$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e1b7adf-3392-375e-bb54-e7725aebb78a.roa File: 8e1b7adf-3392-375e-bb54-e7725aebb78a.roa (raw, json) Hash identifier: LP7+f6jNYPIpA4bMrAn+P0YDz7ebKK2zoraFt/tziaE= Subject key identifier: A2:11:83:09:0A:36:2E:E3:49:AF:B6:24:5A:11:D2:AA:13:82:54:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620234F097864CCC80D7E700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e1b7adf-3392-375e-bb54-e7725aebb78a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:e380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:34:f0:97:86:4c:cc:80:d7:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2a097fe5-5969-4d37-854f-9581eb76a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:e9:ab:e4:dd:a7:00:08:57:e0:92:26:5e: 05:7f:48:8c:f7:4a:ef:6a:9c:32:f3:bc:04:ab:ef: e6:8a:09:2b:da:39:99:41:16:a4:e4:4c:79:4d:7a: 7f:81:d8:07:be:26:17:4e:16:f4:48:4f:38:e3:f4: f8:ec:21:eb:8d:38:fb:9b:a2:12:a1:08:dc:65:fc: cc:96:58:f5:e6:8e:d8:47:90:9e:2f:e5:ac:9d:d5: 4e:fb:e6:02:d4:0a:36:d9:73:6f:ce:42:5b:c6:e0: f0:18:ea:fd:16:78:95:47:4a:66:51:cc:8e:e0:90: a9:8a:c1:e5:01:5c:4c:b0:7b:42:5a:98:0a:ae:07: c2:f2:e3:57:c2:b6:4a:96:80:cc:0e:a5:2f:ae:1a: 76:01:b1:cd:a2:3e:56:3d:75:79:2f:21:31:16:96: 8b:36:7a:37:57:37:6d:66:93:e2:64:8c:cc:cc:5e: 4c:db:92:d6:71:6e:c6:50:73:36:54:66:aa:a0:12: 82:b3:a7:b0:00:46:60:b8:f7:fb:5a:99:86:1b:22: 5b:c2:10:13:dc:bf:0e:f9:02:4e:ac:af:84:05:4e: 31:67:76:93:d0:86:27:84:a0:43:af:3b:2c:64:3b: c9:47:d0:40:e4:5b:e6:45:71:ee:61:94:35:62:29: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:11:83:09:0A:36:2E:E3:49:AF:B6:24:5A:11:D2:AA:13:82:54:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e1b7adf-3392-375e-bb54-e7725aebb78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:91:f2:ba:4b:05:29:90:13:2c:3b:1c:6e:56:36:91:9e:d1: a9:07:48:ce:b8:42:b3:82:18:19:42:5e:97:dc:17:1f:08:5d: fb:4e:58:74:fa:06:8a:21:95:af:7e:19:01:b7:43:3a:d1:15: e2:6c:fd:72:ea:6e:c4:ee:03:8a:c9:4f:6f:17:bc:4e:2b:75: a5:f0:1e:c4:c6:a2:ef:4d:1b:89:17:33:71:c6:75:e2:1d:27: 08:1c:b4:b0:37:a0:33:1d:e9:63:d9:39:b7:39:56:02:00:b7: 5c:13:3d:aa:7b:f5:34:bf:c6:54:dc:2f:9e:ca:fc:b7:7b:04: b1:e4:a1:6e:92:e9:bf:07:5b:ef:6d:cb:29:e9:6e:32:3a:a1: a6:45:0e:57:b1:fb:96:93:5c:05:08:a5:d2:aa:02:83:ee:95: cc:e6:1a:e4:9c:23:f0:3c:2a:eb:64:dc:fc:2d:4f:3f:ba:2f: 25:ad:ef:a0:40:03:25:46:a5:3a:84:29:9e:13:8b:66:f5:4a: 41:86:9f:9a:1d:8c:bc:40:38:9b:34:8b:01:88:ba:25:a5:92: 72:7a:c2:19:e2:67:40:dd:e5:c4:8b:d2:d5:2e:3f:3e:3f:b5: 88:93:e4:6d:56:c5:3e:4f:e4:49:ad:42:45:29:e0:b2:ae:c0: ec:d3:fe:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjTwl4ZMzIDX5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmEwOTdmZTUtNTk2OS00ZDM3LTg1NGYtOTU4MWViNzZhNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7pq+TdpwAIV+CSJl4Ff0iM90rvapwy87wE q+/migkr2jmZQRak5Ex5TXp/gdgHviYXThb0SE844/T47CHrjTj7m6ISoQjcZfzM llj15o7YR5CeL+WsndVO++YC1Ao22XNvzkJbxuDwGOr9FniVR0pmUcyO4JCpisHl AVxMsHtCWpgKrgfC8uNXwrZKloDMDqUvrhp2AbHNoj5WPXV5LyExFpaLNno3Vzdt ZpPiZIzMzF5M25LWcW7GUHM2VGaqoBKCs6ewAEZguPf7WpmGGyJbwhAT3L8O+QJO rK+EBU4xZ3aT0IYnhKBDrzssZDvJR9BA5FvmRXHuYZQ1YimvPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIRgwkKNi7jSa+2JFoR0qoTglSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUxYjdhZGYtMzM5Mi0z NzVlLWJiNTQtZTc3MjVhZWJiNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC+R8rpLBSmQEyw7HG5WNpGe0akHSM64QrOCGBlCXpfcFx8IXftO WHT6Boohla9+GQG3QzrRFeJs/XLqbsTuA4rJT28XvE4rdaXwHsTGou9NG4kXM3HG deIdJwgctLA3oDMd6WPZObc5VgIAt1wTPap79TS/xlTcL57K/Ld7BLHkoW6S6b8H W+9tyynpbjI6oaZFDlex+5aTXAUIpdKqAoPulczmGuScI/A8Kutk3PwtTz+6LyWt 76BAAyVGpTqEKZ4Ti2b1SkGGn5odjLxAOJs0iwGIuiWlknJ6whniZ0Dd5cSL0tUu Pz4/tYiT5G1WxT5P5EmtQkUp4LKuwOzT/kM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:53 2025 by rpki-client