$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa File: a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa (raw, json) Hash identifier: G2MeeifEp0aywHcnJU+axDIG3LxdF4nK5jqzI0BW0fw= Subject key identifier: 5A:E9:03:67:F1:08:5D:D3:A0:0B:78:F4:DB:33:3D:F5:B3:0E:CC:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B84E79B561081886D4E40AE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 30036 IP address blocks: 2604:2d80:e880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9b:56:10:81:88:6d:4e:40:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=fc0b47fb-ce09-44f6-8c53-7e3f5f1f7bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:33:01:05:73:e1:f0:28:33:50:70:70:2d: 9f:a5:0e:59:47:ef:99:f1:7e:66:77:68:ab:29:01: 1c:6f:95:f0:22:71:11:e1:e6:7b:ad:32:e3:d3:05: 9b:fd:7c:a5:3d:07:93:08:01:15:0a:53:5b:0f:a8: b7:7d:31:75:8e:72:3c:7d:ae:f9:14:4b:62:e3:59: 66:31:e7:18:cf:b9:0f:62:f5:6e:d7:3d:58:fe:5a: 94:2e:14:cf:a5:d8:29:23:2e:e5:08:4d:06:46:5c: c2:e0:df:ac:80:08:96:98:a2:fe:fd:02:48:36:5c: 04:db:a1:a1:be:95:11:70:79:50:89:fa:7b:24:ca: fc:0c:db:05:49:95:33:e7:69:62:55:db:37:2e:1a: 9e:85:92:04:3e:67:cb:87:15:3e:7f:fe:ce:eb:98: 1e:7f:60:46:03:08:1c:9b:c0:09:e9:b8:59:62:9a: 73:54:f7:46:31:c1:06:49:22:d5:67:e4:98:61:f2: 72:6d:85:1e:86:cc:4c:5f:90:f4:0b:0c:67:ba:22: 96:8d:e2:b5:65:c1:af:05:20:74:84:c2:d4:a4:0f: 0a:ca:08:b6:9f:2a:a3:a9:6b:d7:32:c0:b2:0a:12: 35:93:98:96:ba:51:ef:c3:4a:0e:ae:ca:6c:04:30: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:03:67:F1:08:5D:D3:A0:0B:78:F4:DB:33:3D:F5:B3:0E:CC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4f:e1:0f:77:c0:72:47:a9:05:b0:34:df:03:ca:a0:77:5d: 99:f7:6a:f3:d9:cc:f3:19:ee:a7:bd:76:51:01:6e:30:46:3e: 45:5a:9d:4d:5e:17:e0:84:e3:77:e4:55:53:8b:63:8e:f7:7a: c1:33:04:6c:d7:48:b8:57:9a:0d:55:6e:5d:42:18:77:1f:03: de:69:ae:8a:ec:2c:84:22:30:25:1b:1c:3e:a0:45:df:8f:9a: 9b:76:5e:73:07:0c:e9:4f:d1:8a:b5:da:34:a5:64:cb:09:38: e0:88:ef:5d:56:ae:42:d7:d5:f3:86:88:ef:b3:37:11:15:c6: 2a:f1:e1:66:3b:af:71:28:ce:0c:50:b0:a4:8e:1a:fb:dd:8c: b1:f0:50:e9:d4:70:bf:e0:ad:b2:0b:8a:70:eb:02:56:a1:60: 67:4d:e3:91:e0:ef:38:8c:dd:d4:ed:6c:f2:55:17:70:c9:59: bc:0a:e9:4d:61:21:11:40:a6:13:46:4f:e7:f5:53:6e:94:e1: 90:a5:5a:87:ce:fe:ba:1d:51:2b:f8:5c:42:51:0f:f0:be:b0: ec:6b:d4:e5:b7:58:6c:dc:2a:e5:87:1e:09:4e:95:80:a5:79: 5e:a2:bb:8f:7b:fe:4a:b0:6e:16:56:4b:34:4a:26:33:71:fb: 53:40:a1:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE55tWEIGIbU5AroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZmMwYjQ3ZmItY2UwOS00NGY2LThjNTMtN2UzZjVmMWY3YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJkzAQVz4fAoM1BwcC2fpQ5ZR++Z8X5md2ir KQEcb5XwInER4eZ7rTLj0wWb/XylPQeTCAEVClNbD6i3fTF1jnI8fa75FEti41lm MecYz7kPYvVu1z1Y/lqULhTPpdgpIy7lCE0GRlzC4N+sgAiWmKL+/QJINlwE26Gh vpURcHlQifp7JMr8DNsFSZUz52liVds3LhqehZIEPmfLhxU+f/7O65gef2BGAwgc m8AJ6bhZYppzVPdGMcEGSSLVZ+SYYfJybYUehsxMX5D0CwxnuiKWjeK1ZcGvBSB0 hMLUpA8Kygi2nyqjqWvXMsCyChI1k5iWulHvw0oOrspsBDBiVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrpA2fxCF3ToAt49NszPfWzDsxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY2YzA1YzEtMjQyMi0z ZjY4LTg5ZWMtNTA2YzllZDdhZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9P4Q93wHJHqQWwNN8DyqB3XZn3avPZzPMZ7qe9dlEBbjBGPkVa nU1eF+CE43fkVVOLY473esEzBGzXSLhXmg1Vbl1CGHcfA95prorsLIQiMCUbHD6g Rd+Pmpt2XnMHDOlP0Yq12jSlZMsJOOCI711WrkLX1fOGiO+zNxEVxirx4WY7r3Eo zgxQsKSOGvvdjLHwUOnUcL/grbILinDrAlahYGdN45Hg7ziM3dTtbPJVF3DJWbwK 6U1hIRFAphNGT+f1U26U4ZClWofO/rodUSv4XEJRD/C+sOxr1OW3WGzcKuWHHglO lYCleV6iu497/kqwbhZWSzRKJjNx+1NAoZM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:16 2025 by rpki-client