6j9Xt2f8XK08BXilP gboABFBJ4A9omD8zUjCXlqzyw2Vn5CIcRRfGd6rzkO8hcSkQqlbTkHp8V+oUsASS VFAnyzltCnIyFrJXZLhFYhV7NlVSrTBgwlxbLcKqKnhAMbBN/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPf43KhlPtO/7mAcUY0iVkzbgAVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzUyNWI5NDYtZTA4OC0z MGEwLTgwYTgtMDI0MmVlYWMxZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpGw1CSavSDVIsouLZmtLwOVo8lh3uWV4enN0NZU18ZgQIqyf8i sRlTWEBZwlwfY1IO+/RSTK9tbsFlERH6Bn8RH+PB6TNNvH9mcl/Oh53kjhAsMyMO +IjrtRaTVluREQmlbOJwt7YG8HRx90yjdEjhb0jpAnuuvVRFm//DJnczk/fMi2tr sfwC2W8B82Ux1zUo/v2ub6oZVYfSgRD+e3XOwcjFvLUl0UpNRhFnF0PuqrH0whBt uQlGZ+6M+SFLY8vkDZ9xnHZOxu83MlQJxqp5IXAuAUHfBjXxWrmf+hFrPDsr0AhC Ocih9KeKVnyJm/SAHjPcsROe8cPGXz9Tcw4= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:13 2025 by rpki-client