$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa File: 4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa (raw, json) Hash identifier: oBfRG5+pIvhaXxMvNuhwyOr70/BwwVOtbJ3ic4EzJEI= Subject key identifier: B9:1F:20:98:1D:2E:5F:FA:0A:05:C5:86:48:EE:F3:B0:A1:D3:74:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EFCF0A272DA569508180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:9900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ef:cf:0a:27:2d:a5:69:50:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4ff9e05a-cc0b-49ac-8ac7-68036243d57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:9d:11:f5:4b:8c:45:7c:47:69:85:3d:72: 28:92:fc:ae:9c:b9:b7:33:e9:0d:3b:94:04:1d:7a: b4:ae:c7:39:cc:69:30:d7:9a:fc:31:19:5c:9f:bd: 1a:e5:38:75:22:ee:90:e6:89:c6:1b:6a:40:a4:6e: 94:6f:28:ff:13:c4:24:98:a4:e8:7e:1c:2a:b6:65: 27:3b:29:dd:27:4f:16:16:b7:29:dc:56:aa:19:ed: cc:9a:31:88:dc:4a:05:0b:a2:78:6f:6f:ce:ab:bd: 25:f0:c6:f5:8b:2c:fc:28:eb:fa:e5:e8:8b:93:ee: 58:fd:05:09:23:40:26:df:6d:09:67:5c:02:de:38: e6:f6:75:da:be:37:7a:c4:74:e2:89:52:cd:03:99: 45:0f:28:f5:b7:8a:f1:13:70:26:7e:79:a8:a1:53: 0e:93:b6:f5:56:fe:6c:8b:a8:08:bd:4d:6d:10:df: c3:0e:f1:81:ac:11:c5:8d:08:6d:f5:bb:b2:0b:d4: 72:28:0a:34:69:6e:d4:11:fc:8c:fe:2c:47:2e:dd: 0f:8b:3f:1b:26:32:dd:0a:d9:a1:89:8b:f2:45:6b: 87:b0:c1:fb:37:d6:2d:f9:c8:85:9c:d0:7b:e1:b7: 46:91:9f:8b:33:4b:54:08:02:66:77:7a:1b:a0:e6: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:20:98:1D:2E:5F:FA:0A:05:C5:86:48:EE:F3:B0:A1:D3:74:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ec:46:9a:fc:8b:64:ff:93:71:c1:c4:4c:89:1a:a8:db:48: 09:3c:ee:97:0d:72:0f:2b:0f:96:1f:11:d6:73:9e:2d:79:5f: cc:57:18:26:83:76:ef:88:0c:f5:dc:1f:11:28:27:b0:00:36: aa:ff:5f:4b:ce:83:a7:e9:e9:78:70:c3:d0:89:4f:89:2e:95: dd:35:92:95:ce:be:cb:67:17:4d:b3:9f:e1:83:f7:54:3f:11: e7:6c:27:5a:69:af:c8:57:5d:ec:9c:a4:76:04:3e:50:ac:1e: 1a:c7:bc:7a:18:db:1d:1a:df:de:de:61:2c:e0:f9:ab:be:7f: 63:bd:ae:c2:dd:84:76:a8:cd:8f:de:03:69:f7:59:69:e3:d3: 7a:c5:bc:b9:32:f1:82:cb:38:bf:b7:6f:d4:32:43:54:2d:24: c3:ca:e5:07:13:55:46:a2:96:c0:4f:03:6d:33:e8:6c:1d:9a: f6:0a:62:93:9f:3e:79:d1:d0:d6:b1:5b:a3:63:d1:5c:d8:0b: 64:3e:59:b6:74:85:29:98:b4:6b:fb:47:e8:d7:fa:d0:85:6c: 65:ab:01:ae:c8:4f:fb:3d:e9:d6:02:0e:12:b6:5a:a1:cf:aa: 6d:80:16:84:93:80:43:b3:8b:e7:32:23:8e:77:d8:3c:f1:86: a7:dc:67:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnl+/PCictpWlQgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGZmOWUwNWEtY2MwYi00OWFjLThhYzctNjgwMzYyNDNkNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrOdEfVLjEV8R2mFPXIokvyunLm3M+kNO5QE HXq0rsc5zGkw15r8MRlcn70a5Th1Iu6Q5onGG2pApG6Ubyj/E8QkmKTofhwqtmUn OyndJ08WFrcp3FaqGe3MmjGI3EoFC6J4b2/Oq70l8Mb1iyz8KOv65eiLk+5Y/QUJ I0Am320JZ1wC3jjm9nXavjd6xHTiiVLNA5lFDyj1t4rxE3AmfnmooVMOk7b1Vv5s i6gIvU1tEN/DDvGBrBHFjQht9buyC9RyKAo0aW7UEfyM/ixHLt0Piz8bJjLdCtmh iYvyRWuHsMH7N9Yt+ciFnNB74bdGkZ+LM0tUCAJmd3oboObcuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkfIJgdLl/6CgXFhkju87Ch03RwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGU4NWMxYjMtY2MxOC0z YWZkLTliMmYtNjdiOTM3NDkwYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbsRpr8i2T/k3HBxEyJGqjbSAk87pcNcg8rD5YfEdZzni15X8xX GCaDdu+IDPXcHxEoJ7AANqr/X0vOg6fp6Xhww9CJT4kuld01kpXOvstnF02zn+GD 91Q/EedsJ1ppr8hXXeycpHYEPlCsHhrHvHoY2x0a397eYSzg+au+f2O9rsLdhHao zY/eA2n3WWnj03rFvLky8YLLOL+3b9QyQ1QtJMPK5QcTVUailsBPA20z6GwdmvYK YpOfPnnR0NaxW6Nj0VzYC2Q+WbZ0hSmYtGv7R+jX+tCFbGWrAa7IT/s96dYCDhK2 WqHPqm2AFoSTgEOzi+cyI4532DzxhqfcZ7w= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:50 2025 by rpki-client