$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/073070da-4f8d-3d0b-b6de-9ad83118083c.roa File: 073070da-4f8d-3d0b-b6de-9ad83118083c.roa (raw, json) Hash identifier: tZgUnRP3wFXHRlxYZmJDIiPnt0f6UfnFyOJhAOpA3IU= Subject key identifier: 96:7C:61:88:8A:5C:7C:15:DC:06:DA:FD:00:5C:59:72:E4:01:C1:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F5308A8BA1F5A4472B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/073070da-4f8d-3d0b-b6de-9ad83118083c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:d000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f5:30:8a:8b:a1:f5:a4:47:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d04da453-46be-4b90-968a-225deeac0c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:bb:12:3c:f6:60:fa:d4:59:5e:15:65:33: 1e:4d:ba:ab:b6:24:12:95:b9:b5:8d:69:b5:1e:14: 4a:04:96:0c:99:d9:40:1d:c2:e0:18:59:26:cf:06: af:fa:92:9e:a6:a2:35:f4:55:f4:cb:e9:ad:03:6e: 35:0c:a3:12:6a:93:7a:46:b0:b4:bd:98:a4:20:bb: 97:9a:c4:fe:ab:b8:03:7c:35:17:0c:b9:47:40:ae: 06:01:66:a8:a1:3d:e8:6d:08:59:18:58:bd:98:ec: c5:46:a8:73:04:43:1c:bc:6e:88:41:f9:5e:7c:12: f4:c2:2c:eb:74:bc:2f:ef:c4:e6:04:21:e5:7c:36: 5f:e2:c0:fd:f4:08:dd:ec:99:e7:ff:ab:0a:92:aa: c0:19:88:a3:65:dc:de:20:a0:b0:a6:1a:74:2f:47: 23:d5:6c:30:67:02:63:a0:16:b5:16:12:58:00:6a: 00:3f:b6:fb:fb:9c:bb:5d:ae:74:17:ae:cc:d9:e1: 4c:6c:26:ce:35:59:c0:a8:6c:ad:a4:9f:21:9b:cf: c1:b5:b7:80:5a:49:e6:72:1a:bd:4e:84:09:d5:69: de:10:dc:8a:00:e0:2b:2c:47:9e:6b:59:e8:7b:21: 61:cf:03:e3:62:3a:70:51:72:30:a6:9c:98:4d:b0: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7C:61:88:8A:5C:7C:15:DC:06:DA:FD:00:5C:59:72:E4:01:C1:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/073070da-4f8d-3d0b-b6de-9ad83118083c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f0:6b:9f:23:42:15:11:0d:50:d8:9e:f4:69:4d:10:40:ca: 5f:09:52:67:e8:7e:62:b6:aa:aa:38:d5:63:39:c7:d4:7a:fa: e4:13:82:ea:e4:ed:89:97:fa:e8:8c:a5:ca:9a:70:cc:1f:f9: 78:1d:68:8b:90:84:76:fb:cb:3b:8a:b4:03:79:84:f4:e4:a0: d3:35:8e:9a:c8:5e:b6:14:e8:9e:a4:fe:e5:7d:d5:48:cf:2b: f6:a1:2f:2f:84:0c:52:c8:bf:1f:00:75:90:38:78:8c:dc:4d: 2e:29:1a:09:95:eb:37:54:21:34:85:de:8d:da:90:7b:26:c8: cf:2d:7f:07:bf:93:84:be:64:13:61:1a:5e:11:df:86:23:5a: 92:0f:34:66:b4:f9:76:db:00:9f:ce:d3:ff:97:c6:29:da:83: bc:3c:84:d5:59:5e:27:d0:04:c8:d6:33:b4:dd:17:70:30:7d: 3c:a9:41:64:06:05:4e:1a:82:dd:e4:d6:0c:8c:a1:d0:02:68: 71:b5:6f:b4:58:86:ba:49:25:56:0c:90:d6:2c:76:26:2d:af: c9:39:57:ee:2f:65:0a:b6:5e:30:ca:28:2e:bf:0c:fd:f7:91: 7d:9e:57:0f:cd:19:ff:82:c7:d5:4d:d8:e5:d5:a5:f8:93:a6: 66:84:ff:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnl/Uwiouh9aRHK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDA0ZGE0NTMtNDZiZS00YjkwLTk2OGEtMjI1ZGVlYWMwYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJm7Ejz2YPrUWV4VZTMeTbqrtiQSlbm1jWm1 HhRKBJYMmdlAHcLgGFkmzwav+pKepqI19FX0y+mtA241DKMSapN6RrC0vZikILuX msT+q7gDfDUXDLlHQK4GAWaooT3obQhZGFi9mOzFRqhzBEMcvG6IQflefBL0wizr dLwv78TmBCHlfDZf4sD99Ajd7Jnn/6sKkqrAGYijZdzeIKCwphp0L0cj1WwwZwJj oBa1FhJYAGoAP7b7+5y7Xa50F67M2eFMbCbONVnAqGytpJ8hm8/BtbeAWknmchq9 ToQJ1WneENyKAOArLEeea1noeyFhzwPjYjpwUXIwppyYTbC6gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZ8YYiKXHwV3Aba/QBcWXLkAcEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDczMDcwZGEtNGY4ZC0z ZDBiLWI2ZGUtOWFkODMxMTgwODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfwa58jQhURDVDYnvRpTRBAyl8JUmfofmK2qqo41WM5x9R6+uQT gurk7YmX+uiMpcqacMwf+XgdaIuQhHb7yzuKtAN5hPTkoNM1jprIXrYU6J6k/uV9 1UjPK/ahLy+EDFLIvx8AdZA4eIzcTS4pGgmV6zdUITSF3o3akHsmyM8tfwe/k4S+ ZBNhGl4R34YjWpIPNGa0+XbbAJ/O0/+Xxinag7w8hNVZXifQBMjWM7TdF3AwfTyp QWQGBU4agt3k1gyModACaHG1b7RYhrpJJVYMkNYsdiYtr8k5V+4vZQq2XjDKKC6/ DP33kX2eVw/NGf+Cx9VN2OXVpfiTpmaE/8c= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:20 2025 by rpki-client