$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/497dbc99-668e-35cb-a0cc-9b464ead6474.roa File: 497dbc99-668e-35cb-a0cc-9b464ead6474.roa (raw, json) Hash identifier: nRmu19qiYROduww7ZJzszAx/SdVFCy7ZNLYDOaby4Dg= Subject key identifier: B9:AF:FA:9E:00:EB:C3:BB:E4:8D:A0:0E:61:E5:7E:07:3C:53:47:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620233EFA8E94DD9405DE700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/497dbc99-668e-35cb-a0cc-9b464ead6474.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:6180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:33:ef:a8:e9:4d:d9:40:5d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ac9ddaf9-3ea0-4a24-8db2-3e9a7171a123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:57:64:5a:1b:63:21:a5:f9:9a:be:35:95: 66:2b:f1:b2:bb:34:20:8e:76:a5:38:33:f9:e2:79: 94:58:c9:72:5d:56:ec:d4:69:f2:b2:cf:fc:db:5c: d4:ab:8b:1c:cd:ec:87:e1:db:4d:5e:99:3b:5f:45: 34:52:f6:60:8b:a6:5d:0a:e3:24:7d:7b:65:de:00: 1f:c6:e5:80:af:6c:d0:ff:e8:50:af:2f:25:6a:1d: a1:b1:d1:de:df:34:04:f2:b9:3e:3b:a2:90:69:ef: 6c:38:08:a0:22:b6:35:3a:6d:69:82:06:3c:26:02: fd:ad:98:2d:c1:d3:f8:db:d6:2a:94:23:bd:20:e7: 8e:9b:13:b5:44:f4:a1:bc:fe:70:6c:2f:ec:e8:5b: 3f:b7:e2:32:38:40:ce:09:19:8b:4e:d5:32:79:10: 37:45:b5:bd:2f:7a:83:33:f9:84:13:43:79:8d:24: db:3b:20:ab:58:9a:1c:ac:81:c3:ed:7f:26:43:8d: 4c:a5:35:90:d6:0b:0c:fb:14:4e:1e:a9:cc:3d:3d: 1c:c5:24:d1:9a:ef:73:f6:0b:92:df:c2:6d:63:7f: ac:79:44:1b:47:fc:a0:6c:06:83:eb:d6:71:89:05: dc:fa:3a:f9:e5:25:96:45:29:9f:f0:f7:5b:aa:a1: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AF:FA:9E:00:EB:C3:BB:E4:8D:A0:0E:61:E5:7E:07:3C:53:47:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/497dbc99-668e-35cb-a0cc-9b464ead6474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d2:bb:cb:38:39:15:3b:b9:ea:ea:78:17:9b:72:a0:5f:1a: 78:e7:17:e3:6a:38:5d:9a:e5:12:f7:bd:6e:a0:f7:76:57:dc: 8c:7b:ea:07:55:6c:36:e9:2d:0e:7f:0f:aa:84:93:8d:92:14: e6:98:85:1b:28:4e:3f:3b:9e:35:74:0e:54:ce:de:c8:55:ee: 82:b9:ef:e7:a1:9f:5a:74:d8:53:86:e5:0a:a0:49:e9:19:8f: d7:35:f9:54:8a:27:85:fc:4a:7a:72:93:38:ad:6b:14:65:ff: 61:c1:3a:d3:03:12:fb:d8:2b:22:1e:63:5a:b6:de:05:b6:5d: 1e:8f:2f:5e:46:94:30:f0:27:8e:00:9b:43:35:86:84:e8:5a: c8:d8:c7:ec:16:ff:a2:c0:79:d2:a1:90:b8:44:be:0a:c5:d4: d5:85:68:b8:b5:87:80:af:2f:d5:b7:9c:ef:25:9d:75:b0:e2: 57:4f:21:fc:2d:c6:1a:d5:da:8c:21:48:b9:d9:2e:0a:ac:7e: 6e:20:31:65:5c:a2:df:ad:39:e2:c7:9c:78:20:62:f3:5e:b8: ae:66:dc:a9:6c:8b:53:00:77:5c:69:32:af:5b:64:02:72:0d: a2:96:aa:b9:cd:4f:9b:ef:c8:62:c5:dc:f4:f1:34:f3:22:3a: 07:c5:e0:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjPvqOlN2UBd5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWM5ZGRhZjktM2VhMC00YTI0LThkYjItM2U5YTcxNzFhMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklpXZFobYyGl+Zq+NZVmK/GyuzQgjnalODP5 4nmUWMlyXVbs1Gnyss/821zUq4sczeyH4dtNXpk7X0U0UvZgi6ZdCuMkfXtl3gAf xuWAr2zQ/+hQry8lah2hsdHe3zQE8rk+O6KQae9sOAigIrY1Om1pggY8JgL9rZgt wdP429YqlCO9IOeOmxO1RPShvP5wbC/s6Fs/t+IyOEDOCRmLTtUyeRA3RbW9L3qD M/mEE0N5jSTbOyCrWJocrIHD7X8mQ41MpTWQ1gsM+xROHqnMPT0cxSTRmu9z9guS 38JtY3+seUQbR/ygbAaD69ZxiQXc+jr55SWWRSmf8PdbqqGvgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLmv+p4A68O75I2gDmHlfgc8U0dKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDk3ZGJjOTktNjY4ZS0z NWNiLWEwY2MtOWI0NjRlYWQ2NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPSu8s4ORU7uerqeBebcqBfGnjnF+NqOF2a5RL3vW6g93ZX3Ix7 6gdVbDbpLQ5/D6qEk42SFOaYhRsoTj87njV0DlTO3shV7oK57+ehn1p02FOG5Qqg SekZj9c1+VSKJ4X8SnpykzitaxRl/2HBOtMDEvvYKyIeY1q23gW2XR6PL15GlDDw J44Am0M1hoToWsjYx+wW/6LAedKhkLhEvgrF1NWFaLi1h4CvL9W3nO8lnXWw4ldP IfwtxhrV2owhSLnZLgqsfm4gMWVcot+tOeLHnHggYvNeuK5m3Klsi1MAd1xpMq9b ZAJyDaKWqrnNT5vvyGLF3PTxNPMiOgfF4N8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:35 2025 by rpki-client