$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa File: ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa (raw, json) Hash identifier: 3bNR0wU+cPVrB0flv1XPiCqjTQ0M2ntQ9PG+uSAWgHU= Subject key identifier: A7:C3:0F:B7:FE:02:10:91:42:0A:BC:88:C7:0A:1A:E3:6A:38:B0:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B617414DD2E92170F123B4840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa Signing time: Wed 01 Oct 2025 20:15:00 +0000 ROA not before: Wed 01 Oct 2025 20:15:00 +0000 ROA not after: Tue 30 Dec 2025 21:15:00 +0000 asID: 19905 IP address blocks: 2604:2d80:180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:74:14:dd:2e:92:17:0f:12:3b:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:15:00 2025 GMT Not After : Dec 30 21:15:00 2025 GMT Subject: CN=6672772e-a1c9-4b74-b561-248394ca140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:7a:19:e3:40:14:b2:62:88:25:c4:aa:1b: b1:4b:c6:91:0e:76:5e:97:de:01:6f:c4:48:28:b6: 29:5e:50:11:e1:42:dd:0c:41:9e:18:53:d5:a4:13: 6a:00:ef:6a:0b:fd:1e:e8:0d:fe:3d:7d:a8:b6:b7: 76:c7:5c:1a:1f:da:84:96:cc:73:67:e3:37:f9:f5: de:76:86:29:76:8c:27:bc:36:a9:cd:f1:b9:04:69: 67:35:28:95:35:1d:5f:79:a8:ad:de:09:84:9c:20: f0:bd:5c:bd:af:6c:31:16:98:1b:c6:1b:c6:20:cd: c5:26:fd:a7:83:08:56:6c:ad:87:a8:ce:8f:b0:b0: 4d:91:33:db:b5:7b:c1:e8:e2:96:ef:74:af:7b:7a: 50:8a:86:da:01:8b:bc:ad:3a:cf:23:c8:8e:7d:ad: ae:6f:07:71:1f:1e:ba:59:cc:6a:14:31:06:bb:1e: 2c:f0:9d:b9:80:25:ee:30:2e:62:83:17:69:b1:52: 3a:7f:37:a1:db:be:69:22:d3:b3:f9:59:c5:92:64: 34:0b:41:73:17:c9:99:e6:ea:c8:4e:84:69:b5:15: f8:f1:4e:41:ee:f7:3d:23:09:11:09:3c:56:90:31: f4:5e:6a:b7:81:a3:01:69:2d:d3:d7:be:25:cb:3b: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C3:0F:B7:FE:02:10:91:42:0A:BC:88:C7:0A:1A:E3:6A:38:B0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecfa04a9-2175-3b0f-841c-b2be3f752ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:38:d7:21:6b:ac:07:1e:ba:3f:e9:3e:62:5e:98:f8:0f:d5: 40:28:09:32:68:e6:4f:ae:cb:36:aa:a7:8a:0d:47:bb:52:75: 64:d3:01:5e:d6:c2:49:f5:6f:dc:4f:aa:52:6b:cb:7d:8e:48: c8:9f:5e:f4:35:f8:15:b0:49:b5:f8:dd:e7:5b:55:b6:6e:33: 2a:f3:55:45:12:1e:62:0f:6e:37:e5:6f:46:22:32:97:69:7a: 3d:b5:fe:24:97:81:21:fd:af:f1:6c:3d:b7:00:1b:2d:aa:0d: 38:79:a7:cb:7e:1a:02:9f:55:09:e5:50:25:5b:b2:ac:b9:a5: 54:63:1d:11:74:30:e4:95:9a:f4:cc:50:9c:10:53:4f:11:ad: 2e:ae:5f:59:87:e9:8c:d4:c6:ef:8b:9a:7e:02:a4:85:fa:30: 22:44:2d:13:0e:ea:24:95:5c:26:c5:76:2c:b9:26:df:68:c6: 8d:05:78:7c:14:a5:e2:ba:df:db:d6:91:bd:3e:02:25:64:63: 79:c7:f3:4d:ee:69:f8:80:92:bf:4a:16:92:87:a9:94:dc:4d: 11:84:9f:fc:60:5a:03:e9:00:d2:88:f7:d4:d1:11:6b:0d:e8: 5c:31:8d:79:8c:81:1a:bf:76:62:1a:a9:d5:de:1f:d2:2d:58: 43:10:93:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEthdBTdLpIXDxI7SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTUwMFoXDTI1MTIzMDIxMTUwMFowLzEtMCsGA1UEAxMk NjY3Mjc3MmUtYTFjOS00Yjc0LWI1NjEtMjQ4Mzk0Y2ExNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BN6GeNAFLJiiCXEqhuxS8aRDnZel94Bb8RI KLYpXlAR4ULdDEGeGFPVpBNqAO9qC/0e6A3+PX2otrd2x1waH9qElsxzZ+M3+fXe doYpdownvDapzfG5BGlnNSiVNR1feait3gmEnCDwvVy9r2wxFpgbxhvGIM3FJv2n gwhWbK2HqM6PsLBNkTPbtXvB6OKW73Sve3pQiobaAYu8rTrPI8iOfa2ubwdxHx66 WcxqFDEGux4s8J25gCXuMC5igxdpsVI6fzeh275pItOz+VnFkmQ0C0FzF8mZ5urI ToRptRX48U5B7vc9IwkRCTxWkDH0Xmq3gaMBaS3T174lyztC4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKfDD7f+AhCRQgq8iMcKGuNqOLBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWNmYTA0YTktMjE3NS0z YjBmLTg0MWMtYjJiZTNmNzUyYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEs41yFrrAceuj/pPmJemPgP1UAoCTJo5k+uyzaqp4oNR7tSdWTT AV7Wwkn1b9xPqlJry32OSMifXvQ1+BWwSbX43edbVbZuMyrzVUUSHmIPbjflb0Yi Mpdpej21/iSXgSH9r/FsPbcAGy2qDTh5p8t+GgKfVQnlUCVbsqy5pVRjHRF0MOSV mvTMUJwQU08RrS6uX1mH6YzUxu+Lmn4CpIX6MCJELRMO6iSVXCbFdiy5Jt9oxo0F eHwUpeK639vWkb0+AiVkY3nH803uafiAkr9KFpKHqZTcTRGEn/xgWgPpANKI99TR EWsN6FwxjXmMgRq/dmIaqdXeH9ItWEMQkxA= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:43 2025 by rpki-client