$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa File: e89248d4-873b-37e4-be54-5eb1398e7abc.roa (raw, json) Hash identifier: dAzefk01NQBHbJXNQPRv5h1zSx/0peb8JOPJxe/UcyU= Subject key identifier: 27:AA:96:4E:79:7C:82:E5:9B:27:A8:A0:35:51:47:3E:7B:75:77:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C75F3307E525D6661F880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2d80:da80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:75:f3:30:7e:52:5d:66:61:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=91f08f6e-d467-4b54-a3ff-b8a21b266f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:08:19:43:93:78:c5:8e:27:65:92:8d:72: 7e:9b:6c:90:96:a1:14:43:67:fe:3c:8b:d2:a5:12: cc:c6:75:86:ca:79:94:6a:75:e5:c3:79:0e:5c:71: 89:18:7c:b2:28:2c:c6:e5:74:9f:a2:07:3e:8d:a3: 19:c5:ef:52:a1:f8:92:a0:9e:99:43:b8:82:ca:2a: ed:e5:50:84:6a:b9:d4:bf:9f:fa:95:b1:80:2a:0b: 2c:b3:ca:e4:45:8f:4c:a7:d5:24:2a:4e:86:0f:3f: 04:ad:69:ff:3f:6e:68:6b:61:dd:fe:13:d7:af:48: 76:0d:3b:38:5a:85:7a:6b:3e:4a:55:e1:ec:a7:cc: 0f:a3:4a:11:19:38:38:76:76:5c:8f:c4:60:32:e8: 8f:98:e2:04:75:44:69:fa:bb:b7:18:f8:36:97:ec: 23:bb:42:b9:12:41:98:4e:ba:45:80:d3:9d:25:35: 20:b8:05:a7:04:13:62:d9:5e:13:48:01:88:0e:4d: bd:c7:ec:01:42:88:0f:82:7b:64:dd:ee:78:31:1f: 0f:a8:6a:64:97:22:04:fe:89:8c:78:2e:e7:15:51: 87:fa:d6:dc:d3:d5:e0:32:c9:6d:dd:f3:6d:81:31: b7:bb:9d:c2:9f:b9:8b:b2:35:9d:86:9d:4b:f1:a5: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AA:96:4E:79:7C:82:E5:9B:27:A8:A0:35:51:47:3E:7B:75:77:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:da80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1a:85:54:a0:b9:70:4e:d0:df:19:69:78:86:5c:8c:16:81: 88:5a:a8:08:1a:32:35:d9:b4:7c:d4:5d:85:4f:c8:72:ce:2e: f0:cd:10:c5:55:92:d9:c4:19:1e:92:d1:25:8e:1d:67:ae:f0: bd:9b:a8:28:07:e6:55:71:2f:22:3b:1f:e2:f0:24:1f:21:8c: 4d:fd:d4:2d:9e:1e:01:cd:2c:dd:73:f2:dd:bd:ab:65:ee:38: a9:c6:47:b5:eb:e5:78:d7:dd:cf:8e:55:dc:ed:3e:4b:1c:0a: 4e:dd:56:ab:16:95:66:76:58:a3:58:8d:5a:6f:e5:4d:e5:cc: 19:f0:d1:4e:a5:1f:2c:05:f0:7a:c3:d0:10:2f:39:0d:1d:cf: 36:88:e2:89:40:93:42:6c:87:26:93:af:1e:0f:2e:8d:fa:52: dd:28:82:7d:fb:dd:f5:8b:8b:5e:10:28:75:13:3d:9a:0d:32: d9:93:a9:8f:9f:1d:2f:5d:76:90:a5:73:20:6a:f9:86:1d:33: 12:de:d1:b4:0c:7c:1d:53:54:5d:2c:65:e8:08:c5:ac:81:bf: e2:30:69:c6:ec:17:e5:ec:ce:8a:38:b4:10:f9:5b:b8:46:51: c9:db:56:02:09:a5:7c:3e:f6:69:1b:fe:b6:e8:c5:13:61:eb: 5e:e5:54:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbHXzMH5SXWZh+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OTFmMDhmNmUtZDQ2Ny00YjU0LWEzZmYtYjhhMjFiMjY2ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprAIGUOTeMWOJ2WSjXJ+m2yQlqEUQ2f+PIvS pRLMxnWGynmUanXlw3kOXHGJGHyyKCzG5XSfogc+jaMZxe9SofiSoJ6ZQ7iCyirt 5VCEarnUv5/6lbGAKgsss8rkRY9Mp9UkKk6GDz8ErWn/P25oa2Hd/hPXr0h2DTs4 WoV6az5KVeHsp8wPo0oRGTg4dnZcj8RgMuiPmOIEdURp+ru3GPg2l+wju0K5EkGY TrpFgNOdJTUguAWnBBNi2V4TSAGIDk29x+wBQogPgntk3e54MR8PqGpklyIE/omM eC7nFVGH+tbc09XgMslt3fNtgTG3u53Cn7mLsjWdhp1L8aWysQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCeqlk55fILlmyeooDVRRz57dXezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTg5MjQ4ZDQtODczYi0z N2U0LWJlNTQtNWViMTM5OGU3YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwahVSguXBO0N8ZaXiGXIwWgYhaqAgaMjXZtHzUXYVPyHLOLvDN EMVVktnEGR6S0SWOHWeu8L2bqCgH5lVxLyI7H+LwJB8hjE391C2eHgHNLN1z8t29 q2XuOKnGR7Xr5XjX3c+OVdztPkscCk7dVqsWlWZ2WKNYjVpv5U3lzBnw0U6lHywF 8HrD0BAvOQ0dzzaI4olAk0JshyaTrx4PLo36Ut0ogn373fWLi14QKHUTPZoNMtmT qY+fHS9ddpClcyBq+YYdMxLe0bQMfB1TVF0sZegIxayBv+IwacbsF+Xszoo4tBD5 W7hGUcnbVgIJpXw+9mkb/rboxRNh617lVKo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:12 2025 by rpki-client