$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929019ad-3c6f-3fa3-9898-7ce163e0b67d.roa File: 929019ad-3c6f-3fa3-9898-7ce163e0b67d.roa (raw, json) Hash identifier: 5YNmD1tTnP/9qhYbtLYXnZh5339rXtClBJ6NWqrx8YU= Subject key identifier: 3F:32:79:B8:B1:2D:34:5E:9D:16:57:1A:05:0D:99:AB:B2:25:BA:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475D3F9B759471276CD77200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929019ad-3c6f-3fa3-9898-7ce163e0b67d.roa Signing time: Mon 22 Sep 2025 11:57:59 +0000 ROA not before: Mon 22 Sep 2025 11:57:59 +0000 ROA not after: Sun 21 Dec 2025 12:57:59 +0000 asID: 19905 IP address blocks: 2604:2d80:3700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5d:3f:9b:75:94:71:27:6c:d7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:59 2025 GMT Not After : Dec 21 12:57:59 2025 GMT Subject: CN=6cb14b76-33ae-4aee-b961-eceaf261121d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:65:42:99:94:69:4e:32:85:89:83:a9:60: 4f:cf:b2:fb:86:9b:3b:86:4c:a5:10:ff:7c:b8:3f: 55:03:99:aa:56:57:76:d1:5b:6c:dc:f2:32:8d:bb: ae:00:58:2a:2b:7f:4c:d2:31:27:47:e5:3c:90:ee: d5:d5:04:c5:83:ab:3d:90:2d:93:e7:68:11:de:e1: 48:46:e8:75:ee:fc:5e:94:5f:f2:51:65:73:fd:6f: 28:01:e9:61:0b:68:1e:96:9e:9e:fb:8a:3b:6c:56: 7e:6b:59:4c:e5:2b:ce:e4:63:e0:93:e6:6d:e2:21: 53:31:a4:b9:ba:15:40:21:1e:b4:46:30:03:5c:45: 5e:2e:3f:86:fb:f4:f0:ba:f0:2d:5a:30:35:49:f1: d4:a2:6c:67:51:65:ff:18:dd:ab:3b:b7:be:c3:8d: 44:d3:a4:ba:e2:8b:f0:7a:ae:3e:aa:00:83:fe:38: a1:0b:aa:2c:3c:59:4a:7b:42:3c:51:4d:a3:80:02: fc:ec:9b:15:a2:13:a4:0f:9c:ba:2b:f0:26:93:59: 2a:5b:9e:11:ee:eb:59:32:a8:85:9b:de:bb:bc:d8: 06:17:d4:74:ae:92:1f:72:39:f3:bc:ca:ba:00:88: e2:c2:95:8d:02:e7:fc:19:92:83:73:db:3f:9b:86: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:79:B8:B1:2D:34:5E:9D:16:57:1A:05:0D:99:AB:B2:25:BA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929019ad-3c6f-3fa3-9898-7ce163e0b67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:87:4d:97:26:e9:59:56:21:31:a8:76:af:6b:6c:fb:54:ed: e3:cb:7b:2d:09:44:3b:97:ad:37:d7:f4:7a:4c:dc:ba:6a:a4: 83:17:d4:d7:83:13:8a:20:2b:37:67:5d:23:3a:94:eb:11:77: b0:58:de:7a:74:90:a7:93:5f:43:b0:4a:39:f5:33:ca:5d:52: e7:4f:75:68:de:ca:09:68:d9:46:0c:d7:01:88:39:66:9f:2c: 18:4f:c6:57:6b:cd:9a:53:3f:80:0c:ed:f0:e3:72:d9:a9:09: 42:c1:9c:cd:ca:1f:58:48:51:40:95:21:1e:c0:90:0b:0f:58: 65:6b:1b:2f:4d:18:6c:3c:d9:e9:fe:9a:9a:11:58:83:0b:fc: 5f:9e:7b:26:df:7d:fb:3e:51:bf:9f:da:c5:ce:b2:14:3d:92: ac:df:eb:7b:d1:0d:f8:76:77:61:19:00:8e:08:0d:d1:3d:a1: 44:2c:35:fa:82:24:85:fe:31:20:48:6a:c3:d9:19:80:47:c3: 2e:78:97:cf:8d:7e:58:00:99:5b:64:f4:6d:30:9e:2e:01:2d: 5d:22:ec:d3:07:d7:0a:f3:87:8d:a9:80:f3:5d:b0:cc:35:52: c1:3a:60:c6:27:fc:6b:d7:64:9b:6c:b5:60:19:46:91:42:f5: d2:50:75:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHXT+bdZRxJ2zXcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTc1OVoXDTI1MTIyMTEyNTc1OVowLzEtMCsGA1UEAxMk NmNiMTRiNzYtMzNhZS00YWVlLWI5NjEtZWNlYWYyNjExMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC1lQpmUaU4yhYmDqWBPz7L7hps7hkylEP98 uD9VA5mqVld20Vts3PIyjbuuAFgqK39M0jEnR+U8kO7V1QTFg6s9kC2T52gR3uFI Ruh17vxelF/yUWVz/W8oAelhC2gelp6e+4o7bFZ+a1lM5SvO5GPgk+Zt4iFTMaS5 uhVAIR60RjADXEVeLj+G+/TwuvAtWjA1SfHUomxnUWX/GN2rO7e+w41E06S64ovw eq4+qgCD/jihC6osPFlKe0I8UU2jgAL87JsVohOkD5y6K/Amk1kqW54R7utZMqiF m967vNgGF9R0rpIfcjnzvMq6AIjiwpWNAuf8GZKDc9s/m4Y4xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8yebixLTRenRZXGgUNmauyJbp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTI5MDE5YWQtM2M2Zi0z ZmEzLTk4OTgtN2NlMTYzZTBiNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2HTZcm6VlWITGodq9rbPtU7ePLey0JRDuXrTfX9HpM3LpqpIMX 1NeDE4ogKzdnXSM6lOsRd7BY3np0kKeTX0OwSjn1M8pdUudPdWjeyglo2UYM1wGI OWafLBhPxldrzZpTP4AM7fDjctmpCULBnM3KH1hIUUCVIR7AkAsPWGVrGy9NGGw8 2en+mpoRWIML/F+eeybfffs+Ub+f2sXOshQ9kqzf63vRDfh2d2EZAI4IDdE9oUQs NfqCJIX+MSBIasPZGYBHwy54l8+NflgAmVtk9G0wni4BLV0i7NMH1wrzh42pgPNd sMw1UsE6YMYn/GvXZJtstWAZRpFC9dJQdVw= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:09 2025 by rpki-client