$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa File: 9edc4827-e966-3f00-aa69-d796303beda2.roa (raw, json) Hash identifier: LLgcyMD0IijG5GLtb0ypv6lssnrrymEyJafp/anCvh0= Subject key identifier: 32:73:BA:25:85:F0:48:9F:9E:FE:EF:D1:96:10:A3:70:A1:AB:A1:E8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0B76D7668F5926594115F500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d81:1f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d7:66:8f:59:26:59:41:15:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=39c25c72-d7cf-473d-ab78-fa1bc0a2412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:53:78:38:73:5d:a8:56:e3:7e:6f:70:f8: f9:cd:1d:da:c8:3c:b7:53:33:d1:bc:48:f3:86:96: 5c:59:fd:84:da:7f:c7:fb:f0:2b:e4:9c:00:15:80: 4f:79:28:40:f1:9c:f0:cd:b9:0b:3b:4c:82:9d:6f: 06:0f:35:37:23:ac:18:ed:27:79:37:ed:a7:3c:68: 9b:de:87:13:80:65:24:df:e7:06:57:61:e8:04:37: c3:3d:59:f8:de:93:d0:62:be:de:b6:4d:f4:21:59: 95:a8:be:d1:4e:4d:4c:68:3a:b0:cd:86:3c:a7:d8: 9b:52:b6:dd:15:ab:69:b9:9b:15:b2:c1:20:42:98: e0:81:77:5b:fc:7c:3e:5e:c9:82:5b:c0:55:03:10: 6a:35:b8:b4:1b:5a:59:59:ab:21:c6:73:80:68:9d: ab:ac:5d:c0:5f:6b:ab:41:12:80:e6:73:b1:19:ee: 27:b7:25:0e:17:3d:b4:63:40:6e:8c:1a:e5:86:f1: f3:88:a1:c9:39:46:e7:28:a9:2d:b0:c0:02:60:ce: 40:e5:02:2e:38:31:21:d8:88:d2:a9:dc:95:dd:91: bf:27:7f:28:d3:b9:58:46:b4:d3:79:9c:3b:6d:8b: 92:75:b6:02:ec:a1:43:0b:37:b7:46:43:3c:cf:49: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:BA:25:85:F0:48:9F:9E:FE:EF:D1:96:10:A3:70:A1:AB:A1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4f:dd:77:d4:c5:ff:e9:d1:ab:45:6b:fc:26:7c:b4:ca:fc: ad:ce:18:06:da:c2:fe:2a:99:d5:fc:b6:d9:b6:31:42:e2:cb: c3:d2:91:b4:9a:95:55:ea:9a:2c:27:ca:1e:fa:4e:1d:6a:bc: 62:25:88:d6:eb:1f:d4:9a:8a:dc:1c:e6:ce:a1:0e:9e:c5:f5: 62:ab:97:d1:de:e5:f7:1e:8f:69:f4:7e:99:01:02:64:1f:fc: f0:a0:07:30:a7:98:04:1c:ee:14:7d:04:a0:f6:2f:70:25:3e: 2e:ef:e7:e8:42:ad:a3:f4:f6:d9:3b:0a:82:e0:1a:66:3b:85: a7:2b:80:c1:ee:ea:a2:bc:9e:ff:d3:29:3f:90:5f:16:cd:6a: 57:92:73:04:54:98:b2:0d:ba:60:bc:08:16:96:f5:4a:d8:73: 5c:ad:ff:53:a3:9c:b8:f7:24:ff:9f:8b:6c:a7:ce:46:f2:9d: cc:4f:ce:e1:ab:58:b2:92:a0:a4:9e:e3:17:cd:a0:45:b3:cf: 49:30:41:ca:fd:24:42:b8:b3:26:b1:e4:41:2b:dc:6b:d1:90: eb:48:41:30:1e:18:3f:34:c6:ed:8b:7d:de:e5:1e:7e:1a:31: 91:08:92:27:cd:c1:2f:26:52:3e:7e:47:f7:ce:c6:5a:a1:a4: 97:2b:13:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdtdmj1kmWUEV9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzljMjVjNzItZDdjZi00NzNkLWFiNzgtZmExYmMwYTI0MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hBTeDhzXahW435vcPj5zR3ayDy3UzPRvEjz hpZcWf2E2n/H+/Ar5JwAFYBPeShA8ZzwzbkLO0yCnW8GDzU3I6wY7Sd5N+2nPGib 3ocTgGUk3+cGV2HoBDfDPVn43pPQYr7etk30IVmVqL7RTk1MaDqwzYY8p9ibUrbd FatpuZsVssEgQpjggXdb/Hw+XsmCW8BVAxBqNbi0G1pZWashxnOAaJ2rrF3AX2ur QRKA5nOxGe4ntyUOFz20Y0BujBrlhvHziKHJOUbnKKktsMACYM5A5QIuODEh2IjS qdyV3ZG/J38o07lYRrTTeZw7bYuSdbYC7KFDCze3RkM8z0nk1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJzuiWF8Eifnv7v0ZYQo3Chq6HoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWVkYzQ4MjctZTk2Ni0z ZjAwLWFhNjktZDc5NjMwM2JlZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtP3XfUxf/p0atFa/wmfLTK/K3OGAbawv4qmdX8ttm2MULiy8PS kbSalVXqmiwnyh76Th1qvGIliNbrH9Saitwc5s6hDp7F9WKrl9He5fcej2n0fpkB AmQf/PCgBzCnmAQc7hR9BKD2L3AlPi7v5+hCraP09tk7CoLgGmY7hacrgMHu6qK8 nv/TKT+QXxbNaleScwRUmLINumC8CBaW9UrYc1yt/1OjnLj3JP+fi2ynzkbyncxP zuGrWLKSoKSe4xfNoEWzz0kwQcr9JEK4syax5EEr3GvRkOtIQTAeGD80xu2Lfd7l Hn4aMZEIkifNwS8mUj5+R/fOxlqhpJcrE2A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:28 2025 by rpki-client