$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948fc640-7b65-3768-99ad-a9255837c963.roa File: 948fc640-7b65-3768-99ad-a9255837c963.roa (raw, json) Hash identifier: tIlKi1JnA3JSjm2Q25n98k5sUmFztrY3vmZDIGzjcRU= Subject key identifier: 68:50:7B:35:9C:C2:3A:71:5F:AA:E5:71:AD:F4:BA:92:07:5D:1E:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B477C7421B90978741C2E3100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948fc640-7b65-3768-99ad-a9255837c963.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 19905 IP address blocks: 2604:2d81:700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:74:21:b9:09:78:74:1c:2e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=9ca21ac0-5f0e-4b16-abc4-d2e67d562765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:dc:be:7b:cd:bd:b7:c1:18:d4:7d:78:f2: 40:c7:3f:9e:a3:87:a8:ea:04:02:ca:d8:5d:06:35: a3:9e:86:14:1f:1e:85:06:90:6d:8b:59:b7:e5:ff: 0f:5f:70:a3:44:4d:f1:29:74:12:3f:d7:ee:4a:ee: c0:0b:d2:08:dc:0f:8b:1f:90:7e:f8:63:b2:07:2e: 90:48:2f:b9:35:ba:69:f4:e2:28:70:e8:60:83:68: 8e:a0:32:35:2d:97:0c:68:56:cd:d3:93:1c:5c:9c: 06:06:d8:29:13:cc:03:27:a8:16:bc:dc:a1:d7:87: 9b:53:53:d3:5b:3e:86:00:54:45:2d:d8:b5:5a:5f: 4d:bb:c5:93:f6:ea:63:3d:4a:0f:cf:99:30:b6:9c: a2:3f:81:f4:d1:1a:4a:87:1b:d5:54:80:d6:ca:69: 60:67:1b:cf:72:5b:aa:db:d6:50:7a:75:99:f7:49: 41:a9:51:02:0e:d8:c5:a9:20:e0:9f:84:f8:d5:d5: 37:54:c7:bc:bc:22:57:1e:65:c5:37:d1:92:3e:d9: 01:1f:8f:25:db:e5:2b:be:11:c1:06:d2:c7:ef:28: e1:fb:2d:9e:d0:42:30:6c:73:fe:0a:9b:59:f4:af: d2:d3:d8:66:50:9a:61:0c:f0:cb:41:e5:01:ea:0b: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:7B:35:9C:C2:3A:71:5F:AA:E5:71:AD:F4:BA:92:07:5D:1E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948fc640-7b65-3768-99ad-a9255837c963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b6:1a:5a:f4:09:22:39:a1:81:7b:3f:95:64:cc:e8:ca:cb: fb:1e:c9:49:82:1f:53:c3:ae:ff:b9:a1:58:dd:45:da:88:3f: 20:dd:42:d6:c3:04:92:49:1d:3a:0c:d6:78:61:cb:44:dc:5f: fa:49:38:33:9d:23:4a:05:79:da:03:4f:c9:c4:38:95:a6:5b: 3a:a7:57:4b:27:c8:97:3b:73:32:7f:e2:c1:6b:7c:c0:0c:7d: af:c7:75:95:c2:56:f1:95:f3:a7:13:20:fa:6e:6a:84:f7:80: 86:a3:86:a9:a4:51:3b:06:0b:c7:b8:cb:39:f1:00:05:75:01: 72:77:77:14:f7:28:c8:5c:4d:12:13:71:af:33:87:3e:5a:2a: fb:de:89:fd:f3:42:23:7b:d4:6c:b6:53:b1:31:bc:d0:de:92: c8:82:5b:86:f0:10:af:31:b0:8e:75:d4:d1:70:f2:23:e3:da: ae:1c:3d:08:8c:15:39:64:92:71:c7:00:f1:83:17:c3:61:d2: 5a:d5:7a:3d:cf:e7:5e:3b:36:49:14:5f:42:b9:2e:8e:43:21: 24:f6:47:10:5e:d7:aa:a4:3b:40:73:e1:de:0f:fb:96:f5:73: 2a:26:6c:ff:ff:82:4c:f1:6f:b9:5d:07:b6:c8:9e:41:02:ec: ec:3b:92:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHQhuQl4dBwuMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OWNhMjFhYzAtNWYwZS00YjE2LWFiYzQtZDJlNjdkNTYyNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiELcvnvNvbfBGNR9ePJAxz+eo4eo6gQCythd BjWjnoYUHx6FBpBti1m35f8PX3CjRE3xKXQSP9fuSu7AC9II3A+LH5B++GOyBy6Q SC+5Nbpp9OIocOhgg2iOoDI1LZcMaFbN05McXJwGBtgpE8wDJ6gWvNyh14ebU1PT Wz6GAFRFLdi1Wl9Nu8WT9upjPUoPz5kwtpyiP4H00RpKhxvVVIDWymlgZxvPcluq 29ZQenWZ90lBqVECDtjFqSDgn4T41dU3VMe8vCJXHmXFN9GSPtkBH48l2+UrvhHB BtLH7yjh+y2e0EIwbHP+CptZ9K/S09hmUJphDPDLQeUB6gusPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhQezWcwjpxX6rlca30upIHXR64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTQ4ZmM2NDAtN2I2NS0z NzY4LTk5YWQtYTkyNTU4MzdjOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEm2Glr0CSI5oYF7P5VkzOjKy/seyUmCH1PDrv+5oVjdRdqIPyDd QtbDBJJJHToM1nhhy0TcX/pJODOdI0oFedoDT8nEOJWmWzqnV0snyJc7czJ/4sFr fMAMfa/HdZXCVvGV86cTIPpuaoT3gIajhqmkUTsGC8e4yznxAAV1AXJ3dxT3KMhc TRITca8zhz5aKvveif3zQiN71Gy2U7ExvNDeksiCW4bwEK8xsI511NFw8iPj2q4c PQiMFTlkknHHAPGDF8Nh0lrVej3P5147NkkUX0K5Lo5DIST2RxBe16qkO0Bz4d4P +5b1cyombP//gkzxb7ldB7bInkEC7Ow7kkc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:02 2025 by rpki-client