$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa File: aaac33d9-9851-3e29-a8fb-c6896545a96d.roa (raw, json) Hash identifier: DybqHJUR9eQDoAKIsGzCje3bhv82uVpkHujJhEf+8sc= Subject key identifier: 5E:4A:C2:22:4D:0A:11:0D:1B:45:BD:10:78:86:AD:99:06:3C:8B:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB7A359B9069C921FF280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b7:a3:59:b9:06:9c:92:1f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b67f0dd4-719b-4376-8354-37a70646f032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:85:8e:9e:55:4c:7d:ef:ec:bb:73:22:1d: 59:33:9d:33:10:71:34:47:67:25:b4:61:c1:a1:97: 10:c2:d2:9e:54:88:25:ca:ed:5e:1e:9a:82:40:e3: 67:24:7c:cd:01:b9:0e:24:25:84:eb:5c:15:b8:00: 0b:bd:c9:db:2f:93:a5:04:fc:59:e5:98:03:f8:0e: c9:56:05:e5:e7:39:74:90:ed:3a:0a:f2:46:91:13: b0:46:78:60:4d:34:38:61:a5:b7:40:f4:c4:ee:7c: 96:5c:e1:67:2a:8e:c9:9a:f7:a6:7c:de:36:dc:09: c2:5c:5a:8b:2f:f7:fd:8c:1f:a4:c9:34:60:4c:3c: 1e:08:6a:f4:16:d7:43:f1:c7:f0:45:2e:9b:aa:5a: 76:79:b8:73:cd:5a:80:b9:ac:27:6c:44:a2:c2:3d: 04:59:ea:43:af:04:b5:39:28:cc:ff:1d:98:7b:9f: 97:91:84:77:49:a2:82:1d:dd:ae:61:c3:b0:0f:bc: 1e:4b:54:79:44:81:bc:75:f8:54:65:a0:e4:59:2e: d7:83:de:d0:9a:39:f7:91:1f:43:87:7f:e6:ad:1e: 11:6f:09:ce:77:a8:4d:19:e7:59:d7:80:11:6c:84: e3:b8:3c:01:f1:4f:6a:af:a1:ce:1f:0b:e0:c0:ff: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:C2:22:4D:0A:11:0D:1B:45:BD:10:78:86:AD:99:06:3C:8B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0a:6e:3a:d6:db:2b:79:2c:d5:e5:b8:06:d7:2b:25:31:24: 21:d4:45:63:40:36:cc:fb:41:33:4a:27:c4:77:35:74:37:1f: a9:3a:5e:7c:ee:b4:96:26:c6:25:66:b5:48:f3:34:05:f4:16: 02:37:0c:19:8c:7d:25:21:c5:e5:31:21:84:5d:17:14:01:da: 6a:1d:af:79:7c:af:6b:ca:2a:38:ab:69:71:40:22:c7:24:4d: 16:b0:e5:de:57:1f:13:b6:1f:11:79:88:6b:ba:2e:8d:c2:47: 6b:c2:d0:d6:f0:98:35:20:32:27:b1:bd:de:22:d8:4f:e3:91: 51:18:17:72:f7:1b:dd:76:d5:dc:e4:f9:d1:ef:28:81:83:7c: a7:41:ef:a6:4d:42:35:23:6a:dc:f4:6b:38:3f:30:1a:6f:32: 83:0a:c4:25:83:4d:7d:29:f2:df:ce:c1:88:83:8d:db:05:14: e1:f2:0e:a3:2d:3d:2e:22:82:7d:af:72:59:98:4d:f3:85:02: c3:69:54:f7:d1:f4:11:bc:f0:79:d5:db:36:7d:1c:4c:69:d8: 2d:bf:72:1d:d5:4b:69:d1:63:cc:78:42:2d:ff:8a:2a:54:47: 92:3a:5d:d4:0d:4f:ab:b5:4a:c5:f8:6a:ca:af:8f:7e:ed:9a: 3c:74:8a:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzLejWbkGnJIf8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjY3ZjBkZDQtNzE5Yi00Mzc2LTgzNTQtMzdhNzA2NDZmMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnleFjp5VTH3v7LtzIh1ZM50zEHE0R2cltGHB oZcQwtKeVIglyu1eHpqCQONnJHzNAbkOJCWE61wVuAALvcnbL5OlBPxZ5ZgD+A7J VgXl5zl0kO06CvJGkROwRnhgTTQ4YaW3QPTE7nyWXOFnKo7JmvemfN423AnCXFqL L/f9jB+kyTRgTDweCGr0FtdD8cfwRS6bqlp2ebhzzVqAuawnbESiwj0EWepDrwS1 OSjM/x2Ye5+XkYR3SaKCHd2uYcOwD7weS1R5RIG8dfhUZaDkWS7Xg97Qmjn3kR9D h3/mrR4RbwnOd6hNGedZ14ARbITjuDwB8U9qr6HOHwvgwP92QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5KwiJNChENG0W9EHiGrZkGPIvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFhYzMzZDktOTg1MS0z ZTI5LWE4ZmItYzY4OTY1NDVhOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgA0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEKbjrW2yt5LNXluAbXKyUxJCHURWNANsz7QTNKJ8R3NXQ3H6k6 XnzutJYmxiVmtUjzNAX0FgI3DBmMfSUhxeUxIYRdFxQB2modr3l8r2vKKjiraXFA IsckTRaw5d5XHxO2HxF5iGu6Lo3CR2vC0NbwmDUgMiexvd4i2E/jkVEYF3L3G912 1dzk+dHvKIGDfKdB76ZNQjUjatz0azg/MBpvMoMKxCWDTX0p8t/OwYiDjdsFFOHy DqMtPS4ign2vclmYTfOFAsNpVPfR9BG88HnV2zZ9HExp2C2/ch3VS2nRY8x4Qi3/ iipUR5I6XdQNT6u1SsX4asqvj37tmjx0ii8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:54 2025 by rpki-client