$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b24c2a0-c7d3-3cbd-99a3-48458c5e4122.roa File: 5b24c2a0-c7d3-3cbd-99a3-48458c5e4122.roa (raw, json) Hash identifier: ntGI4kQm4PDXl9Eo3grx9VQo+MFSQk0zJg/NVXIA3Ig= Subject key identifier: 98:BD:7B:AD:5C:5E:FE:0A:5A:D0:66:31:13:C0:90:5F:02:20:63:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973FD10720CFC463BA9080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b24c2a0-c7d3-3cbd-99a3-48458c5e4122.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3f:d1:07:20:cf:c4:63:ba:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7869bfe9-c478-47c9-938f-8c11070d0f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:27:0e:f6:19:c7:8d:9c:65:36:34:61:13: ce:29:49:44:76:a6:b1:f6:a5:f2:70:f0:0b:66:d4: 51:c0:bd:5e:e8:12:e3:0f:13:9e:9e:6c:94:f2:91: 09:71:a0:76:a2:1e:0d:83:47:57:8c:b9:47:f2:81: 4a:fc:e2:cf:7a:ad:0e:7f:40:e4:0e:30:f1:90:da: 80:9c:48:7e:63:b7:82:a7:fa:38:e0:e1:86:72:0b: b6:20:fd:0a:e8:f2:ba:28:74:5c:95:b5:92:a6:29: 90:04:fa:20:6a:5b:59:c1:95:bd:aa:3c:5a:24:be: 02:43:d8:35:ba:2e:5a:d6:aa:02:fc:bc:38:e7:24: 59:06:f0:9c:48:61:d7:cf:65:40:0c:76:75:df:0d: a8:2d:79:c5:05:64:e1:ca:10:dd:e6:82:98:c3:1c: 50:cf:f8:b7:2c:82:46:29:af:76:8e:d9:bb:9d:8f: d8:31:d7:78:52:00:ed:4c:ee:43:42:77:53:f3:c0: 6a:43:98:be:af:9c:f0:0e:d0:bc:fb:46:80:a0:0e: 7c:78:92:60:82:54:eb:44:b4:d5:75:e2:a5:e7:c5: 83:44:65:92:8e:73:df:53:b1:97:a5:37:04:5e:27: 2e:e4:ca:2d:31:48:3a:24:0c:a4:44:53:f3:04:7b: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BD:7B:AD:5C:5E:FE:0A:5A:D0:66:31:13:C0:90:5F:02:20:63:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b24c2a0-c7d3-3cbd-99a3-48458c5e4122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:78:f7:9d:14:d0:c5:45:49:c1:4e:9f:7b:fa:92:40:a6:3e: d3:7f:0e:db:af:56:fc:22:67:4a:fc:94:31:b7:f4:7e:3f:93: 73:7e:a5:2c:85:06:a9:06:f9:91:6c:c8:0e:cd:7b:f4:8c:16: 19:78:eb:84:2a:a2:24:b5:6f:61:6e:27:ba:ed:56:f4:6a:c6: 85:0b:9e:42:40:e1:21:91:c6:1a:62:b8:15:e5:0f:93:7b:fa: ca:70:cf:c5:41:0c:63:36:c1:17:dc:ba:8c:df:10:87:1a:68: 0c:ad:dd:e4:40:89:4b:dc:16:69:17:a0:e8:be:1e:db:bf:a9: 8c:8b:49:ae:fc:a1:18:0f:8a:31:ba:ca:1a:ab:2b:01:18:e6: 5d:0d:c6:b1:27:ef:cd:1e:74:fa:12:da:88:c7:8b:8b:21:18: f2:91:24:aa:b5:be:0e:e6:1e:fc:15:bf:d6:10:18:42:ca:0a: 5b:31:33:3c:57:d4:b2:94:49:04:55:76:7b:af:43:cb:82:61: 82:63:0e:d7:a6:d0:0e:24:97:52:df:b5:c5:f0:d3:ad:38:bf: c6:51:9c:f5:49:5b:7a:74:7a:aa:ae:a0:9c:04:02:fa:17:9d: b7:09:ee:a4:83:08:45:fc:98:a3:11:9a:a3:15:f3:ae:cd:31: 7b:5e:b8:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnlz/RByDPxGO6kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Nzg2OWJmZTktYzQ3OC00N2M5LTkzOGYtOGMxMTA3MGQwZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LEnDvYZx42cZTY0YRPOKUlEdqax9qXycPAL ZtRRwL1e6BLjDxOenmyU8pEJcaB2oh4Ng0dXjLlH8oFK/OLPeq0Of0DkDjDxkNqA nEh+Y7eCp/o44OGGcgu2IP0K6PK6KHRclbWSpimQBPogaltZwZW9qjxaJL4CQ9g1 ui5a1qoC/Lw45yRZBvCcSGHXz2VADHZ13w2oLXnFBWThyhDd5oKYwxxQz/i3LIJG Ka92jtm7nY/YMdd4UgDtTO5DQndT88BqQ5i+r5zwDtC8+0aAoA58eJJgglTrRLTV deKl58WDRGWSjnPfU7GXpTcEXicu5MotMUg6JAykRFPzBHs56wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJi9e61cXv4KWtBmMRPAkF8CIGMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWIyNGMyYTAtYzdkMy0z Y2JkLTk5YTMtNDg0NThjNWU0MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFx4950U0MVFScFOn3v6kkCmPtN/DtuvVvwiZ0r8lDG39H4/k3N+ pSyFBqkG+ZFsyA7Ne/SMFhl464QqoiS1b2FuJ7rtVvRqxoULnkJA4SGRxhpiuBXl D5N7+spwz8VBDGM2wRfcuozfEIcaaAyt3eRAiUvcFmkXoOi+Htu/qYyLSa78oRgP ijG6yhqrKwEY5l0NxrEn780edPoS2ojHi4shGPKRJKq1vg7mHvwVv9YQGELKClsx MzxX1LKUSQRVdnuvQ8uCYYJjDtem0A4kl1LftcXw0604v8ZRnPVJW3p0eqquoJwE AvoXnbcJ7qSDCEX8mKMRmqMV867NMXteuA8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:42 2025 by rpki-client