$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa File: 25408213-8be9-3550-85f7-0518ad056289.roa (raw, json) Hash identifier: XjPnP2LCnTf3HhLosneATx1VExgvBpWvcASQyN7z4Q0= Subject key identifier: D9:FC:71:81:7A:B8:61:F7:F1:73:EF:86:A9:E0:74:C8:90:5F:2B:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BB45D1B4C8E06614F6007C780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2d81::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1b:4c:8e:06:61:4f:60:07:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=b474a08f-2818-4715-9b43-6b36f6a4c5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:82:dc:db:68:94:69:d3:2d:4c:b0:3e:d5: 7e:55:30:8d:c0:ac:01:c0:73:e3:67:a4:a9:08:c9: e0:2d:c0:63:25:a2:a2:09:ef:79:24:96:82:25:73: c0:a2:85:92:37:b3:60:9e:69:01:46:9a:38:f3:41: a7:2a:46:0d:ab:54:4f:73:c8:e3:32:94:77:91:ad: ea:1a:45:44:dd:3a:31:dc:9c:fc:9a:ab:4c:c2:14: 9a:a5:2e:d7:ef:3e:e9:1e:e3:da:06:85:64:9d:fd: f3:c9:a3:8d:78:f9:68:3a:7c:7d:17:0a:b6:32:a5: 84:a3:1b:ee:54:f4:3d:3e:df:7f:89:34:64:55:ae: 61:c5:33:6e:31:3e:d9:9f:36:dc:cf:47:16:6b:00: 99:25:08:a3:14:89:f9:c1:72:01:e5:5f:51:39:32: 0f:d7:7f:6c:44:01:dd:e8:d2:b9:3c:48:d2:8a:d7: 5d:93:38:91:cf:5f:23:7d:13:71:7d:2e:98:69:60: a3:06:0f:f5:ad:f3:37:1a:9c:13:50:47:15:8c:05: 56:87:6b:fd:1b:b9:e4:83:02:f5:b6:81:a1:92:ba: a3:57:0a:a6:09:21:52:cf:b8:ce:dc:f7:7c:9f:f5: 0c:f3:66:61:fc:3d:22:22:c4:ce:2d:1a:8e:cd:20: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:71:81:7A:B8:61:F7:F1:73:EF:86:A9:E0:74:C8:90:5F:2B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:06:4c:b7:f8:40:b3:0d:28:8e:c9:16:49:61:13:3e:7f:57: 99:44:f1:3f:9d:be:fa:36:e0:6d:a5:3a:95:d0:5b:43:cc:90: 6e:71:6b:22:27:83:02:9c:0f:38:22:09:77:be:18:77:0f:6d: 48:1a:98:00:f7:7d:31:3c:0d:9a:28:d4:39:d0:28:a3:42:34: 8b:51:89:67:56:e2:4a:18:a9:1c:28:3b:8b:49:42:57:7c:e2: e5:6a:2d:1e:ea:2e:5b:0e:3d:5d:e4:25:58:20:fe:a1:bc:38: da:10:b6:b5:23:f4:20:dd:ae:cc:3b:47:a1:9c:6f:a7:0e:eb: 5c:44:40:37:f1:c1:08:e1:a2:f0:d0:6d:48:40:02:c8:b7:4c: 2e:92:07:4a:0b:be:37:ff:b1:c5:a9:9f:e7:68:81:a4:1f:04: 26:e8:0f:b2:35:16:6a:4b:85:63:94:9f:6f:8b:18:1e:76:ae: f6:ae:f8:da:eb:fb:fa:36:d2:0f:d7:d0:79:0f:3f:25:95:a8: 3d:64:00:ff:f5:20:11:7a:51:8c:75:2b:91:26:a0:5c:dc:c7: f7:8e:b9:80:54:08:db:e6:03:33:29:a5:df:82:43:7c:33:86: 9d:a1:ef:e8:e3:b8:74:ee:8c:28:3b:db:3d:f6:67:09:1e:f1: ef:59:08:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XRtMjgZhT2AHx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YjQ3NGEwOGYtMjgxOC00NzE1LTliNDMtNmIzNmY2YTRjNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC+C3NtolGnTLUywPtV+VTCNwKwBwHPjZ6Sp CMngLcBjJaKiCe95JJaCJXPAooWSN7NgnmkBRpo480GnKkYNq1RPc8jjMpR3ka3q GkVE3Tox3Jz8mqtMwhSapS7X7z7pHuPaBoVknf3zyaONePloOnx9Fwq2MqWEoxvu VPQ9Pt9/iTRkVa5hxTNuMT7Znzbcz0cWawCZJQijFIn5wXIB5V9ROTIP139sRAHd 6NK5PEjSitddkziRz18jfRNxfS6YaWCjBg/1rfM3GpwTUEcVjAVWh2v9G7nkgwL1 toGhkrqjVwqmCSFSz7jO3Pd8n/UM82Zh/D0iIsTOLRqOzSAyzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNn8cYF6uGH38XPvhqngdMiQXysaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjU0MDgyMTMtOGJlOS0z NTUwLTg1ZjctMDUxOGFkMDU2Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZwZMt/hAsw0ojskWSWETPn9XmUTxP52++jbgbaU6ldBbQ8yQbnFr IieDApwPOCIJd74Ydw9tSBqYAPd9MTwNmijUOdAoo0I0i1GJZ1biShipHCg7i0lC V3zi5WotHuouWw49XeQlWCD+obw42hC2tSP0IN2uzDtHoZxvpw7rXERAN/HBCOGi 8NBtSEACyLdMLpIHSgu+N/+xxamf52iBpB8EJugPsjUWakuFY5Sfb4sYHnau9q74 2uv7+jbSD9fQeQ8/JZWoPWQA//UgEXpRjHUrkSagXNzH9465gFQI2+YDMyml34JD fDOGnaHv6OO4dO6MKDvbPfZnCR7x71kIRg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:03 2025 by rpki-client