$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ff32c2c-f8a6-36d5-a1e9-ba5a08097f23.roa File: 0ff32c2c-f8a6-36d5-a1e9-ba5a08097f23.roa (raw, json) Hash identifier: d89nN6ufdskmPALa2ulvIrQRj2ciSGAPpkWhEY9d+Fs= Subject key identifier: 90:E1:AE:72:8D:D9:D4:08:72:48:47:41:B7:6B:C4:A0:0B:83:5B:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA7CD1C570DAE8D9A7F78E000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ff32c2c-f8a6-36d5-a1e9-ba5a08097f23.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2d81:1a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1c:57:0d:ae:8d:9a:7f:78:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=b866ecc7-0beb-4bd7-9a45-838e4a1eacfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:3d:89:cd:c8:c4:68:9a:65:77:bc:17:14: b9:32:88:17:fc:a8:99:75:82:b1:89:79:70:1e:aa: ce:52:f5:c0:5f:e5:0b:18:77:87:3e:f6:d5:e0:7c: 77:f8:f0:8a:36:92:b1:35:7e:5f:8d:cc:87:c3:23: 9a:2d:1f:6e:6d:2f:b5:43:fb:89:1c:e0:05:e8:83: b7:26:4e:ff:34:d9:7b:e2:69:d8:f6:ad:7f:60:55: 37:15:29:62:57:c9:aa:51:8c:d7:11:e9:02:f3:d2: 59:bb:78:45:b7:25:65:2c:72:70:da:30:d2:c1:a1: 0f:ad:3b:86:02:7e:07:89:92:1f:0a:ad:2f:a2:dc: 58:05:02:43:0e:40:9f:78:cd:07:b8:7e:0c:cc:5c: 27:a4:e4:f8:56:e8:63:02:71:d0:00:ab:0f:9f:19: 0f:96:ac:bd:8c:54:d4:a1:d9:9a:70:8a:72:dd:dc: bf:af:36:23:5e:24:19:e9:8a:9b:df:3a:c1:0e:79: c2:28:13:41:66:85:b9:4a:e9:c4:a7:d5:4c:78:4a: b5:c6:44:02:f2:7e:91:d7:0b:a4:ab:1d:b7:01:1a: 86:0c:ee:72:d2:c6:3e:d7:cc:a7:35:e5:bb:19:47: 1e:3a:23:74:85:3c:d6:5d:59:88:d8:e4:b5:d4:2c: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E1:AE:72:8D:D9:D4:08:72:48:47:41:B7:6B:C4:A0:0B:83:5B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ff32c2c-f8a6-36d5-a1e9-ba5a08097f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b1:98:fd:db:6b:d5:b1:e1:e0:36:41:76:fd:90:bf:69:da: d3:f7:b1:6a:6b:17:fc:27:dc:4c:be:03:12:f1:6f:1b:5a:b7: 13:29:b7:4d:9b:27:6d:c9:41:b3:5d:97:ee:98:5a:1b:a4:37: 44:9a:6f:14:4b:f6:46:64:29:b0:e6:b5:db:b8:7b:bf:d5:8b: bf:a1:f6:f6:48:bc:1b:07:e9:28:22:c0:1f:0a:bf:b0:79:47: 84:78:1b:73:d3:c6:79:0e:3c:f7:1c:05:4b:2b:d6:b4:fa:8f: e7:c5:81:ad:24:59:7a:d3:9a:f5:c2:20:ca:7b:a6:b9:d5:23: dd:b0:53:88:b4:28:3a:0d:b7:78:ff:34:5c:b4:85:6a:0c:7b: 20:80:8d:99:6b:05:4f:b1:70:d9:2d:f2:fd:e2:b0:2a:38:60: 04:21:2c:68:d3:ee:d5:1b:b5:69:42:6e:b0:08:76:6f:c0:48: 53:cb:a7:2c:7f:62:4e:da:44:96:59:39:db:bd:4e:07:2c:0e: 58:28:a1:2b:78:0d:17:a4:84:e5:97:5c:95:39:a0:73:35:63: c0:bd:59:3a:e7:3d:bc:8c:6e:37:c0:43:04:72:3f:a2:21:4f: f0:bc:47:73:6f:d1:6e:b2:79:24:2a:2c:0c:8d:5b:6d:3f:9f: 1a:56:f1:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEunzRxXDa6Nmn944AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Yjg2NmVjYzctMGJlYi00YmQ3LTlhNDUtODM4ZTRhMWVhY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJE9ic3IxGiaZXe8FxS5MogX/KiZdYKxiXlw HqrOUvXAX+ULGHeHPvbV4Hx3+PCKNpKxNX5fjcyHwyOaLR9ubS+1Q/uJHOAF6IO3 Jk7/NNl74mnY9q1/YFU3FSliV8mqUYzXEekC89JZu3hFtyVlLHJw2jDSwaEPrTuG An4HiZIfCq0votxYBQJDDkCfeM0HuH4MzFwnpOT4VuhjAnHQAKsPnxkPlqy9jFTU odmacIpy3dy/rzYjXiQZ6Yqb3zrBDnnCKBNBZoW5SunEp9VMeEq1xkQC8n6R1wuk qx23ARqGDO5y0sY+18ynNeW7GUceOiN0hTzWXVmI2OS11Cyp7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDhrnKN2dQIckhHQbdrxKALg1ulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmMzJjMmMtZjhhNi0z NmQ1LWExZTktYmE1YTA4MDk3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCxmP3ba9Wx4eA2QXb9kL9p2tP3sWprF/wn3Ey+AxLxbxtatxMp t02bJ23JQbNdl+6YWhukN0SabxRL9kZkKbDmtdu4e7/Vi7+h9vZIvBsH6SgiwB8K v7B5R4R4G3PTxnkOPPccBUsr1rT6j+fFga0kWXrTmvXCIMp7prnVI92wU4i0KDoN t3j/NFy0hWoMeyCAjZlrBU+xcNkt8v3isCo4YAQhLGjT7tUbtWlCbrAIdm/ASFPL pyx/Yk7aRJZZOdu9TgcsDlgooSt4DRekhOWXXJU5oHM1Y8C9WTrnPbyMbjfAQwRy P6IhT/C8R3Nv0W6yeSQqLAyNW20/nxpW8ew= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:21 2025 by rpki-client