$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa File: 587a5b51-3a67-3149-8d6d-818570364a1c.roa (raw, json) Hash identifier: rXmZGuaroXN3S1O49LwtSvi2vLmoeZKlpYU4wyp7Qws= Subject key identifier: 99:3D:E2:91:8B:4C:44:AF:8D:91:52:62:2C:34:DE:4D:44:94:52:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4FDC7D0C1E7BEF504DBD0280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80:3d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7d:0c:1e:7b:ef:50:4d:bd:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=a31710aa-9cb7-4d92-9c9e-86742aabd33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:52:67:46:3c:6b:6c:70:cf:1c:5e:08:9f: 94:c9:a5:23:a9:ba:f2:7f:58:2c:9b:9b:fb:d5:b2: 08:f3:21:9a:50:0a:fb:ce:83:fb:8a:d1:63:39:5f: f0:44:73:57:d5:5c:ae:60:77:3f:53:54:65:53:64: 48:d1:fa:e3:b8:57:f1:82:d6:46:ff:3f:bb:e8:c9: 6f:16:e4:b7:ba:c8:d5:d9:55:c4:51:50:94:59:63: de:12:45:33:6f:5d:bc:24:84:2d:3f:08:2c:2a:35: f8:7c:56:1e:97:0a:d5:7f:ae:46:35:db:4c:b9:23: e6:14:86:91:15:ec:3e:88:cc:f2:3f:fe:10:6f:13: c5:52:83:b8:28:5b:52:eb:c0:7a:e7:81:2a:25:71: b3:d9:9e:a9:64:45:82:db:f1:dd:49:5d:e8:e2:03: ba:7a:09:c3:d3:49:6f:85:00:4a:b1:35:d7:92:91: 60:ea:b4:94:be:a4:2f:3e:9a:31:8b:56:64:46:32: 41:52:5b:ba:03:b3:09:a0:ad:59:e4:39:96:3d:17: 64:47:5c:82:ae:c9:f5:94:09:18:b4:a2:4d:4c:cf: c8:0e:e9:4d:3f:e1:6d:01:c1:ad:c5:08:00:ec:11: 47:01:54:b9:90:f1:d6:7e:a2:82:11:ae:c0:07:a2: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:E2:91:8B:4C:44:AF:8D:91:52:62:2C:34:DE:4D:44:94:52:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0f:5b:52:cc:d2:68:3c:b9:38:23:29:4c:52:77:4d:10:3f: a6:cb:8f:6a:b6:ef:c8:d8:d8:9e:0d:83:38:46:73:34:7d:02: 37:bd:dd:d6:74:36:38:a4:30:e2:72:58:a8:b0:8d:6e:1c:1d: 07:4d:18:0a:ca:07:a7:cc:3a:64:36:3a:3d:a4:e9:03:47:da: 0b:e8:32:f0:19:5b:18:d3:e1:16:ab:9e:c4:ae:45:19:19:be: 1d:09:64:4d:2b:68:be:24:b8:7e:20:b5:52:01:94:67:7e:ca: 29:cb:4e:e1:9f:a5:a1:79:38:82:fb:62:90:fd:bb:01:7e:4f: cc:01:48:63:32:9c:a6:01:28:ee:bc:69:10:ff:c2:56:ce:03: 89:1f:f8:08:b1:62:9b:73:cc:85:d8:30:1b:b4:9a:63:b0:95: 20:f3:87:a3:03:16:7b:11:79:91:23:1c:9c:08:9e:bc:23:1e: 40:8d:d9:cd:b0:78:e8:18:32:37:56:22:8d:b2:e7:18:54:7a: 0f:e4:44:a3:95:ba:cb:17:d3:68:72:c4:a9:79:f9:59:b3:70: 1b:46:35:b6:fb:5c:4a:5b:65:21:34:69:88:42:c5:3c:8b:68: 83:88:74:1c:c4:ed:da:48:8d:06:d0:55:a8:8f:5c:a4:45:8d: 0d:a1:e0:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtP3H0MHnvvUE29AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTMxNzEwYWEtOWNiNy00ZDkyLTljOWUtODY3NDJhYWJkMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1SZ0Y8a2xwzxxeCJ+UyaUjqbryf1gsm5v7 1bII8yGaUAr7zoP7itFjOV/wRHNX1VyuYHc/U1RlU2RI0frjuFfxgtZG/z+76Mlv FuS3usjV2VXEUVCUWWPeEkUzb128JIQtPwgsKjX4fFYelwrVf65GNdtMuSPmFIaR Few+iMzyP/4QbxPFUoO4KFtS68B654EqJXGz2Z6pZEWC2/HdSV3o4gO6egnD00lv hQBKsTXXkpFg6rSUvqQvPpoxi1ZkRjJBUlu6A7MJoK1Z5DmWPRdkR1yCrsn1lAkY tKJNTM/IDulNP+FtAcGtxQgA7BFHAVS5kPHWfqKCEa7AB6IAlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJk94pGLTESvjZFSYiw03k1ElFL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg3YTViNTEtM2E2Ny0z MTQ5LThkNmQtODE4NTcwMzY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYPW1LM0mg8uTgjKUxSd00QP6bLj2q278jY2J4NgzhGczR9Aje9 3dZ0NjikMOJyWKiwjW4cHQdNGArKB6fMOmQ2Oj2k6QNH2gvoMvAZWxjT4RarnsSu RRkZvh0JZE0raL4kuH4gtVIBlGd+yinLTuGfpaF5OIL7YpD9uwF+T8wBSGMynKYB KO68aRD/wlbOA4kf+AixYptzzIXYMBu0mmOwlSDzh6MDFnsReZEjHJwInrwjHkCN 2c2weOgYMjdWIo2y5xhUeg/kRKOVussX02hyxKl5+VmzcBtGNbb7XEpbZSE0aYhC xTyLaIOIdBzE7dpIjQbQVaiPXKRFjQ2h4Go= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:38 2025 by rpki-client