$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2649c902-d60c-3af2-b0bb-31cb68516862.roa File: 2649c902-d60c-3af2-b0bb-31cb68516862.roa (raw, json) Hash identifier: ZUc7fsjvuWF5WLE6vbemgckA8ignX50cNUbuWc33apA= Subject key identifier: 55:01:E7:9D:CE:21:E8:04:86:1E:63:F0:AA:7A:DF:54:D5:95:E5:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC9897104AAC12F145A400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2649c902-d60c-3af2-b0bb-31cb68516862.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:a380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:98:97:10:4a:ac:12:f1:45:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=eaaa3607-9466-40d2-91ac-0d3e8809897e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:bf:5f:e1:37:12:38:90:0e:fd:12:e4:a5: 7c:68:f6:cb:d2:cf:01:08:ee:6a:b5:99:9a:41:ff: 29:c5:dc:33:d6:92:ed:59:1a:d5:8c:c9:10:69:26: a5:de:c3:15:60:9a:21:8f:42:51:05:1b:a3:df:eb: 24:31:b6:65:76:b1:02:86:76:bc:3e:2d:fb:43:c9: 55:8a:00:cb:fd:fe:48:ab:0f:4e:2d:9b:54:32:df: 86:da:20:f5:4c:eb:f3:cd:74:0f:5f:80:0b:bc:45: 2b:98:21:e9:0d:d3:46:ce:1d:59:23:59:1c:de:bb: a7:c6:70:09:ca:57:78:7c:c3:72:24:a7:ab:ea:a2: ac:a0:14:e0:5d:a8:3d:7c:3e:08:e7:25:84:5f:ed: b5:c2:c6:0d:d2:e8:b7:8e:d5:99:b4:ba:0f:88:89: 99:52:0d:6b:25:7e:62:e1:87:e5:50:f2:55:98:61: a1:93:57:7b:66:07:0e:b2:ac:d8:76:b1:ac:05:4f: 97:46:7c:ea:4d:a5:44:70:c1:2e:ce:65:bf:c0:fb: ce:f9:fd:58:c4:84:c0:49:4e:5f:bc:50:a7:1d:82: 16:13:33:34:c5:75:82:bb:72:fe:b8:02:26:00:ac: 71:42:6d:4f:00:2e:65:f8:4c:80:5b:0d:b9:2b:56: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:01:E7:9D:CE:21:E8:04:86:1E:63:F0:AA:7A:DF:54:D5:95:E5:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2649c902-d60c-3af2-b0bb-31cb68516862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d7:55:13:80:b6:94:c1:00:5d:fe:8d:25:59:40:2b:19:55: 6e:81:3f:f8:df:4f:27:f7:1f:a7:72:b5:e0:6f:66:66:64:34: 79:33:9b:58:c4:b1:1d:35:d0:33:c0:4e:f6:aa:61:50:c1:01: 23:ab:84:54:b8:13:91:1b:57:c1:08:50:81:8b:aa:1b:a2:2f: e6:3f:ce:8b:e3:46:5b:2e:06:8f:8d:27:c8:65:d9:52:a6:1c: 95:9d:08:3a:84:10:3d:0f:07:60:78:83:4a:b5:cf:86:81:be: ec:b3:ac:c7:82:1a:5a:2f:38:a4:32:af:88:61:50:6d:be:35: a5:68:f8:c2:02:2a:7a:e6:f3:bb:37:73:34:ed:32:4f:d0:6d: f8:c2:9d:67:86:9d:5b:d2:b0:08:13:96:73:82:44:90:a4:4f: 64:8e:8f:61:f0:94:ae:d5:fb:23:b1:ab:8d:db:90:97:ab:68: 89:db:69:0d:78:3d:84:9a:ec:1d:61:fd:88:d2:f1:d2:96:02: 58:56:12:90:d5:b8:af:ee:2d:85:4f:9f:21:ae:b7:33:c3:b3: 3e:51:d9:1a:02:9a:3f:2f:d8:68:dd:0a:13:cf:cf:db:b8:df: c8:5e:d9:b6:a3:05:18:1f:9f:49:fb:ea:99:40:2e:07:22:1e: 09:d4:9c:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJiXEEqsEvFFpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWFhYTM2MDctOTQ2Ni00MGQyLTkxYWMtMGQzZTg4MDk4OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2/X+E3EjiQDv0S5KV8aPbL0s8BCO5qtZma Qf8pxdwz1pLtWRrVjMkQaSal3sMVYJohj0JRBRuj3+skMbZldrEChna8Pi37Q8lV igDL/f5Iqw9OLZtUMt+G2iD1TOvzzXQPX4ALvEUrmCHpDdNGzh1ZI1kc3runxnAJ yld4fMNyJKer6qKsoBTgXag9fD4I5yWEX+21wsYN0ui3jtWZtLoPiImZUg1rJX5i 4YflUPJVmGGhk1d7ZgcOsqzYdrGsBU+XRnzqTaVEcMEuzmW/wPvO+f1YxITASU5f vFCnHYIWEzM0xXWCu3L+uAImAKxxQm1PAC5l+EyAWw25K1ZYJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUB553OIegEhh5j8Kp631TVleWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjY0OWM5MDItZDYwYy0z YWYyLWIwYmItMzFjYjY4NTE2ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPXVROAtpTBAF3+jSVZQCsZVW6BP/jfTyf3H6dyteBvZmZkNHkz m1jEsR010DPATvaqYVDBASOrhFS4E5EbV8EIUIGLqhuiL+Y/zovjRlsuBo+NJ8hl 2VKmHJWdCDqEED0PB2B4g0q1z4aBvuyzrMeCGlovOKQyr4hhUG2+NaVo+MICKnrm 87s3czTtMk/QbfjCnWeGnVvSsAgTlnOCRJCkT2SOj2HwlK7V+yOxq43bkJeraInb aQ14PYSa7B1h/YjS8dKWAlhWEpDVuK/uLYVPnyGutzPDsz5R2RoCmj8v2GjdChPP z9u438he2bajBRgfn0n76plALgciHgnUnLg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:15 2025 by rpki-client