$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa File: 67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa (raw, json) Hash identifier: ZQA9MvdOmZWwYDLtO4dfvenwbV1QLKyTUunZmDkuOek= Subject key identifier: 83:E4:AC:61:A7:75:49:BB:26:AE:7C:0C:52:3B:14:C2:28:BE:D9:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797E9B544665896F4751900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2d80:d380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e9:b5:44:66:58:96:f4:75:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8db5180b-920e-4f9c-a3c1-00dbc27932c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:8e:2c:b2:31:2b:83:25:d5:8a:47:ea:ca: 76:8d:ed:43:f3:9b:24:63:12:89:b7:d9:ab:ba:76: 23:8b:c6:a5:6f:a2:68:8d:e6:05:85:83:f0:f9:de: 83:08:1f:ac:b8:eb:8f:85:ec:11:12:61:16:b6:66: 6f:89:59:2a:d7:ad:78:7b:89:63:59:0e:e4:e1:05: c3:8c:08:11:5e:a0:97:46:fb:ff:72:76:f2:0c:dc: 93:51:a7:16:3d:c1:e5:f6:b7:66:4a:b7:27:47:e1: 29:99:20:be:e9:fd:20:03:43:33:f9:d0:9e:24:c0: ae:2a:53:b7:fa:66:b5:f2:f1:60:11:5d:59:a5:d5: 2e:ba:14:46:dc:48:e2:39:b5:0e:88:b4:86:bb:89: b3:d4:a6:78:2a:cf:db:eb:ea:d3:c0:b4:14:2b:81: 75:e7:63:41:6b:fd:f8:c9:21:a8:ab:bd:b2:86:c4: 9a:2c:0d:b5:ff:f8:5a:cf:b7:91:12:39:fe:2a:d0: 85:0d:47:83:6f:60:39:0a:26:d1:b0:63:bd:2a:4a: bf:99:a6:ac:79:20:ba:17:0c:82:ea:94:b4:d0:33: 22:76:fc:f0:96:3f:76:9d:4d:e0:de:60:c9:a4:1e: b4:15:4f:cb:97:bd:d1:90:83:f2:40:d8:80:70:2f: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:AC:61:A7:75:49:BB:26:AE:7C:0C:52:3B:14:C2:28:BE:D9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:02:19:0b:94:7d:e8:83:22:25:18:45:c9:df:9a:2a:fa:c0: 64:82:9f:7c:b2:6b:60:99:43:a1:2d:db:51:d5:c4:5d:bc:05: 90:49:61:a4:78:28:b7:a3:bb:ab:33:44:52:55:6a:87:7c:98: bd:5f:82:91:f5:29:8a:58:a2:b0:89:ce:c7:b5:ab:da:1a:57: 1e:40:a2:5b:54:54:59:8b:ce:d0:5c:57:13:f4:71:b0:83:cc: c9:99:22:bd:72:2d:32:66:aa:f2:55:15:6a:54:66:a2:5a:e7: e8:ad:ec:9c:9d:ab:4a:26:73:f3:2b:9e:e6:b3:08:a6:7f:67: cd:54:b1:e6:9e:b5:83:d5:76:67:c5:99:ea:53:1a:2c:51:c1: 46:92:48:69:d2:34:8a:66:79:fe:9d:e6:71:3e:9a:a4:9b:27: 28:8d:9a:30:f2:d3:28:83:d3:7e:9f:00:5e:24:e3:c3:74:a3: d5:af:f7:98:ed:8d:90:86:c5:89:49:2b:b7:15:a8:b9:d5:47: 4d:a7:17:b2:10:61:55:19:60:64:da:31:dc:f2:a5:4e:be:5b: 1f:27:17:ac:ad:aa:9c:57:97:92:74:8b:7f:66:4c:0f:5c:e5: e0:a5:13:4f:c9:d5:26:a0:b7:43:93:d4:10:4a:b7:05:dd:1e: 7e:2e:0a:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnl+m1RGZYlvR1GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGRiNTE4MGItOTIwZS00ZjljLWEzYzEtMDBkYmMyNzkzMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjseOLLIxK4Ml1YpH6sp2je1D85skYxKJt9mr unYji8alb6JojeYFhYPw+d6DCB+suOuPhewREmEWtmZviVkq1614e4ljWQ7k4QXD jAgRXqCXRvv/cnbyDNyTUacWPcHl9rdmSrcnR+EpmSC+6f0gA0Mz+dCeJMCuKlO3 +ma18vFgEV1ZpdUuuhRG3EjiObUOiLSGu4mz1KZ4Ks/b6+rTwLQUK4F152NBa/34 ySGoq72yhsSaLA21//haz7eREjn+KtCFDUeDb2A5CibRsGO9Kkq/maaseSC6FwyC 6pS00DMidvzwlj92nU3g3mDJpB60FU/Ll73RkIPyQNiAcC+bTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPkrGGndUm7Jq58DFI7FMIovtkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdjZjc1M2UtNGQ3Zi0z ZTNjLWFjYjAtMGE2YTM0N2I0ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoCGQuUfeiDIiUYRcnfmir6wGSCn3yya2CZQ6Et21HVxF28BZBJ YaR4KLeju6szRFJVaod8mL1fgpH1KYpYorCJzse1q9oaVx5AoltUVFmLztBcVxP0 cbCDzMmZIr1yLTJmqvJVFWpUZqJa5+it7Jydq0omc/MrnuazCKZ/Z81UseaetYPV dmfFmepTGixRwUaSSGnSNIpmef6d5nE+mqSbJyiNmjDy0yiD036fAF4k48N0o9Wv 95jtjZCGxYlJK7cVqLnVR02nF7IQYVUZYGTaMdzypU6+Wx8nF6ytqpxXl5J0i39m TA9c5eClE0/J1Sagt0OT1BBKtwXdHn4uCrE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:49 2025 by rpki-client