$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e87500a-f334-3785-a5c8-86b23a4b3537.roa File: 8e87500a-f334-3785-a5c8-86b23a4b3537.roa (raw, json) Hash identifier: qwXABjQLXfdHYHC3KvFScA2D0gpnlybxxoCrlYhhcfk= Subject key identifier: 3E:CF:D4:71:23:0E:76:02:C8:28:F2:EF:C3:A2:53:75:53:40:B1:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620229A481ABC6B5A1958400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e87500a-f334-3785-a5c8-86b23a4b3537.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2d80:8d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:29:a4:81:ab:c6:b5:a1:95:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=3494b3ec-af1e-4861-a9d2-51b39920f1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:8b:b6:26:25:f4:b8:6b:cc:be:13:80:e5: fd:bf:b5:5d:60:25:3d:11:50:d7:51:be:68:9d:90: e7:80:a4:ed:6c:7f:40:39:4e:69:b5:10:f7:b7:6a: 54:02:fd:25:fe:98:67:b3:e6:aa:82:c3:9b:25:f6: 8c:9a:c6:be:f3:9b:29:b0:9d:35:d2:9f:4a:f2:43: 61:a2:cd:a7:56:29:40:d7:46:50:84:dd:76:d8:25: a5:99:ef:09:2a:e5:26:5e:e5:4c:19:72:dd:de:80: 55:7a:88:99:86:cd:fa:1f:f3:a7:28:22:be:44:ba: ad:55:f6:9c:45:3d:f6:bb:02:27:5c:d6:cd:ff:4c: 79:12:a3:b2:bf:02:f2:16:54:e8:c7:48:17:46:37: 4f:ec:c2:13:41:ff:1a:43:24:6f:eb:37:96:b3:08: e7:4f:6c:ab:58:db:0f:47:a6:e3:eb:01:85:5d:40: 8b:11:e3:08:26:21:15:d7:39:c8:95:83:37:75:cb: d2:f5:9e:22:71:c1:bd:1f:a9:ec:df:c7:34:cc:2b: 6c:18:2b:1a:d3:64:0d:e3:da:76:8a:30:99:3b:1b: 16:b8:0b:1f:a0:91:e5:5b:bb:5b:82:7a:d3:10:c8: 99:42:85:61:ee:e4:55:b3:0b:41:19:0b:59:b0:63: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:D4:71:23:0E:76:02:C8:28:F2:EF:C3:A2:53:75:53:40:B1:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e87500a-f334-3785-a5c8-86b23a4b3537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:20:b4:43:6c:2e:06:bc:0c:00:7d:ff:a2:c6:7e:30:3a:d3: a7:01:a9:3c:08:4a:5c:1b:d6:71:29:d0:39:a8:e2:7a:37:b0: c7:38:db:09:e5:ad:63:14:63:36:8c:d6:ae:44:40:dd:7c:a3: ce:22:5d:42:69:0c:be:66:44:bf:f5:35:6b:a3:b5:71:eb:2b: 8e:31:ec:07:ba:6c:f0:04:c7:c9:13:42:1d:ca:e9:ad:0c:ac: f1:33:e5:5d:33:ee:b7:a8:93:26:91:6d:08:60:3d:f2:d7:36: 1a:32:c0:45:5b:c5:ac:16:47:88:db:b5:d7:27:79:99:9b:f0: 7e:a1:95:9f:5a:07:8a:e4:4b:9e:00:94:7b:41:03:31:a4:c8: 74:ef:09:10:2b:ca:c9:88:31:91:b9:14:b4:4d:c5:40:93:72: e0:d7:a8:ec:e8:0c:f0:13:74:8d:94:30:fc:e5:dd:f3:38:e9: 6a:ca:ea:22:80:44:3d:59:97:2c:c8:6c:a0:ae:2a:1b:8c:0d: b1:63:38:60:a6:cc:c5:2c:e8:cb:07:88:20:bc:1e:58:b7:aa: 0e:2a:75:47:29:4c:1d:de:a9:0e:1c:48:94:1b:94:76:92:08: b0:ff:07:5c:79:93:8a:29:a6:28:75:71:25:c3:24:d7:a0:a8: 5a:54:e8:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAimkgavGtaGVhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzQ5NGIzZWMtYWYxZS00ODYxLWE5ZDItNTFiMzk5MjBmMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQGLtiYl9LhrzL4TgOX9v7VdYCU9EVDXUb5o nZDngKTtbH9AOU5ptRD3t2pUAv0l/phns+aqgsObJfaMmsa+85spsJ010p9K8kNh os2nVilA10ZQhN122CWlme8JKuUmXuVMGXLd3oBVeoiZhs36H/OnKCK+RLqtVfac RT32uwInXNbN/0x5EqOyvwLyFlTox0gXRjdP7MITQf8aQyRv6zeWswjnT2yrWNsP R6bj6wGFXUCLEeMIJiEV1znIlYM3dcvS9Z4iccG9H6ns38c0zCtsGCsa02QN49p2 ijCZOxsWuAsfoJHlW7tbgnrTEMiZQoVh7uRVswtBGQtZsGOj9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7P1HEjDnYCyCjy78OiU3VTQLEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU4NzUwMGEtZjMzNC0z Nzg1LWE1YzgtODZiMjNhNGIzNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcgtENsLga8DAB9/6LGfjA606cBqTwISlwb1nEp0Dmo4no3sMc4 2wnlrWMUYzaM1q5EQN18o84iXUJpDL5mRL/1NWujtXHrK44x7Ae6bPAEx8kTQh3K 6a0MrPEz5V0z7reokyaRbQhgPfLXNhoywEVbxawWR4jbtdcneZmb8H6hlZ9aB4rk S54AlHtBAzGkyHTvCRArysmIMZG5FLRNxUCTcuDXqOzoDPATdI2UMPzl3fM46WrK 6iKARD1ZlyzIbKCuKhuMDbFjOGCmzMUs6MsHiCC8Hli3qg4qdUcpTB3eqQ4cSJQb lHaSCLD/B1x5k4oppih1cSXDJNegqFpU6Lc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:04 2025 by rpki-client