$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa File: 9a85e671-84fd-37eb-a0fd-8de578b73198.roa (raw, json) Hash identifier: RiosZTm/wFrF7tnSmQiNiseVkg1X24zjhVXBHuH6uss= Subject key identifier: 85:4E:24:03:C8:0E:18:42:BA:F3:A8:E1:DC:BD:E3:B5:4F:8A:E6:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79CAC9B819D1CA774D5AFC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa Signing time: Fri 10 Oct 2025 13:29:06 +0000 ROA not before: Fri 10 Oct 2025 13:29:06 +0000 ROA not after: Thu 08 Jan 2026 14:29:06 +0000 asID: 19905 IP address blocks: 2604:2d80:5f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ca:c9:b8:19:d1:ca:77:4d:5a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:29:06 2025 GMT Not After : Jan 8 14:29:06 2026 GMT Subject: CN=1f85d555-c991-4975-a569-b2147f8862b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:83:6f:9a:5f:8d:66:b2:9a:3a:4a:83:19: 03:21:1e:b4:44:a0:41:cf:2a:77:1d:e0:37:bd:74: 31:32:9d:c3:f6:74:13:1e:3e:12:ee:5a:13:b2:f7: 0a:c3:53:ee:90:c0:4b:bd:74:d0:c0:50:61:de:a6: 68:35:12:d7:2a:46:f4:6a:7a:49:59:1d:e5:60:59: 4d:19:44:45:cb:c0:b6:a9:f9:22:4b:18:fe:72:06: bf:d9:aa:6f:49:ec:b5:dd:c1:69:89:88:1e:83:b9: 37:a6:3a:85:6c:7e:fc:8e:7a:6c:b4:9d:86:34:b8: aa:10:db:92:c6:16:d8:2c:89:41:70:3b:30:27:26: 6f:64:d9:48:41:81:cc:30:f0:d9:15:10:21:ef:ee: 5e:49:9c:c2:1c:b6:13:3e:10:28:a8:71:4c:29:8e: 49:2f:a4:0f:6a:ad:91:31:2b:2b:07:37:aa:8e:a0: dc:53:89:55:e6:00:f1:2b:04:4d:07:7d:ed:a7:29: c1:61:d1:47:2d:a1:4d:ed:65:c6:d2:2b:95:79:7d: 69:97:54:0e:e2:61:d5:fe:56:d9:17:1f:c2:c7:83: d2:21:c7:6b:3a:59:83:e8:16:6f:be:44:22:9f:06: 73:13:5a:52:60:14:9e:aa:44:fa:8e:8e:66:c5:f1: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4E:24:03:C8:0E:18:42:BA:F3:A8:E1:DC:BD:E3:B5:4F:8A:E6:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a85e671-84fd-37eb-a0fd-8de578b73198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7c:5b:c6:72:88:14:f3:50:26:a1:82:25:36:6b:47:50:8b: 44:39:a3:88:9f:08:6d:2a:24:07:c4:10:4a:84:f6:43:7e:cb: ba:19:1f:e7:53:a5:28:e0:da:c8:42:e7:29:bb:4e:a2:1f:09: d9:c4:e3:20:78:7b:81:00:4f:06:c1:0a:d5:25:e7:2d:f9:e1: 9f:a3:f7:7f:0d:b6:fa:e7:6c:42:98:05:78:2d:ce:50:4f:a7: 00:2c:a9:37:26:d9:fd:97:2e:fe:94:19:01:eb:42:2d:b1:0b: 72:b6:c8:bd:9e:da:1c:cd:72:50:4a:85:87:6a:6f:be:fe:35: aa:7e:1e:23:16:d6:aa:2a:7e:12:d0:5f:6f:65:b8:9a:b2:21: 34:d8:be:f0:29:fd:dd:79:97:79:e4:f0:ed:77:74:16:f4:58: 31:f5:95:11:b3:9b:c6:c8:eb:48:ef:ba:76:38:1a:bd:16:56: 4d:6c:02:cb:dc:f5:39:d0:64:fb:2b:8c:48:d3:78:29:be:84: 66:75:be:62:b6:1e:85:44:02:b4:61:b8:89:fc:8d:04:7c:74: 32:e4:bd:6a:6b:e3:f4:91:2e:b3:0e:95:da:7d:c1:dc:e3:2e: 5d:d1:09:69:7e:c1:5b:2d:19:91:55:11:14:8b:fc:f5:db:76: 7c:4f:eb:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5ysm4GdHKd01a/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjkwNloXDTI2MDEwODE0MjkwNlowLzEtMCsGA1UEAxMk MWY4NWQ1NTUtYzk5MS00OTc1LWE1NjktYjIxNDdmODg2MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PaDb5pfjWaymjpKgxkDIR60RKBBzyp3HeA3 vXQxMp3D9nQTHj4S7loTsvcKw1PukMBLvXTQwFBh3qZoNRLXKkb0anpJWR3lYFlN GURFy8C2qfkiSxj+cga/2apvSey13cFpiYgeg7k3pjqFbH78jnpstJ2GNLiqENuS xhbYLIlBcDswJyZvZNlIQYHMMPDZFRAh7+5eSZzCHLYTPhAoqHFMKY5JL6QPaq2R MSsrBzeqjqDcU4lV5gDxKwRNB33tpynBYdFHLaFN7WXG0iuVeX1pl1QO4mHV/lbZ Fx/Cx4PSIcdrOlmD6BZvvkQinwZzE1pSYBSeqkT6jo5mxfGl1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVOJAPIDhhCuvOo4dy947VPiuZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWE4NWU2NzEtODRmZC0z N2ViLWEwZmQtOGRlNTc4YjczMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgF+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFF8W8ZyiBTzUCahgiU2a0dQi0Q5o4ifCG0qJAfEEEqE9kN+y7oZ H+dTpSjg2shC5ym7TqIfCdnE4yB4e4EATwbBCtUl5y354Z+j938NtvrnbEKYBXgt zlBPpwAsqTcm2f2XLv6UGQHrQi2xC3K2yL2e2hzNclBKhYdqb77+Nap+HiMW1qoq fhLQX29luJqyITTYvvAp/d15l3nk8O13dBb0WDH1lRGzm8bI60jvunY4Gr0WVk1s Asvc9TnQZPsrjEjTeCm+hGZ1vmK2HoVEArRhuIn8jQR8dDLkvWpr4/SRLrMOldp9 wdzjLl3RCWl+wVstGZFVERSL/PXbdnxP66k= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:30 2025 by rpki-client