$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f72875e-25cc-35bc-af17-bf5bebc02568.roa File: 8f72875e-25cc-35bc-af17-bf5bebc02568.roa (raw, json) Hash identifier: LryvlrJvv1t6E4OCXjI9P3QPyVWGvmELgDeCd84P2NU= Subject key identifier: 9D:DA:02:74:5B:4B:B4:94:0A:AC:68:DA:A5:46:B8:5B:16:51:B3:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6174335BF6903DD014D15920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f72875e-25cc-35bc-af17-bf5bebc02568.roa Signing time: Wed 01 Oct 2025 20:15:14 +0000 ROA not before: Wed 01 Oct 2025 20:15:14 +0000 ROA not after: Tue 30 Dec 2025 21:15:14 +0000 asID: 19905 IP address blocks: 2604:2d81:880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:74:33:5b:f6:90:3d:d0:14:d1:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:15:14 2025 GMT Not After : Dec 30 21:15:14 2025 GMT Subject: CN=1d0a420d-5650-4a24-bd7a-2c4f89ed3ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:db:70:3c:de:27:d8:9c:13:e1:45:3b:ab: 6d:43:80:a1:74:83:18:85:6a:7f:e7:d8:aa:10:7f: 54:57:cc:a2:2b:ad:7d:f0:1f:23:eb:66:44:86:42: c6:d9:83:0b:48:09:9d:6c:47:30:b7:eb:24:53:1d: 8f:1d:41:64:8a:13:14:58:2e:13:fa:51:df:4a:7b: a4:8f:25:85:73:c3:06:97:4d:1f:4b:04:f3:bd:45: 81:86:78:dd:b4:14:b8:32:c4:e4:41:e5:b8:f9:d4: 1f:c6:21:ac:80:05:25:37:70:a6:b1:05:79:c1:c9: 75:e7:74:08:6b:1c:ab:98:64:8e:57:1c:b1:ff:93: f4:6d:90:8f:7a:68:4b:ef:80:b4:72:e1:12:19:55: 77:42:cc:76:53:cd:6e:34:c4:38:89:7a:20:96:30: 50:b3:69:37:59:80:f6:53:48:e1:a4:d7:7e:72:89: e0:1f:fb:65:06:43:44:6a:82:a2:c8:02:fb:9c:18: a4:a7:66:df:5e:fc:14:67:70:e5:60:ae:6a:66:28: c4:25:77:e3:0e:c1:53:d0:9f:69:75:18:46:bb:c6: 1f:73:23:cf:23:57:65:25:92:7e:3b:ca:2c:7e:2f: 88:47:6b:a7:1f:99:c8:72:fe:a9:78:10:71:57:5c: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:02:74:5B:4B:B4:94:0A:AC:68:DA:A5:46:B8:5B:16:51:B3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f72875e-25cc-35bc-af17-bf5bebc02568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8a:c1:97:c8:f5:77:a1:b4:2f:80:7c:53:cd:8d:d1:c7:e5: e1:02:26:ae:49:fb:b5:af:93:4a:85:dd:26:73:9c:c7:42:6d: 0e:7d:8a:19:28:66:8a:dd:fe:46:ab:e6:9e:96:91:a6:64:b2: 56:fa:e7:d4:76:89:94:25:48:f1:77:16:d0:70:66:da:49:5e: 0a:04:67:59:8e:5c:fe:03:ee:3b:06:f4:a2:e3:06:99:d9:3a: 4a:bc:7f:0f:b9:e1:e1:b1:55:bb:0e:1f:7e:31:fe:0a:6f:06: b4:83:da:70:10:fd:66:92:3b:0a:e4:2b:3a:c5:f2:70:3c:3e: 89:08:33:9b:9c:d5:01:50:ab:7a:35:00:a5:8c:c2:0b:a7:53: 9f:d5:35:84:c8:4e:c3:81:e0:9b:21:a6:d1:6b:ef:da:78:88: b5:b9:55:ed:8c:20:6b:ed:36:68:79:5d:4b:a3:31:0f:48:07: 4f:4d:9c:60:03:d6:b6:e8:ff:37:61:91:9d:9d:06:e6:db:46: ca:38:c6:90:b1:a2:f2:8b:63:f3:f6:8a:74:7e:6d:ef:8b:f2: c3:2b:bb:59:d9:66:84:ee:5d:92:6e:10:c9:ec:65:c2:c3:08: 30:65:51:c6:91:2b:79:2b:a6:b5:70:20:56:b5:6d:11:ab:cd: b2:f9:bb:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEthdDNb9pA90BTRWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTUxNFoXDTI1MTIzMDIxMTUxNFowLzEtMCsGA1UEAxMk MWQwYTQyMGQtNTY1MC00YTI0LWJkN2EtMmM0Zjg5ZWQzYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs/bcDzeJ9icE+FFO6ttQ4ChdIMYhWp/59iq EH9UV8yiK6198B8j62ZEhkLG2YMLSAmdbEcwt+skUx2PHUFkihMUWC4T+lHfSnuk jyWFc8MGl00fSwTzvUWBhnjdtBS4MsTkQeW4+dQfxiGsgAUlN3CmsQV5wcl153QI axyrmGSOVxyx/5P0bZCPemhL74C0cuESGVV3Qsx2U81uNMQ4iXogljBQs2k3WYD2 U0jhpNd+congH/tlBkNEaoKiyAL7nBikp2bfXvwUZ3DlYK5qZijEJXfjDsFT0J9p dRhGu8YfcyPPI1dlJZJ+O8osfi+IR2unH5nIcv6peBBxV1xHQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3aAnRbS7SUCqxo2qVGuFsWUbNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGY3Mjg3NWUtMjVjYy0z NWJjLWFmMTctYmY1YmViYzAyNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+KwZfI9XehtC+AfFPNjdHH5eECJq5J+7Wvk0qF3SZznMdCbQ59 ihkoZord/kar5p6WkaZkslb659R2iZQlSPF3FtBwZtpJXgoEZ1mOXP4D7jsG9KLj BpnZOkq8fw+54eGxVbsOH34x/gpvBrSD2nAQ/WaSOwrkKzrF8nA8PokIM5uc1QFQ q3o1AKWMwgunU5/VNYTITsOB4JshptFr79p4iLW5Ve2MIGvtNmh5XUujMQ9IB09N nGAD1rbo/zdhkZ2dBubbRso4xpCxovKLY/P2inR+be+L8sMru1nZZoTuXZJuEMns ZcLDCDBlUcaRK3krprVwIFa1bRGrzbL5uws= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:32 2025 by rpki-client