$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa File: 71cbf453-6d36-3e18-8277-96df3a65c514.roa (raw, json) Hash identifier: JhY5ehZI6hd4FFParUbGyRw7dLfTLBs2bDImra6lPjo= Subject key identifier: D1:B4:C1:AA:1B:7D:8A:C1:04:42:D0:D7:CE:0E:32:B8:26:3D:FD:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BB1925E004332BAC25B748280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 2604:2d80:1100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:5e:00:43:32:ba:c2:5b:74:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=1e493958-aeb2-4eaa-a168-c37f93363953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:34:b6:23:44:6f:ad:18:84:cb:1d:2c:10: 94:d8:2e:b6:0e:90:6e:06:45:3f:f0:7a:bd:72:e4: 6d:d7:2d:e6:bb:38:f2:91:9d:b6:b3:2c:d8:4f:d5: 52:b6:45:fd:c4:42:7c:2c:c8:cf:6a:1c:87:48:1c: d7:7f:de:2c:0b:b9:a8:39:3c:e3:1d:bb:ef:93:48: a7:a9:40:de:16:b6:bc:bf:b0:06:fa:b7:86:4e:a1: 97:93:39:bf:3e:fb:70:ac:17:fb:03:b0:19:9f:e3: 17:2f:ef:6e:17:31:08:ff:5c:8c:82:24:97:38:06: 58:3a:dd:d4:46:86:0b:5b:3f:36:a3:1c:ba:a7:90: f5:af:37:cb:f1:d3:17:8b:ce:17:e9:ef:39:20:e0: 9a:06:e5:f0:2d:4d:f2:d6:07:b0:ac:a1:b0:04:ad: 26:11:3a:b3:7d:56:17:44:be:29:5a:c5:58:3b:4e: 6b:c9:66:8b:bd:f4:01:98:c1:da:65:32:34:b9:8b: 9d:53:24:2b:a4:10:c4:c8:bf:29:5f:42:27:d8:38: 43:09:58:12:91:ce:f8:69:b7:25:52:32:82:5a:aa: b8:2d:a9:94:a9:31:3c:fc:6b:e0:d1:d9:39:53:c2: ef:c2:b9:b7:79:75:b3:1e:e7:fe:cc:74:c9:76:86: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:C1:AA:1B:7D:8A:C1:04:42:D0:D7:CE:0E:32:B8:26:3D:FD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:64:5d:ba:f9:73:ae:93:49:d6:f5:ba:13:62:ef:72:1a:9d: dd:7d:e1:56:c3:69:87:92:a7:17:b6:f0:bc:17:1b:50:c4:1e: 6a:f9:b6:f9:6f:ae:d7:be:a9:99:26:36:0e:ee:04:f9:74:8a: f6:b2:ae:b3:88:0a:13:37:f8:b0:81:95:43:c4:f9:a8:83:38: 1b:f5:12:ee:aa:e5:a6:a7:d6:54:08:50:e8:01:b2:a8:0c:05: 22:b5:60:27:0f:bf:a0:6c:4b:0e:8d:fb:ed:38:62:1a:d9:98: 67:d2:bc:a3:92:c2:a0:4c:2d:e9:e4:d3:d2:2d:63:e7:f1:17: ae:93:a1:50:e4:8b:23:d9:cb:e8:0a:0d:71:1d:78:ad:e1:7b: c9:18:a8:00:8f:ee:1b:db:58:9c:75:87:71:78:ec:4c:a9:ac: 67:22:5b:72:65:7b:a2:d1:fc:d2:2c:61:7f:0d:3a:32:09:23: b8:3c:40:86:b4:0b:3a:99:32:5d:7e:98:d4:7b:f4:b8:a8:80: 52:47:6c:8f:84:ae:34:81:b1:ec:45:c3:e6:3f:04:c9:93:b0: f4:c7:08:2e:44:0c:f7:ab:50:00:14:6a:59:cc:d9:5a:4c:3d: 6c:2c:95:c3:10:97:f6:38:ea:57:c8:17:90:ae:5f:41:3e:72: 06:67:cd:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkl4AQzK6wlt0goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MWU0OTM5NTgtYWViMi00ZWFhLWExNjgtYzM3ZjkzMzYzOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zw0tiNEb60YhMsdLBCU2C62DpBuBkU/8Hq9 cuRt1y3muzjykZ22syzYT9VStkX9xEJ8LMjPahyHSBzXf94sC7moOTzjHbvvk0in qUDeFra8v7AG+reGTqGXkzm/PvtwrBf7A7AZn+MXL+9uFzEI/1yMgiSXOAZYOt3U RoYLWz82oxy6p5D1rzfL8dMXi84X6e85IOCaBuXwLU3y1gewrKGwBK0mETqzfVYX RL4pWsVYO05ryWaLvfQBmMHaZTI0uYudUyQrpBDEyL8pX0In2DhDCVgSkc74abcl UjKCWqq4LamUqTE8/Gvg0dk5U8Lvwrm3eXWzHuf+zHTJdoaQSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNG0waobfYrBBELQ184OMrgmPf05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFjYmY0NTMtNmQzNi0z ZTE4LTgyNzctOTZkZjNhNjVjNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVkXbr5c66TSdb1uhNi73Iand194VbDaYeSpxe28LwXG1DEHmr5 tvlvrte+qZkmNg7uBPl0ivayrrOIChM3+LCBlUPE+aiDOBv1Eu6q5aan1lQIUOgB sqgMBSK1YCcPv6BsSw6N++04YhrZmGfSvKOSwqBMLenk09ItY+fxF66ToVDkiyPZ y+gKDXEdeK3he8kYqACP7hvbWJx1h3F47EyprGciW3Jle6LR/NIsYX8NOjIJI7g8 QIa0CzqZMl1+mNR79LiogFJHbI+ErjSBsexFw+Y/BMmTsPTHCC5EDPerUAAUalnM 2VpMPWwslcMQl/Y46lfIF5CuX0E+cgZnzeQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:16 2025 by rpki-client