$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa File: d42ef95f-66c7-31f8-8318-c0c8e3128160.roa (raw, json) Hash identifier: +0KE1y6IzJNBxfh6W2D76qseD8VNDmqVDYj+sVGEznc= Subject key identifier: 2F:14:68:DA:01:03:22:6A:5A:4D:84:85:29:CE:17:F4:C0:25:91:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D71B3C795B2AE7BACF3B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:5f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1b:3c:79:5b:2a:e7:ba:cf:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=0f16af65-3997-4ed6-8d58-c5845c838e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:e2:e8:8e:52:8e:03:6e:a8:5c:26:95:3a: c9:19:33:ab:ad:df:e7:ac:6b:09:66:51:bb:e6:4f: 78:da:1d:fc:a5:1c:90:6f:6d:93:cb:eb:73:98:51: b5:b5:b3:32:e0:99:83:fc:26:64:ed:5b:0f:0a:3c: 0c:d2:06:bf:fb:eb:69:cc:38:91:fe:06:60:46:f7: e2:db:a7:42:3c:e6:d6:43:a5:47:c6:11:64:e5:3e: 3b:4f:74:8a:86:cd:13:3a:5e:77:50:e8:1f:76:fb: 7a:97:19:f1:94:cf:9e:ea:74:d7:b7:9a:48:39:5b: 9f:50:09:e6:3e:ce:b9:fa:bf:30:0e:26:04:98:f8: 63:a8:ff:7e:4b:ac:3b:2f:af:62:bf:d3:5f:7c:8c: b4:86:53:77:d0:b9:40:40:65:63:f7:b3:cf:2a:ea: 78:d2:b8:45:26:d6:40:d9:f0:c1:10:b4:3c:76:fa: c4:01:b9:92:03:15:36:42:95:8d:d2:a3:84:cb:ad: bb:13:a4:2b:84:c6:1c:c7:58:81:cc:01:9b:35:8b: f8:6a:eb:4f:1c:92:05:e1:fe:5f:23:3c:cc:21:67: bc:1d:52:e8:35:ed:5e:80:cc:30:3b:0a:94:9d:44: 8d:1c:03:03:cb:cd:70:cc:8b:71:d0:10:ac:88:f5: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:68:DA:01:03:22:6A:5A:4D:84:85:29:CE:17:F4:C0:25:91:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d5:00:0d:87:54:9d:15:88:37:0e:31:77:2d:34:18:43:e2: d0:a9:1e:a4:a3:85:f1:c9:54:c3:d9:1b:b3:d2:86:f1:ba:13: 4d:83:fb:f9:da:79:97:c3:12:80:97:47:76:35:5c:2c:36:54: 5b:54:de:66:7d:38:e2:59:3e:a8:ee:a2:4c:c7:c7:81:18:66: f8:1f:30:62:ff:34:f7:32:bb:b4:6a:1a:58:b7:4b:09:1a:45: 54:d5:57:a3:ca:3d:73:84:8e:a2:d4:66:d2:aa:ef:07:e8:4d: 09:07:69:3c:a6:4d:6f:78:0a:2f:99:12:cf:07:af:dd:2a:65: 0e:2a:d2:4e:2c:47:38:a9:54:6d:ef:a2:11:66:8e:72:32:5c: 2a:7c:a2:b3:10:fd:85:10:46:6a:80:33:a3:96:d9:34:de:25: b1:e5:80:ed:56:43:69:16:cc:a1:74:92:ca:18:80:ea:ce:63: 03:8d:1f:ba:4f:24:76:3f:26:f5:74:ac:4d:ee:25:9c:de:79: c3:7a:1d:71:41:b0:50:39:60:15:4f:45:e3:70:4c:46:8f:f8: 50:34:d1:a5:3c:e8:25:fe:e5:e5:6c:91:af:fc:b1:fe:5c:29: c7:db:8b:f3:e5:6a:41:30:ee:8d:58:f2:63:13:0e:4e:27:2b: 1b:df:f8:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1xs8eVsq57rPOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MGYxNmFmNjUtMzk5Ny00ZWQ2LThkNTgtYzU4NDVjODM4ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUXi6I5SjgNuqFwmlTrJGTOrrd/nrGsJZlG7 5k942h38pRyQb22Ty+tzmFG1tbMy4JmD/CZk7VsPCjwM0ga/++tpzDiR/gZgRvfi 26dCPObWQ6VHxhFk5T47T3SKhs0TOl53UOgfdvt6lxnxlM+e6nTXt5pIOVufUAnm Ps65+r8wDiYEmPhjqP9+S6w7L69iv9NffIy0hlN30LlAQGVj97PPKup40rhFJtZA 2fDBELQ8dvrEAbmSAxU2QpWN0qOEy627E6QrhMYcx1iBzAGbNYv4autPHJIF4f5f IzzMIWe8HVLoNe1egMwwOwqUnUSNHAMDy81wzItx0BCsiPU+AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC8UaNoBAyJqWk2EhSnOF/TAJZEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQyZWY5NWYtNjZjNy0z MWY4LTgzMTgtYzBjOGUzMTI4MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgF8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbVAA2HVJ0ViDcOMXctNBhD4tCpHqSjhfHJVMPZG7PShvG6E02D +/naeZfDEoCXR3Y1XCw2VFtU3mZ9OOJZPqjuokzHx4EYZvgfMGL/NPcyu7RqGli3 SwkaRVTVV6PKPXOEjqLUZtKq7wfoTQkHaTymTW94Ci+ZEs8Hr90qZQ4q0k4sRzip VG3vohFmjnIyXCp8orMQ/YUQRmqAM6OW2TTeJbHlgO1WQ2kWzKF0ksoYgOrOYwON H7pPJHY/JvV0rE3uJZzeecN6HXFBsFA5YBVPReNwTEaP+FA00aU86CX+5eVska/8 sf5cKcfbi/PlakEw7o1Y8mMTDk4nKxvf+Cw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:42 2025 by rpki-client