$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/794101bf-339f-3f02-91f7-16f89b01a8d2.roa File: 794101bf-339f-3f02-91f7-16f89b01a8d2.roa (raw, json) Hash identifier: vmBWSuy8bmNzkYdpCXz2D9bVWJQBFyRrHcxi3+cngIM= Subject key identifier: 42:2D:66:F0:DE:73:18:61:53:09:4F:F0:7A:DE:E8:CF:56:CD:FD:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475D43E9888DDD8637D8E180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/794101bf-339f-3f02-91f7-16f89b01a8d2.roa Signing time: Mon 22 Sep 2025 11:58:01 +0000 ROA not before: Mon 22 Sep 2025 11:58:01 +0000 ROA not after: Sun 21 Dec 2025 12:58:01 +0000 asID: 19905 IP address blocks: 2604:2d80:4980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5d:43:e9:88:8d:dd:86:37:d8:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:58:01 2025 GMT Not After : Dec 21 12:58:01 2025 GMT Subject: CN=17331b8c-4a29-452d-b946-98961479b9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:2a:64:e0:19:22:d6:06:d6:65:f2:d3:e1: 1c:5b:93:a5:53:b0:4a:83:77:32:79:e0:78:bd:14: 73:1d:f4:4b:4c:11:b7:4c:50:c7:f8:23:5d:7c:52: b9:c4:6f:6d:4c:5d:4c:5a:9d:75:e2:e9:e5:b1:f2: eb:c4:3e:97:7a:86:bc:09:fa:36:9f:09:2b:68:1f: 25:a0:b7:b5:4c:f4:4c:36:a5:a6:5f:38:33:9f:ec: a1:c7:ca:c4:68:f0:7a:a9:da:11:a3:53:47:44:b1: 5b:e1:26:bb:78:4a:ba:af:25:66:06:f4:b3:f9:0a: 7c:7d:f4:c9:a5:cb:12:b0:1c:b2:5c:79:42:05:fb: aa:e1:b4:c5:7b:1b:83:c1:6c:88:a7:a5:4c:fe:44: e8:1a:35:b4:2f:b8:14:7c:09:50:18:1b:fb:d1:fb: d0:c0:73:71:68:93:d9:b2:5e:e9:cd:5b:86:d6:2c: 8a:d8:64:35:77:6e:b0:a8:cb:34:a4:59:c5:e7:94: 96:1c:6f:66:f0:6e:82:29:29:fc:53:e4:57:49:81: e2:ec:04:d8:87:08:f1:f7:a2:a3:39:01:bb:74:0a: 64:47:b2:d6:1e:99:6f:1b:74:da:de:9c:2a:11:8f: b2:f6:07:5c:50:4b:a4:60:1c:23:3c:73:7c:b2:6b: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:66:F0:DE:73:18:61:53:09:4F:F0:7A:DE:E8:CF:56:CD:FD:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/794101bf-339f-3f02-91f7-16f89b01a8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ba:6a:da:ae:9a:6d:98:ae:d3:e0:50:d3:c0:b2:05:08:2e: 15:0c:f5:66:a6:48:c1:aa:c5:ac:cf:6e:f6:25:f3:fe:e1:cb: fc:09:57:5f:8b:2d:15:d7:a5:4d:75:d0:c8:d4:05:d3:6b:dd: 98:c4:b3:32:1d:65:7c:96:24:2b:38:42:7b:4f:21:f5:3c:0c: da:c9:8a:e6:6c:39:ba:88:72:25:9b:10:ae:be:82:34:e1:46: fa:93:8f:fe:a8:12:4e:ac:30:a4:42:ed:e9:d2:bf:9f:c6:58: fc:8b:b4:f1:31:58:f2:0e:ee:04:93:49:83:e2:40:b8:0c:3d: 2c:4b:61:03:76:66:42:8a:a0:05:c7:8a:f1:fa:a6:5a:82:3a: cb:de:af:86:2e:36:0f:b1:eb:43:f1:1a:8d:17:5d:c6:eb:b0: cc:bd:e6:f3:f5:9b:b2:4d:6e:29:f7:e8:77:76:3d:44:31:88: ab:3b:87:f4:70:55:79:18:45:7e:bb:6e:d1:b9:0c:60:d7:fe: c1:6d:d1:3a:c7:51:d7:3f:ae:02:69:c2:f3:ce:65:a1:4f:7b: be:ea:39:86:0a:e0:9c:b5:0a:d1:78:22:c9:c5:61:3a:c4:7d: 7e:ce:0e:29:6b:65:1d:df:00:a7:9b:7b:87:38:4d:a6:49:e7: 23:00:f8:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHXUPpiI3dhjfY4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTgwMVoXDTI1MTIyMTEyNTgwMVowLzEtMCsGA1UEAxMk MTczMzFiOGMtNGEyOS00NTJkLWI5NDYtOTg5NjE0NzliOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDUqZOAZItYG1mXy0+EcW5OlU7BKg3cyeeB4 vRRzHfRLTBG3TFDH+CNdfFK5xG9tTF1MWp114unlsfLrxD6Xeoa8Cfo2nwkraB8l oLe1TPRMNqWmXzgzn+yhx8rEaPB6qdoRo1NHRLFb4Sa7eEq6ryVmBvSz+Qp8ffTJ pcsSsByyXHlCBfuq4bTFexuDwWyIp6VM/kToGjW0L7gUfAlQGBv70fvQwHNxaJPZ sl7pzVuG1iyK2GQ1d26wqMs0pFnF55SWHG9m8G6CKSn8U+RXSYHi7ATYhwjx96Kj OQG7dApkR7LWHplvG3Ta3pwqEY+y9gdcUEukYBwjPHN8smvKZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEItZvDecxhhUwlP8Hre6M9Wzf35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzk0MTAxYmYtMzM5Zi0z ZjAyLTkxZjctMTZmODliMDFhOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGe6atqumm2YrtPgUNPAsgUILhUM9WamSMGqxazPbvYl8/7hy/wJ V1+LLRXXpU110MjUBdNr3ZjEszIdZXyWJCs4QntPIfU8DNrJiuZsObqIciWbEK6+ gjThRvqTj/6oEk6sMKRC7enSv5/GWPyLtPExWPIO7gSTSYPiQLgMPSxLYQN2ZkKK oAXHivH6plqCOsver4YuNg+x60PxGo0XXcbrsMy95vP1m7JNbin36Hd2PUQxiKs7 h/RwVXkYRX67btG5DGDX/sFt0TrHUdc/rgJpwvPOZaFPe77qOYYK4Jy1CtF4IsnF YTrEfX7ODilrZR3fAKebe4c4TaZJ5yMA+CE= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:37 2025 by rpki-client