$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b7caceb-8d23-3282-8f1c-4d4e1f9efcd3.roa File: 2b7caceb-8d23-3282-8f1c-4d4e1f9efcd3.roa (raw, json) Hash identifier: COatsbuz3erydj9lrTP/OAQPRijcJZ4OM3sj0XdAmr0= Subject key identifier: CA:42:75:3F:F4:90:0B:CC:1A:9F:4B:A8:F0:CC:1C:0F:85:3F:28:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEE28C271DC98D6DE4C034580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b7caceb-8d23-3282-8f1c-4d4e1f9efcd3.roa Signing time: Thu 21 Aug 2025 13:05:16 +0000 ROA not before: Thu 21 Aug 2025 13:05:16 +0000 ROA not after: Wed 19 Nov 2025 14:05:16 +0000 asID: 19905 IP address blocks: 2604:2d81:2280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:28:c2:71:dc:98:d6:de:4c:03:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 13:05:16 2025 GMT Not After : Nov 19 14:05:16 2025 GMT Subject: CN=2cd4fa86-f380-45bd-b65a-29bc37531a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:4d:2f:86:47:db:aa:ef:5e:63:ea:0c:56: dc:5f:d3:d5:29:dc:cf:6d:1f:07:b1:6b:e5:23:1a: ff:bd:3f:1c:c5:4f:67:1b:39:5c:d2:3b:d5:77:37: 7b:98:c4:9b:78:3b:a7:20:63:e0:8d:0c:93:8d:7d: 68:9f:90:c4:ba:4a:50:a5:1b:a2:49:09:48:a4:2e: dd:4a:48:14:11:b0:28:f5:5c:a7:da:3d:6f:20:58: 9f:1b:b3:e2:63:a4:62:cd:a1:68:61:aa:44:03:b6: 89:f1:c4:99:2f:8c:fd:5c:98:07:7b:50:44:c0:59: 5c:8d:cf:41:8c:b7:96:a7:56:26:ee:a1:3a:a8:fb: 24:0a:d3:02:a4:bc:7d:ea:57:51:f0:2e:ae:2f:db: 67:d4:ed:eb:58:d7:ec:ee:ef:05:9a:dc:a3:a9:09: b8:0f:a3:e4:a9:29:55:83:26:b7:03:45:f7:63:e3: 17:e3:b2:40:ff:0e:58:db:ab:ee:5a:77:aa:d5:e0: 38:f5:d8:99:15:d1:25:cc:18:41:8a:7c:6d:49:14: 84:81:b2:1c:c3:46:2a:a9:86:4f:39:c4:a6:00:e2: 75:0a:c2:75:2d:bc:fa:53:23:db:14:2c:46:1d:5c: 2b:05:9a:f7:71:bd:a9:52:42:cf:d2:8a:d4:96:06: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:42:75:3F:F4:90:0B:CC:1A:9F:4B:A8:F0:CC:1C:0F:85:3F:28:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b7caceb-8d23-3282-8f1c-4d4e1f9efcd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:be:5a:dc:eb:49:be:1d:52:35:94:24:82:23:c1:3f:c9:68: 14:0d:ad:ee:f5:a5:ae:ec:11:c1:4c:d4:1e:42:f8:50:b5:00: 5e:17:81:01:6a:bc:89:ff:4e:44:ff:40:da:7c:83:08:fb:23: 19:8b:f1:77:43:d9:17:f8:ad:9f:34:1e:2c:2b:2f:ef:5c:df: 57:d8:59:a7:27:22:a5:4b:09:50:bb:2f:6a:d5:84:75:a5:fb: 98:4b:84:73:b8:bc:00:d6:31:71:ba:9f:a3:09:3d:95:4d:d0: 50:e2:3f:47:32:db:16:47:96:95:3a:5a:21:2c:d3:e3:12:5a: ac:26:d8:e4:5b:a8:75:41:44:6e:83:59:31:31:de:0b:80:24: de:ee:78:e1:55:f8:58:9f:d0:27:09:06:40:68:6f:de:8c:30: 8f:37:f3:4b:cb:c5:f9:42:41:00:74:f4:6d:bd:f9:18:0b:dc: f8:26:0b:f6:45:72:b6:03:98:51:48:34:3f:39:73:26:c0:67: b5:b6:36:2e:85:e8:61:2d:f0:40:01:f5:ee:26:88:35:6f:1b: 60:71:1a:e0:5e:e3:bd:e2:aa:5b:62:84:88:3d:17:cd:ff:a9: e0:8d:c3:78:4d:46:ba:57:d7:0c:a3:e5:3d:f6:ab:77:86:94: 79:f9:a7:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruKMJx3JjW3kwDRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTEzMDUxNloXDTI1MTExOTE0MDUxNlowLzEtMCsGA1UEAxMk MmNkNGZhODYtZjM4MC00NWJkLWI2NWEtMjliYzM3NTMxYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71NL4ZH26rvXmPqDFbcX9PVKdzPbR8HsWvl Ixr/vT8cxU9nGzlc0jvVdzd7mMSbeDunIGPgjQyTjX1on5DEukpQpRuiSQlIpC7d SkgUEbAo9Vyn2j1vIFifG7PiY6RizaFoYapEA7aJ8cSZL4z9XJgHe1BEwFlcjc9B jLeWp1Ym7qE6qPskCtMCpLx96ldR8C6uL9tn1O3rWNfs7u8FmtyjqQm4D6PkqSlV gya3A0X3Y+MX47JA/w5Y26vuWneq1eA49diZFdElzBhBinxtSRSEgbIcw0YqqYZP OcSmAOJ1CsJ1Lbz6UyPbFCxGHVwrBZr3cb2pUkLP0orUlgaOMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpCdT/0kAvMGp9LqPDMHA+FPyivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI3Y2FjZWItOGQyMy0z MjgyLThmMWMtNGQ0ZTFmOWVmY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADK+WtzrSb4dUjWUJIIjwT/JaBQNre71pa7sEcFM1B5C+FC1AF4X gQFqvIn/TkT/QNp8gwj7IxmL8XdD2Rf4rZ80HiwrL+9c31fYWacnIqVLCVC7L2rV hHWl+5hLhHO4vADWMXG6n6MJPZVN0FDiP0cy2xZHlpU6WiEs0+MSWqwm2ORbqHVB RG6DWTEx3guAJN7ueOFV+Fif0CcJBkBob96MMI8380vLxflCQQB09G29+RgL3Pgm C/ZFcrYDmFFIND85cybAZ7W2Ni6F6GEt8EAB9e4miDVvG2BxGuBe473iqltihIg9 F83/qeCNw3hNRrpX1wyj5T32q3eGlHn5pxw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:12 2025 by rpki-client