$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa File: 95d31a2b-9b23-3c9f-a65e-ea15191de074.roa (raw, json) Hash identifier: hNaMEL2/HQmzVc/3WD+zFwixcdgC3IzAWdrFgjpwehk= Subject key identifier: FB:9C:AA:BC:20:0A:14:30:90:55:89:15:DB:90:66:B8:B2:A4:AA:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5B0763430B38E228E2735980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80:f180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:63:43:0b:38:e2:28:e2:73:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=20d2dc3a-5079-4d97-afc8-ac4bd2a6585e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:f6:50:d2:25:dc:ce:29:0b:45:ea:97:7d: ad:b3:6e:bb:94:03:4b:24:77:b4:f9:08:ee:47:bf: 2a:8f:96:99:3d:e7:cc:d2:41:c8:91:bb:79:b3:13: d8:4b:2d:e1:ba:a6:c7:2d:79:ea:09:0f:26:3a:9c: cb:4c:40:ca:e6:8b:96:50:84:cd:ab:3c:1e:b1:33: 02:7f:bb:cd:d5:50:dc:66:b6:fe:68:dd:12:fa:5c: 9d:fb:99:ed:42:83:69:a4:d2:78:80:91:58:8f:78: 32:be:11:dd:fb:41:57:88:bd:62:75:4b:88:b8:2e: 7a:65:fa:eb:43:00:aa:31:05:15:5d:1d:b7:d3:b6: 7f:82:22:f6:4b:d3:f3:44:8e:31:c0:32:0a:2d:c3: 66:79:65:3c:6f:eb:9a:42:7e:a8:67:43:a0:1c:88: fc:55:57:cc:0f:22:11:e3:b8:f6:d0:c9:13:50:d2: 06:32:bc:58:e0:86:70:8b:ef:52:dc:25:6d:e4:20: 31:d2:01:53:df:c5:88:09:bd:30:f9:b7:da:22:90: 05:cc:ec:b7:91:e1:33:d9:58:18:17:cf:75:f5:71: 5f:0f:39:ad:70:5d:86:be:8e:08:42:70:00:32:bd: 8b:f9:f7:e6:36:b7:da:e3:a9:a1:a3:fb:80:ad:4d: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:AA:BC:20:0A:14:30:90:55:89:15:DB:90:66:B8:B2:A4:AA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:92:c2:71:52:de:43:7e:ab:4a:71:50:9a:7b:4b:6e:70:9c: 54:45:6b:db:92:9c:5d:5a:de:05:30:a9:84:97:f1:f5:e4:c9: a9:95:c9:b8:54:67:58:d2:ef:d8:e5:5c:f9:59:fb:3e:bc:62: 1e:04:8f:41:a2:74:b8:5c:f5:31:0e:fa:cc:66:24:7a:20:bc: aa:25:bc:a8:b4:be:df:e7:33:94:33:8e:41:12:2a:16:0f:37: 14:df:2e:1e:35:23:5e:d5:d1:da:65:6f:96:bc:50:da:e1:b7: 9b:de:cc:e9:f6:9e:77:8c:b5:e2:cc:8f:61:0d:6a:3f:6d:88: 84:fe:52:0d:f1:43:cd:87:ff:8b:27:01:99:1f:eb:7a:97:f0: 58:9a:cb:e6:77:93:b7:ab:a0:f5:61:ad:02:9f:d1:f3:30:70: 95:b9:9a:74:72:be:48:07:8a:8b:76:e3:f9:19:02:a5:91:58: 4a:83:c2:68:03:41:f5:aa:3d:ea:67:b8:53:69:1e:bf:b5:f0: d3:93:ab:82:49:ca:ab:3d:80:f8:ad:69:36:21:26:55:be:a4: ba:d7:c1:d0:c5:4a:ac:bb:09:21:f7:41:83:15:97:d1:5e:e0: af:e0:bc:d1:18:27:89:51:17:7a:ae:e0:3f:f1:2c:fd:c1:99: b0:76:e8:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtbB2NDCzjiKOJzWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MjBkMmRjM2EtNTA3OS00ZDk3LWFmYzgtYWM0YmQyYTY1ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxL2UNIl3M4pC0Xql32ts267lANLJHe0+Qju R78qj5aZPefM0kHIkbt5sxPYSy3huqbHLXnqCQ8mOpzLTEDK5ouWUITNqzwesTMC f7vN1VDcZrb+aN0S+lyd+5ntQoNppNJ4gJFYj3gyvhHd+0FXiL1idUuIuC56Zfrr QwCqMQUVXR2307Z/giL2S9PzRI4xwDIKLcNmeWU8b+uaQn6oZ0OgHIj8VVfMDyIR 47j20MkTUNIGMrxY4IZwi+9S3CVt5CAx0gFT38WICb0w+bfaIpAFzOy3keEz2VgY F8919XFfDzmtcF2Gvo4IQnAAMr2L+ffmNrfa46mho/uArU1QjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPucqrwgChQwkFWJFduQZriypKrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTVkMzFhMmItOWIyMy0z YzlmLWE2NWUtZWExNTE5MWRlMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6SwnFS3kN+q0pxUJp7S25wnFRFa9uSnF1a3gUwqYSX8fXkyamV ybhUZ1jS79jlXPlZ+z68Yh4Ej0GidLhc9TEO+sxmJHogvKolvKi0vt/nM5QzjkES KhYPNxTfLh41I17V0dplb5a8UNrht5vezOn2nneMteLMj2ENaj9tiIT+Ug3xQ82H /4snAZkf63qX8Fiay+Z3k7eroPVhrQKf0fMwcJW5mnRyvkgHiot24/kZAqWRWEqD wmgDQfWqPepnuFNpHr+18NOTq4JJyqs9gPitaTYhJlW+pLrXwdDFSqy7CSH3QYMV l9Fe4K/gvNEYJ4lRF3qu4D/xLP3BmbB26Bk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:33 2025 by rpki-client