$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa File: 873612b2-2503-3467-b4f8-b4c71df87a34.roa (raw, json) Hash identifier: y6qRTHg+KT5ZxusTA13ZDLPYTi6J4vnMHEqUuMmaZ+Y= Subject key identifier: 23:B7:0B:FD:B9:A4:4F:D1:F4:43:AF:8C:DB:08:22:78:35:14:F8:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0CDC29951A2637109D80F780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:29:95:1a:26:37:10:9d:80:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=48b1cc3f-99c6-4655-915c-be858ca4919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:a1:2b:42:96:31:fa:0f:d0:89:af:a6:89: ff:52:26:ff:ce:fe:77:74:e2:9a:af:b9:19:56:7e: 84:88:98:6e:5d:b2:60:63:61:f3:0f:79:2e:5a:bb: 43:55:d7:a4:77:f1:b0:70:70:6b:67:24:36:60:96: 53:51:05:20:15:96:9d:1c:eb:23:74:11:fd:37:94: 09:14:96:6e:13:de:36:7a:e9:25:32:ca:2c:40:bb: 26:22:0d:54:29:fe:2f:59:ae:af:43:53:a8:19:af: 5f:16:0d:fa:49:e8:21:91:1c:5a:93:76:44:a5:ed: 20:a9:ec:98:cf:e9:89:04:ef:b3:5c:fb:f9:46:7c: 08:92:45:46:d3:43:f5:2e:4c:1d:e8:c6:0d:25:9a: da:a3:91:c3:16:27:49:a6:e0:95:7e:60:20:68:f6: 5c:f3:4c:68:1d:65:fe:fc:36:1f:ed:b2:2f:ce:44: c7:4b:06:1e:c1:b6:cb:33:83:81:44:41:71:26:87: 4c:6b:17:28:1e:a7:41:43:dc:6e:2c:a8:e8:74:99: 45:bf:20:26:dd:4c:78:e3:20:bc:d4:be:42:de:32: a5:36:c4:a8:ce:89:44:dc:0e:db:3e:9d:ba:09:b2: 7a:8c:9c:67:e7:d1:33:34:ab:f3:13:5e:65:b6:39: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B7:0B:FD:B9:A4:4F:D1:F4:43:AF:8C:DB:08:22:78:35:14:F8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:90:02:4a:f1:6b:73:7d:d9:98:4b:fd:33:3a:82:d8:92:28: fa:64:ea:df:bb:c6:fb:c6:3d:3b:7c:09:18:e4:b5:5a:d8:2b: d4:33:3b:86:0d:53:8e:92:9b:fe:18:93:dc:5e:a5:b4:c3:71: 56:a2:d1:3b:a4:af:43:ba:48:16:50:39:35:ed:63:c4:2f:73: 64:24:d4:64:b9:96:ed:69:27:d1:6e:b1:69:3f:9c:08:a4:7f: 98:bf:c1:67:1f:d5:2b:d7:e8:3d:34:56:38:9a:d9:82:fb:3c: 34:79:be:51:2d:ff:92:b3:e3:34:9f:da:f4:55:45:04:a8:23: 40:d2:d9:0f:5d:4d:18:c9:6e:7a:db:ce:54:2d:48:54:28:f6: 32:ec:19:cb:64:18:20:ea:45:db:13:ef:c7:f2:e4:96:29:23: 30:ac:53:02:49:6f:b5:b7:37:1f:0b:15:0c:4b:0a:a2:b7:a2: 09:72:ec:08:59:11:c4:36:e4:11:47:41:ed:98:50:53:78:28: 5e:cd:fc:09:9e:1a:f4:0d:a5:26:84:e8:86:5c:e3:8f:86:14: 01:1a:34:dd:d1:25:b4:bc:3a:0d:a8:84:4a:57:27:86:c8:0f: eb:aa:eb:ba:90:72:dd:b1:b6:ef:61:8b:42:2c:85:9e:aa:29: e2:f6:a4:e8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsM3CmVGiY3EJ2A94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NDhiMWNjM2YtOTljNi00NjU1LTkxNWMtYmU4NThjYTQ5MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj42hK0KWMfoP0Imvpon/Uib/zv53dOKar7kZ Vn6EiJhuXbJgY2HzD3kuWrtDVdekd/GwcHBrZyQ2YJZTUQUgFZadHOsjdBH9N5QJ FJZuE942euklMsosQLsmIg1UKf4vWa6vQ1OoGa9fFg36SeghkRxak3ZEpe0gqeyY z+mJBO+zXPv5RnwIkkVG00P1Lkwd6MYNJZrao5HDFidJpuCVfmAgaPZc80xoHWX+ /DYf7bIvzkTHSwYewbbLM4OBREFxJodMaxcoHqdBQ9xuLKjodJlFvyAm3Ux44yC8 1L5C3jKlNsSozolE3A7bPp26CbJ6jJxn59EzNKvzE15ltjljPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCO3C/25pE/R9EOvjNsIIng1FPjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODczNjEyYjItMjUwMy0z NDY3LWI0ZjgtYjRjNzFkZjg3YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgKQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd5ACSvFrc33ZmEv9MzqC2JIo+mTq37vG+8Y9O3wJGOS1Wtgr1DM7 hg1TjpKb/hiT3F6ltMNxVqLRO6SvQ7pIFlA5Ne1jxC9zZCTUZLmW7Wkn0W6xaT+c CKR/mL/BZx/VK9foPTRWOJrZgvs8NHm+US3/krPjNJ/a9FVFBKgjQNLZD11NGMlu etvOVC1IVCj2MuwZy2QYIOpF2xPvx/LklikjMKxTAklvtbc3HwsVDEsKoreiCXLs CFkRxDbkEUdB7ZhQU3goXs38CZ4a9A2lJoTohlzjj4YUARo03dEltLw6DaiESlcn hsgP66rrupBy3bG272GLQiyFnqop4vak6A== -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:40 2025 by rpki-client