$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa File: d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa (raw, json) Hash identifier: WMnOXxCuUKRpA3xe1lH6hIoOFGmwBTjFCroS7AKpElY= Subject key identifier: 8D:7D:A6:38:F5:BF:2D:94:08:0C:A3:D4:B1:BD:17:3C:6A:50:3E:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC906B9DC692FFB9299080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:b200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:90:6b:9d:c6:92:ff:b9:29:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0e1381e3-b2ce-45c9-ae1b-9c1d7af544b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:b4:d3:a9:07:31:34:64:ca:14:61:c9:68: 4a:92:7a:69:d8:e9:95:5a:8c:ae:e5:96:67:94:c3: 7a:04:1b:5c:6d:96:14:c1:14:2b:8c:b6:68:b0:cc: 3e:6c:00:e5:2c:d7:d1:dc:66:30:5b:3a:7a:0c:f2: 48:3b:5f:16:b6:67:46:74:29:95:22:d3:61:09:25: c6:89:28:e1:af:8b:32:f9:5a:56:46:2d:43:69:a6: af:8a:de:83:0c:5c:a2:d4:2c:4b:fd:38:4d:83:c6: 4f:a8:43:eb:27:23:db:90:bf:51:7d:89:21:64:21: f8:ef:aa:14:74:b4:92:50:5c:d6:51:d8:bb:72:ac: a8:11:7a:a7:2f:9d:6b:af:18:00:87:07:69:46:2f: 4b:9e:e1:c0:0c:9c:7e:fb:f0:5b:83:d5:bd:ed:e4: e3:81:72:a1:30:5c:3b:89:cc:d3:d9:d1:c2:a6:92: 4c:2e:2e:f8:22:72:69:b7:5b:c1:ea:69:04:57:7b: c7:45:24:6d:b3:74:68:b9:19:fe:ce:46:03:41:c9: 66:77:cd:2b:74:dd:9a:f2:bd:92:92:6d:ed:f6:b8: f1:f1:61:bb:ba:87:07:c5:bb:cb:ba:73:b4:5a:22: 1d:4a:90:56:d8:20:5d:ed:57:f7:d4:cd:93:47:a8: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:A6:38:F5:BF:2D:94:08:0C:A3:D4:B1:BD:17:3C:6A:50:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:95:09:ee:23:8d:37:c7:5e:40:ab:46:9c:88:0c:fc:db:9b: f7:9e:6b:10:c7:af:d2:2f:7c:26:19:82:82:d2:52:d2:32:50: 25:7d:7e:54:2d:07:db:9d:91:db:a3:6e:9e:c3:18:c1:a8:74: d5:23:eb:c9:19:8a:c4:dd:ed:2e:14:06:22:c7:f8:71:33:a7: 55:3b:53:55:46:e5:54:76:f2:b1:80:98:5a:4d:97:f1:ac:95: 7e:19:d1:c1:ce:7b:b2:df:81:f6:3f:e5:10:8b:e5:fb:50:32: d9:8d:de:18:26:92:2f:20:f4:ce:e9:e6:53:0b:d8:54:5d:d1: 47:c6:91:f7:49:54:e5:1e:e0:32:18:6a:e7:fe:f0:56:a6:9d: b7:b9:27:80:99:c1:09:a4:47:64:44:d3:48:13:03:1d:95:12: fb:c9:55:2a:c5:83:40:97:fd:ec:ff:dd:ce:b9:b3:ac:37:c5: 04:c5:08:71:a9:99:e2:25:7c:a2:21:d3:18:e8:93:57:3a:bf: 16:b9:5e:78:93:6f:45:78:78:ae:d2:df:f3:71:6f:6e:b2:bc: a8:db:58:eb:13:64:98:64:12:3d:51:f3:6e:6d:89:ae:b1:b9: 72:73:ce:b9:85:5c:8e:28:bd:34:44:73:b3:3d:3a:53:bb:94: d9:31:d1:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJBrncaS/7kpkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGUxMzgxZTMtYjJjZS00NWM5LWFlMWItOWMxZDdhZjU0NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2q006kHMTRkyhRhyWhKknpp2OmVWoyu5ZZn lMN6BBtcbZYUwRQrjLZosMw+bADlLNfR3GYwWzp6DPJIO18WtmdGdCmVItNhCSXG iSjhr4sy+VpWRi1Daaavit6DDFyi1CxL/ThNg8ZPqEPrJyPbkL9RfYkhZCH476oU dLSSUFzWUdi7cqyoEXqnL51rrxgAhwdpRi9LnuHADJx++/Bbg9W97eTjgXKhMFw7 iczT2dHCppJMLi74InJpt1vB6mkEV3vHRSRts3RouRn+zkYDQclmd80rdN2a8r2S km3t9rjx8WG7uocHxbvLunO0WiIdSpBW2CBd7Vf31M2TR6gQYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI19pjj1vy2UCAyj1LG9FzxqUD4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMyYTBjOGEtODhhZC0z NWI5LTliYmYtZWI0NTg4ZDA2ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKVCe4jjTfHXkCrRpyIDPzbm/eeaxDHr9IvfCYZgoLSUtIyUCV9 flQtB9udkdujbp7DGMGodNUj68kZisTd7S4UBiLH+HEzp1U7U1VG5VR28rGAmFpN l/GslX4Z0cHOe7LfgfY/5RCL5ftQMtmN3hgmki8g9M7p5lML2FRd0UfGkfdJVOUe 4DIYauf+8Famnbe5J4CZwQmkR2RE00gTAx2VEvvJVSrFg0CX/ez/3c65s6w3xQTF CHGpmeIlfKIh0xjok1c6vxa5XniTb0V4eK7S3/Nxb26yvKjbWOsTZJhkEj1R825t ia6xuXJzzrmFXI4ovTREc7M9OlO7lNkx0aI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:36 2025 by rpki-client