$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa File: 5cff5eba-b27d-3274-83f0-8e14a3836930.roa (raw, json) Hash identifier: xAOdA/55Dmzvwm06sIWbHsspKE8AP2OK24RWtjkb9LQ= Subject key identifier: 9A:82:EB:25:9E:96:CD:F2:DB:D9:EB:36:3F:C5:26:84:E4:0E:89:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB18A7B8ACB5E7A7CF600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2d80:da00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b1:8a:7b:8a:cb:5e:7a:7c:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=4f75a7b1-da2e-4940-b2bd-d813879a8744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:4b:8f:36:e3:f9:4d:b6:95:69:cd:3b:0b: 39:2b:93:9b:15:a2:d5:5d:d9:8e:28:f2:f5:4d:8f: db:d2:7f:c9:0b:2d:d2:74:11:b2:e5:e7:0c:0e:77: 95:76:70:f4:9f:74:00:c7:a2:cc:4a:cb:ee:28:cc: 45:9a:f1:b5:9f:69:2e:59:4c:2b:32:65:70:5c:5d: ef:f8:ec:2b:29:39:51:2b:98:de:07:85:f4:10:df: 82:af:35:62:fb:85:d0:56:a4:a0:d9:c3:e9:53:aa: 5d:98:64:b0:01:fc:58:7a:c1:d1:b8:e4:17:0a:4a: 89:bf:ed:6d:1e:91:ec:f1:f0:1c:e0:53:b0:75:76: e9:9e:86:b3:01:b9:67:a1:2c:12:17:9c:9c:c8:38: 70:0d:a3:7c:09:5a:e1:08:5e:1a:64:ff:8d:27:1b: f3:f2:a3:dd:38:10:c7:c0:5d:b0:99:61:22:88:88: 23:e3:b9:d5:dc:6a:56:17:00:99:41:7b:17:47:29: 15:71:af:8c:44:72:35:e8:4f:fe:fc:ae:b0:b1:40: fd:0c:88:49:4e:3b:46:8b:50:20:4e:9c:1c:dd:6e: c5:03:0d:9d:55:e2:5e:3f:36:9b:cf:84:1a:de:1a: e9:0d:c1:82:76:c3:ee:99:d6:1a:29:59:b4:f1:2f: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:EB:25:9E:96:CD:F2:DB:D9:EB:36:3F:C5:26:84:E4:0E:89:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:da00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:37:d5:38:1a:ed:58:21:3b:ce:f3:eb:0e:9c:17:fe:b5:e1: 3a:cb:e1:85:0a:a2:41:31:12:6b:ab:bf:c5:a9:ab:33:a9:ec: 21:26:cb:63:b9:a1:6a:79:1e:0f:29:64:25:9f:18:45:d6:da: e0:70:d7:3f:55:b4:ec:ef:d1:69:eb:a1:ae:32:1e:0b:a8:86: 1d:13:9e:20:38:ad:22:0b:b4:ea:68:e5:6f:f1:c1:8b:51:34: e5:f7:c4:bc:78:5a:17:62:bf:01:e4:59:f6:af:e6:c8:53:24: 27:d3:89:2a:f0:49:70:20:39:82:fc:7d:02:fb:ae:6d:46:de: a0:d7:bc:f5:fa:da:1a:78:a0:b6:4c:58:2c:0a:4b:84:1c:12: b4:65:0b:1a:4c:c0:59:5e:04:e2:75:02:7f:8c:9b:62:91:c5: 0b:72:f0:c8:ed:ab:5d:8b:98:f9:e0:13:13:dd:32:de:41:94: 51:5f:76:23:df:b7:eb:e0:dd:a2:a4:32:88:9c:9c:e4:6c:32: c4:c0:32:8a:9d:fc:42:78:6d:42:40:5d:e0:a3:99:60:39:dd: 4c:8b:41:a7:34:4d:bb:2e:32:88:2e:69:93:b1:4b:b1:b1:77: 56:59:bf:23:59:54:f8:c7:a4:8e:c3:83:88:72:5f:54:f2:17: 95:7a:75:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbLGKe4rLXnp89gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NGY3NWE3YjEtZGEyZS00OTQwLWIyYmQtZDgxMzg3OWE4NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRJLjzbj+U22lWnNOws5K5ObFaLVXdmOKPL1 TY/b0n/JCy3SdBGy5ecMDneVdnD0n3QAx6LMSsvuKMxFmvG1n2kuWUwrMmVwXF3v +OwrKTlRK5jeB4X0EN+CrzVi+4XQVqSg2cPpU6pdmGSwAfxYesHRuOQXCkqJv+1t HpHs8fAc4FOwdXbpnoazAblnoSwSF5ycyDhwDaN8CVrhCF4aZP+NJxvz8qPdOBDH wF2wmWEiiIgj47nV3GpWFwCZQXsXRykVca+MRHI16E/+/K6wsUD9DIhJTjtGi1Ag Tpwc3W7FAw2dVeJePzabz4Qa3hrpDcGCdsPumdYaKVm08S/JBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqC6yWels3y29nrNj/FJoTkDomKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNmZjVlYmEtYjI3ZC0z Mjc0LTgzZjAtOGUxNGEzODM2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHo31Tga7VghO87z6w6cF/614TrL4YUKokExEmurv8WpqzOp7CEm y2O5oWp5Hg8pZCWfGEXW2uBw1z9VtOzv0Wnroa4yHguohh0TniA4rSILtOpo5W/x wYtRNOX3xLx4WhdivwHkWfav5shTJCfTiSrwSXAgOYL8fQL7rm1G3qDXvPX62hp4 oLZMWCwKS4QcErRlCxpMwFleBOJ1An+Mm2KRxQty8Mjtq12LmPngExPdMt5BlFFf diPft+vg3aKkMoicnORsMsTAMoqd/EJ4bUJAXeCjmWA53UyLQac0TbsuMoguaZOx S7Gxd1ZZvyNZVPjHpI7Dg4hyX1TyF5V6dVw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:27 2025 by rpki-client