$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa File: 3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa (raw, json) Hash identifier: OaJI2TM0nXpAZhuRBQJbGN03tdLwfIwa4kQnTLKvyFc= Subject key identifier: 89:2C:B8:BD:85:AE:69:23:97:60:19:D0:C1:41:05:F0:3C:29:AA:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797ED8AF98D5FAEA6A5E368 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:a500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ed:8a:f9:8d:5f:ae:a6:a5:e3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9343faff-1063-44ca-a713-9d69ce430a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:06:fe:92:ae:70:c5:c9:37:61:05:55:b0:61: 3d:bf:0c:2a:d8:a6:1f:4e:74:bf:f1:b1:d3:05:86: 83:fd:7e:87:53:28:62:77:01:a8:96:d4:8e:e1:2a: 0d:5d:40:89:47:ce:88:53:c9:34:29:28:48:6f:34: 0f:d3:4e:15:89:ca:a3:87:07:f5:97:cb:33:13:f2: 48:34:dc:f5:e3:eb:60:54:88:a7:2f:10:5f:c7:21: d8:36:12:46:e1:4b:e6:f2:28:fc:34:fa:1c:04:69: 28:98:67:24:54:df:ae:8d:6d:83:b5:59:f9:96:b4: f7:a6:29:af:b2:16:f8:45:20:f7:8e:0f:85:66:db: 9a:53:7d:c0:d2:92:ea:a9:c4:87:a4:dd:8e:48:94: 82:a4:9d:a6:bd:bd:c7:f4:dd:cd:bf:64:80:06:18: 85:58:8f:c5:7a:73:0f:de:b1:ad:da:68:a7:79:b8: d9:40:66:48:66:d3:44:01:a4:5c:83:03:d8:2b:3f: a9:f7:ab:cb:95:c4:a2:6a:20:ec:fd:36:97:a2:8d: 10:42:5b:24:f0:07:d5:cd:02:f9:76:72:0b:f0:e2: e6:23:46:63:1e:72:ae:6f:87:97:6b:c7:e1:b3:2a: b4:23:e0:69:0b:25:ed:85:16:54:23:97:ec:b9:01: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2C:B8:BD:85:AE:69:23:97:60:19:D0:C1:41:05:F0:3C:29:AA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:33:24:cb:28:42:97:88:02:a0:e6:06:b0:bd:36:c4:bb:b1: c1:67:7d:c1:c6:23:53:df:2e:d1:af:93:51:be:1c:9c:66:92: c4:13:69:2f:87:83:c2:8a:9b:5a:33:6a:e4:77:ce:a6:a5:63: d0:70:58:49:f5:95:ef:03:57:82:f4:43:3d:f9:f0:b3:4e:35: fe:23:f2:eb:8b:b5:d9:82:82:41:fc:10:d1:8f:8d:3c:3c:95: d2:75:cc:a4:eb:57:ea:6c:fa:c2:03:31:da:38:62:9e:5f:cc: 0f:c7:75:0d:28:b6:81:de:d2:19:2c:43:ca:e7:ac:d8:f3:9b: cd:ab:89:39:65:06:6d:21:58:9a:80:ad:83:05:15:10:27:9c: c7:7b:55:4d:f2:a3:77:b3:b4:97:dc:2b:b4:22:24:06:cc:6c: f5:0d:11:a0:6a:94:89:dc:b0:0d:99:af:05:4a:4a:92:c8:c5: 68:33:44:16:9e:43:c5:d5:d5:a7:d8:c1:b2:e0:89:ba:2d:4f: e0:51:14:97:a4:9e:68:b3:d5:31:15:3b:e2:ac:2b:01:c4:00: ce:9d:b2:50:ae:ed:f4:f3:4c:fd:64:a6:44:22:78:b2:26:f5: 4f:61:c0:82:6e:64:c1:90:ef:b9:30:69:62:6f:8e:31:2e:0b: bd:53:33:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnl+2K+Y1frqal42gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTM0M2ZhZmYtMTA2My00NGNhLWE3MTMtOWQ2OWNlNDMwYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gb+kq5wxck3YQVVsGE9vwwq2KYfTnS/8bHT BYaD/X6HUyhidwGoltSO4SoNXUCJR86IU8k0KShIbzQP004Vicqjhwf1l8szE/JI NNz14+tgVIinLxBfxyHYNhJG4Uvm8ij8NPocBGkomGckVN+ujW2DtVn5lrT3pimv shb4RSD3jg+FZtuaU33A0pLqqcSHpN2OSJSCpJ2mvb3H9N3Nv2SABhiFWI/FenMP 3rGt2minebjZQGZIZtNEAaRcgwPYKz+p96vLlcSiaiDs/TaXoo0QQlsk8AfVzQL5 dnIL8OLmI0ZjHnKub4eXa8fhsyq0I+BpCyXthRZUI5fsuQEcAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIksuL2Frmkjl2AZ0MFBBfA8Kao4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZkOGE3MGMtMGU4Mi0z NTE2LWIwOGQtYTlmYzVlNTUzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYzJMsoQpeIAqDmBrC9NsS7scFnfcHGI1PfLtGvk1G+HJxmksQT aS+Hg8KKm1ozauR3zqalY9BwWEn1le8DV4L0Qz358LNONf4j8uuLtdmCgkH8ENGP jTw8ldJ1zKTrV+ps+sIDMdo4Yp5fzA/HdQ0otoHe0hksQ8rnrNjzm82riTllBm0h WJqArYMFFRAnnMd7VU3yo3eztJfcK7QiJAbMbPUNEaBqlIncsA2ZrwVKSpLIxWgz RBaeQ8XV1afYwbLgibotT+BRFJeknmiz1TEVO+KsKwHEAM6dslCu7fTzTP1kpkQi eLIm9U9hwIJuZMGQ77kwaWJvjjEuC71TMxE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:51 2025 by rpki-client