$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa File: 4e945cfe-9098-36b7-81fd-423ed720bf88.roa (raw, json) Hash identifier: MoF2FXr7IGUmGDVQ7t/Bs4vdCzLe2WLlauiTr5QOSCI= Subject key identifier: F6:0D:84:55:33:ED:DE:F4:17:23:C2:BA:DE:11:75:EA:A3:46:C1:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE455C3B12DEC8FC0ABD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:8e00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:45:5c:3b:12:de:c8:fc:0a:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a65272e8-603a-403a-b59d-a0222b426fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:21:da:37:4c:4e:87:e3:27:d3:f1:0c:59: ef:c5:0c:35:4a:05:50:15:c1:5d:1e:7d:40:3a:0d: 1b:e7:ca:6b:13:cd:62:ca:2d:32:41:a0:44:a3:94: 40:f9:85:e0:67:fd:53:1f:e6:ed:30:9d:0d:7b:88: 71:83:08:b0:9b:21:c2:f6:9b:87:1f:18:7b:3d:88: e1:f5:9f:d3:71:3b:3e:b8:35:74:4c:b4:e5:ef:06: a5:8c:d9:bc:3b:74:74:a3:77:c9:6f:c1:9f:68:d3: c8:b5:28:f6:fc:5a:e9:be:9f:7e:58:cb:cd:68:7e: 88:fe:0f:a0:e4:31:fa:19:6c:ec:6e:b7:20:7f:ee: 8e:6a:cb:45:b8:9e:3a:50:a7:fd:66:1a:8a:6a:aa: b5:42:43:3e:ef:85:9d:78:1e:41:f6:31:6b:cf:1c: b4:ff:67:e1:b7:71:27:96:88:79:d4:4f:0b:9f:69: f2:9e:34:14:5c:d4:0f:4b:07:b9:04:a1:d6:41:e1: 9e:6e:c1:29:c7:51:1b:cd:50:50:cf:c3:af:52:de: 3d:85:9a:89:c4:91:ba:46:26:19:69:b0:35:dc:81: 52:6c:c5:e5:28:d5:a3:97:45:21:b1:af:27:91:bb: 9c:3e:15:cd:e9:2d:04:22:13:37:3f:0d:c9:c5:63: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0D:84:55:33:ED:DE:F4:17:23:C2:BA:DE:11:75:EA:A3:46:C1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8e00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c1:d9:71:43:6f:1e:3f:9f:75:25:28:00:0d:ee:4d:dc:7a: e2:58:c0:66:8d:87:77:0c:22:0c:83:04:d7:74:86:83:97:b8: d7:d0:4f:4b:d1:34:f7:77:6a:7b:65:f1:b5:9c:3b:2a:d7:7c: 81:9b:30:a1:3b:cc:65:69:8f:42:93:c3:8d:2d:09:3d:41:69: a1:af:c9:d2:57:67:e1:f8:53:69:2f:a8:ac:27:ae:32:0c:22: ff:f8:d7:b7:0a:3f:03:46:e9:f9:90:1d:13:4b:d9:3d:be:22: 86:27:68:4d:c7:6a:bd:a9:14:9e:7d:be:25:ce:07:08:25:a9: af:bc:3e:71:8b:e4:75:91:65:2c:72:6d:86:21:02:e8:a6:33: 8a:c1:ce:2e:5f:39:72:7e:14:81:a1:a1:7b:29:8c:5e:ac:d9: 81:f0:dd:30:19:e3:24:84:62:8f:4d:2b:f2:c2:87:29:91:d0: da:8d:f7:25:6c:7b:5c:72:c1:ba:05:a1:3a:3f:f7:30:81:7a: ac:b0:a6:22:90:6e:87:2e:6e:d2:b3:ab:2d:72:54:5d:75:1f: 00:28:92:96:e0:b5:ce:0d:1b:95:61:42:83:8b:39:2b:16:38: b8:34:6a:3e:ef:dd:3c:32:fa:71:cc:05:a9:c5:35:c1:34:be: 01:6c:71:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkVcOxLeyPwKvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTY1MjcyZTgtNjAzYS00MDNhLWI1OWQtYTAyMjJiNDI2ZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUh2jdMTofjJ9PxDFnvxQw1SgVQFcFdHn1A Og0b58prE81iyi0yQaBEo5RA+YXgZ/1TH+btMJ0Ne4hxgwiwmyHC9puHHxh7PYjh 9Z/TcTs+uDV0TLTl7waljNm8O3R0o3fJb8GfaNPItSj2/Frpvp9+WMvNaH6I/g+g 5DH6GWzsbrcgf+6OastFuJ46UKf9ZhqKaqq1QkM+74WdeB5B9jFrzxy0/2fht3En loh51E8Ln2nynjQUXNQPSwe5BKHWQeGebsEpx1EbzVBQz8OvUt49hZqJxJG6RiYZ abA13IFSbMXlKNWjl0Uhsa8nkbucPhXN6S0EIhM3Pw3JxWNUxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPYNhFUz7d70FyPCut4RdeqjRsG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGU5NDVjZmUtOTA5OC0z NmI3LTgxZmQtNDIzZWQ3MjBiZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnB2XFDbx4/n3UlKAAN7k3ceuJYwGaNh3cMIgyDBNd0hoOXuNfQ T0vRNPd3antl8bWcOyrXfIGbMKE7zGVpj0KTw40tCT1BaaGvydJXZ+H4U2kvqKwn rjIMIv/417cKPwNG6fmQHRNL2T2+IoYnaE3Har2pFJ59viXOBwglqa+8PnGL5HWR ZSxybYYhAuimM4rBzi5fOXJ+FIGhoXspjF6s2YHw3TAZ4ySEYo9NK/LChymR0NqN 9yVse1xywboFoTo/9zCBeqywpiKQbocubtKzqy1yVF11HwAokpbgtc4NG5VhQoOL OSsWOLg0aj7v3Twy+nHMBanFNcE0vgFscSQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:00 2025 by rpki-client