$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa File: 408af4a7-bf43-3f31-9358-f08d485e054e.roa (raw, json) Hash identifier: 5yr1CrVj/3MfB0YwTFW4yOC/xSQvolCXcnU8hlQYi1o= Subject key identifier: C8:B1:D2:A8:A1:30:C0:52:D3:E9:95:D3:BF:A3:0D:90:51:97:F5:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475D51C1CAEFBBE3BF860200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa Signing time: Mon 22 Sep 2025 11:58:07 +0000 ROA not before: Mon 22 Sep 2025 11:58:07 +0000 ROA not after: Sun 21 Dec 2025 12:58:07 +0000 asID: 19905 IP address blocks: 2604:2d80:4d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5d:51:c1:ca:ef:bb:e3:bf:86:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:58:07 2025 GMT Not After : Dec 21 12:58:07 2025 GMT Subject: CN=6278d74e-0e47-4a7f-9bd9-460ffb5393f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:d7:38:20:76:68:6b:46:2b:94:d5:4e:0d: e6:9e:43:a7:14:91:da:ac:49:70:58:af:50:d7:28: e0:cd:d5:6e:87:10:c7:06:2e:17:96:21:72:47:94: 2c:9a:4f:d9:39:d4:8c:c6:90:7e:5b:d3:0d:cb:6f: a2:1e:ba:0b:07:44:a1:1c:7b:24:23:83:d1:f9:0d: fc:70:27:59:ee:74:30:3b:d4:61:ad:5a:9e:36:87: 66:43:48:55:b2:14:64:3f:5f:3b:6c:d7:4b:75:98: 67:9a:3a:b3:5d:83:91:ff:64:56:82:4c:3a:bb:8e: 78:d8:8a:db:8d:0c:60:98:ec:8d:5b:67:84:bc:b8: fa:6f:d5:ec:b5:1d:9a:a9:8c:a1:e7:2f:13:43:6e: 22:78:c8:6c:70:83:5d:c2:16:11:82:c2:74:6b:e7: 00:d4:57:d1:a5:b4:a4:67:65:00:d6:98:47:c9:54: b9:33:cc:b9:fa:aa:31:3e:3b:56:11:45:19:74:df: e0:3c:9c:36:13:8c:31:7d:2d:ad:31:81:f1:b9:b3: 60:c7:20:18:a7:62:ba:2b:2c:e2:c2:43:76:b4:ca: bc:59:ad:de:4a:9a:38:a9:55:8a:34:26:b7:08:f5: d4:d0:45:b0:09:ee:76:a2:3c:b4:9a:4b:b2:6d:f8: 29:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B1:D2:A8:A1:30:C0:52:D3:E9:95:D3:BF:A3:0D:90:51:97:F5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/408af4a7-bf43-3f31-9358-f08d485e054e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b4:ef:88:e4:f2:1e:52:36:a8:23:d8:cd:89:3e:54:7c:7c: bc:db:e1:4e:49:bd:9b:85:3a:44:d6:46:cb:3a:8f:a9:b4:99: 36:5b:c4:28:b5:04:ab:ad:e1:1e:e0:a5:dc:35:fc:8c:a8:b3: f9:ad:4f:2c:d2:78:fd:99:bc:25:1c:ca:5d:54:90:e8:52:45: 02:1d:94:2a:4f:60:e7:af:80:9b:08:68:e3:60:82:8f:03:a5: 6e:9e:43:d2:f6:53:c1:07:61:a3:c0:18:f8:81:cb:e0:e2:55: d9:00:21:ae:35:2d:c6:09:d4:38:5e:ee:eb:de:f0:ae:5f:7b: 4c:e2:56:cb:d9:05:0e:43:76:46:36:11:b7:4e:79:d6:03:3f: 1a:8a:5c:7d:ca:cb:86:6f:5d:db:32:0a:93:0a:ae:12:20:09: d5:e7:9b:cf:ac:53:17:c5:fa:2c:57:51:e2:26:50:01:3b:3b: e3:65:bd:f1:69:83:46:1b:1e:bf:29:3f:a4:d1:b5:e8:03:c8: 81:b5:63:db:d2:ec:c9:72:a5:38:ea:3a:20:6d:fc:2d:66:2c: ba:4d:21:75:37:3e:bc:59:81:24:e0:ae:26:55:9c:70:10:6c: 08:9e:0f:4b:e2:eb:84:0b:cb:d9:36:6a:97:4d:20:39:c1:01: 90:51:62:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHXVHByu+747+GAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTgwN1oXDTI1MTIyMTEyNTgwN1owLzEtMCsGA1UEAxMk NjI3OGQ3NGUtMGU0Ny00YTdmLTliZDktNDYwZmZiNTM5M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA297XOCB2aGtGK5TVTg3mnkOnFJHarElwWK9Q 1yjgzdVuhxDHBi4XliFyR5Qsmk/ZOdSMxpB+W9MNy2+iHroLB0ShHHskI4PR+Q38 cCdZ7nQwO9RhrVqeNodmQ0hVshRkP187bNdLdZhnmjqzXYOR/2RWgkw6u4542Irb jQxgmOyNW2eEvLj6b9XstR2aqYyh5y8TQ24ieMhscINdwhYRgsJ0a+cA1FfRpbSk Z2UA1phHyVS5M8y5+qoxPjtWEUUZdN/gPJw2E4wxfS2tMYHxubNgxyAYp2K6Kyzi wkN2tMq8Wa3eSpo4qVWKNCa3CPXU0EWwCe52ojy0mkuybfgp7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMix0qihMMBS0+mV07+jDZBRl/XBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDA4YWY0YTctYmY0My0z ZjMxLTkzNTgtZjA4ZDQ4NWUwNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgE2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6074jk8h5SNqgj2M2JPlR8fLzb4U5JvZuFOkTWRss6j6m0mTZb xCi1BKut4R7gpdw1/Iyos/mtTyzSeP2ZvCUcyl1UkOhSRQIdlCpPYOevgJsIaONg go8DpW6eQ9L2U8EHYaPAGPiBy+DiVdkAIa41LcYJ1Dhe7uve8K5fe0ziVsvZBQ5D dkY2EbdOedYDPxqKXH3Ky4ZvXdsyCpMKrhIgCdXnm8+sUxfF+ixXUeImUAE7O+Nl vfFpg0YbHr8pP6TRtegDyIG1Y9vS7MlypTjqOiBt/C1mLLpNIXU3PrxZgSTgriZV nHAQbAieD0vi64QLy9k2apdNIDnBAZBRYho= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:10 2025 by rpki-client