$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6840e00d-f964-3a66-a8d8-e695760c9298.roa File: 6840e00d-f964-3a66-a8d8-e695760c9298.roa (raw, json) Hash identifier: ztgS41+8NNRpM5S7IHQndNiBzp79wHqARlA4VmX+3J0= Subject key identifier: 28:61:C6:AB:06:F7:01:E8:3D:0D:65:44:23:1E:66:20:8C:83:73:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B61741D584DEF78FB82DFAC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6840e00d-f964-3a66-a8d8-e695760c9298.roa Signing time: Wed 01 Oct 2025 20:15:04 +0000 ROA not before: Wed 01 Oct 2025 20:15:04 +0000 ROA not after: Tue 30 Dec 2025 21:15:04 +0000 asID: 19905 IP address blocks: 2604:2d80:1c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:74:1d:58:4d:ef:78:fb:82:df:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:15:04 2025 GMT Not After : Dec 30 21:15:04 2025 GMT Subject: CN=197424b2-de88-4e01-a255-560f5620a4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:23:1c:7d:03:cd:0a:14:57:dc:41:30:03: e8:a0:fc:bc:b1:26:5d:ba:12:79:1c:82:dd:95:4c: 1d:a4:be:17:ad:ab:78:51:8b:5b:bc:8c:1a:74:40: a5:9f:84:92:e2:41:1e:00:fb:b0:fd:0f:d2:44:fb: 5a:4b:76:e4:3e:0b:86:26:81:55:08:88:0f:a1:69: 49:46:02:b7:b8:c7:32:10:89:6f:00:39:7d:22:5d: 51:6e:27:c6:48:47:5c:a5:33:f5:2b:d6:53:52:2c: bb:d7:c0:18:fe:02:5b:9f:2c:85:3b:53:0a:7c:73: 40:da:30:96:f1:23:49:f4:28:43:78:f3:95:52:01: 47:09:b1:9a:ad:9a:bd:3d:a8:6b:42:5d:a9:e7:d3: 24:e1:e9:69:dc:c0:72:15:4a:4b:9a:4c:2b:8a:bb: 86:9c:8a:b3:53:84:6e:27:a9:66:91:e4:6c:d8:ee: e6:a1:00:e0:8b:34:09:ce:de:50:a2:d6:88:9b:1c: 00:78:2b:a3:b7:bd:f3:10:b8:55:6a:9c:61:e6:a9: d4:8d:5e:4e:da:98:80:50:51:27:67:ea:03:c9:4a: 31:6a:95:f1:82:0a:e5:f4:9f:ee:ab:9a:49:64:a3: 58:a6:05:6e:b0:c0:38:f1:b0:dd:02:c3:c6:3d:16: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:61:C6:AB:06:F7:01:E8:3D:0D:65:44:23:1E:66:20:8C:83:73:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6840e00d-f964-3a66-a8d8-e695760c9298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c7:f9:2a:9f:40:3b:80:cc:6e:51:dd:2f:22:41:91:47:3e: 70:fe:22:74:88:e7:21:a7:91:62:ff:c1:7c:35:68:7b:86:bd: 97:96:25:58:30:97:44:4e:b7:e2:06:a8:f8:ee:16:f1:70:a0: ee:81:a3:e1:bb:02:5c:a0:c3:aa:b9:a4:a9:92:14:ce:f6:54: 20:5e:fd:8c:07:a4:04:ab:42:44:13:c7:02:ac:fe:f7:35:3d: 0c:a0:6d:af:96:57:11:a1:e8:7e:f1:cd:04:44:43:fe:c4:a5: 2c:c7:ce:bd:d2:0e:b1:20:77:2a:50:13:cc:ce:c7:85:28:ce: e3:ba:94:7b:26:6c:1c:ac:73:03:69:e6:7b:48:29:62:44:70: f0:d7:55:e1:96:d8:1d:b8:f4:7f:f7:56:91:25:58:92:d5:40: fa:47:78:34:3d:9c:36:9a:5f:1a:94:c0:f4:d5:ca:6f:73:d5: f2:c5:ff:b8:16:b4:f5:34:97:26:b5:ba:30:08:fb:cc:73:ee: cd:49:cb:67:ba:c9:6d:f2:a2:38:1e:f0:17:da:e1:c7:09:5b: d2:2c:3f:1c:2d:a8:d0:c5:db:ed:1e:2f:bc:e9:f1:f2:e4:44: 1d:a6:47:12:44:4e:29:68:26:de:7c:ba:34:8d:14:d8:ec:ab: 58:8c:9f:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEthdB1YTe94+4LfrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTUwNFoXDTI1MTIzMDIxMTUwNFowLzEtMCsGA1UEAxMk MTk3NDI0YjItZGU4OC00ZTAxLWEyNTUtNTYwZjU2MjBhNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2sjHH0DzQoUV9xBMAPooPy8sSZduhJ5HILd lUwdpL4Xrat4UYtbvIwadECln4SS4kEeAPuw/Q/SRPtaS3bkPguGJoFVCIgPoWlJ RgK3uMcyEIlvADl9Il1RbifGSEdcpTP1K9ZTUiy718AY/gJbnyyFO1MKfHNA2jCW 8SNJ9ChDePOVUgFHCbGarZq9PahrQl2p59Mk4elp3MByFUpLmkwriruGnIqzU4Ru J6lmkeRs2O7moQDgizQJzt5QotaImxwAeCujt73zELhVapxh5qnUjV5O2piAUFEn Z+oDyUoxapXxggrl9J/uq5pJZKNYpgVusMA48bDdAsPGPRbSXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChhxqsG9wHoPQ1lRCMeZiCMg3OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjg0MGUwMGQtZjk2NC0z YTY2LWE4ZDgtZTY5NTc2MGM5Mjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTH+SqfQDuAzG5R3S8iQZFHPnD+InSI5yGnkWL/wXw1aHuGvZeW JVgwl0ROt+IGqPjuFvFwoO6Bo+G7Alygw6q5pKmSFM72VCBe/YwHpASrQkQTxwKs /vc1PQygba+WVxGh6H7xzQREQ/7EpSzHzr3SDrEgdypQE8zOx4UozuO6lHsmbBys cwNp5ntIKWJEcPDXVeGW2B249H/3VpElWJLVQPpHeDQ9nDaaXxqUwPTVym9z1fLF /7gWtPU0lya1ujAI+8xz7s1Jy2e6yW3yojge8Bfa4ccJW9IsPxwtqNDF2+0eL7zp 8fLkRB2mRxJETiloJt58ujSNFNjsq1iMn7A= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:36 2025 by rpki-client