$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa File: ae1c4459-5a20-3827-8079-bfc9acb23f70.roa (raw, json) Hash identifier: Jax8cg94YfZVqd7deDTLmdNUOY5AN3FBH08kBkfOwAs= Subject key identifier: 86:1B:4A:0D:30:00:63:3C:AF:82:6D:0F:E4:36:35:AD:8D:05:5E:F1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC96316666966BE6A6B580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:d800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:96:31:66:66:96:6b:e6:a6:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5ed0eaf8-a622-4d60-bbba-ac198716e6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:bf:43:19:e0:ee:0a:f2:57:99:25:a7:7d: f2:93:cd:4d:9e:d5:6d:22:af:0e:93:f5:75:d5:ec: 5a:39:21:c5:e1:89:8f:49:c2:6b:0c:a4:3c:6c:3c: 5a:e6:18:a8:ea:9b:04:3d:11:40:16:98:52:5b:74: af:ca:25:cc:60:03:e2:83:c5:0a:af:33:b1:10:e5: ca:e9:23:7a:14:56:7f:f6:ae:42:e5:23:db:75:4f: 04:8b:8d:52:ec:d5:e7:7b:ad:0d:77:88:d2:95:a9: ca:c5:54:d1:04:6e:ad:eb:85:c4:21:07:8c:7b:7c: 8c:69:0a:51:b5:d0:10:ee:42:9f:21:b8:70:7d:8f: fc:77:f8:98:77:e2:97:27:79:e0:33:92:04:8e:ab: 0a:65:48:b2:9d:12:94:6b:ad:f2:88:fd:2e:c0:c5: 5c:79:6d:72:eb:5a:1f:46:4b:2e:f7:73:19:18:95: ff:44:d9:8b:a6:32:0c:66:49:ed:d8:da:c8:e5:67: 1a:7f:b2:9c:b6:a2:6c:68:75:24:f9:29:92:17:38: df:15:2d:ff:7f:26:20:46:10:ed:a0:ed:f1:9a:ea: 21:b8:c7:69:4f:07:14:79:95:f7:bb:08:7c:8a:0e: 34:47:ca:31:10:ef:dc:63:84:1b:e9:5c:22:f8:af: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1B:4A:0D:30:00:63:3C:AF:82:6D:0F:E4:36:35:AD:8D:05:5E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e7:b4:a8:72:e0:87:84:83:7d:9e:bc:3b:9f:f2:dd:88:05: 8a:2c:82:37:11:c1:55:37:cd:57:e7:e6:6e:9e:f2:d9:2e:07: 72:f8:ad:8f:0f:87:8b:1c:8c:21:cf:67:07:c2:d2:11:e4:11: a9:b0:5d:c4:ce:22:2e:5f:0c:03:b9:33:72:38:d0:4f:e2:9f: d1:d8:81:5d:4c:3c:23:c3:4e:46:1b:59:bc:4d:e2:4f:7f:d9: 21:ea:aa:37:7d:37:fa:76:42:1b:de:ec:78:ac:ca:86:57:5d: c2:cf:69:e4:b2:91:5a:3e:50:d7:e4:b7:9f:ec:d8:5c:ea:11: ac:02:88:87:b2:5e:01:46:59:35:80:75:42:c8:f4:ec:d5:8d: 81:c2:01:7b:83:25:b3:0a:fc:db:7a:08:39:d7:c7:9e:33:7c: 68:90:47:c4:50:27:94:d4:a4:7e:38:a5:e0:43:7b:02:39:db: ad:dd:17:d2:1c:13:6c:50:c9:91:52:89:51:2d:48:f0:e5:c3: 06:f0:9e:1b:a9:56:1e:62:06:9f:34:10:16:d1:9b:35:71:e5: 57:e8:2e:6a:0b:d5:02:26:f0:aa:4c:4f:87:52:a8:78:bc:8d: 9d:a4:03:63:49:bf:75:87:03:be:f9:38:20:20:11:c5:c1:33: e4:31:fc:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJYxZmaWa+amtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWVkMGVhZjgtYTYyMi00ZDYwLWJiYmEtYWMxOTg3MTZlNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArge/Qxng7gryV5klp33yk81NntVtIq8Ok/V1 1exaOSHF4YmPScJrDKQ8bDxa5hio6psEPRFAFphSW3SvyiXMYAPig8UKrzOxEOXK 6SN6FFZ/9q5C5SPbdU8Ei41S7NXne60Nd4jSlanKxVTRBG6t64XEIQeMe3yMaQpR tdAQ7kKfIbhwfY/8d/iYd+KXJ3ngM5IEjqsKZUiynRKUa63yiP0uwMVceW1y61of Rksu93MZGJX/RNmLpjIMZknt2NrI5Wcaf7KctqJsaHUk+SmSFzjfFS3/fyYgRhDt oO3xmuohuMdpTwcUeZX3uwh8ig40R8oxEO/cY4Qb6Vwi+K+ZAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIYbSg0wAGM8r4JtD+Q2Na2NBV7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWUxYzQ0NTktNWEyMC0z ODI3LTgwNzktYmZjOWFjYjIzZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPntKhy4IeEg32evDuf8t2IBYosgjcRwVU3zVfn5m6e8tkuB3L4 rY8Ph4scjCHPZwfC0hHkEamwXcTOIi5fDAO5M3I40E/in9HYgV1MPCPDTkYbWbxN 4k9/2SHqqjd9N/p2Qhve7HisyoZXXcLPaeSykVo+UNfkt5/s2FzqEawCiIeyXgFG WTWAdULI9OzVjYHCAXuDJbMK/Nt6CDnXx54zfGiQR8RQJ5TUpH44peBDewI5263d F9IcE2xQyZFSiVEtSPDlwwbwnhupVh5iBp80EBbRmzVx5VfoLmoL1QIm8KpMT4dS qHi8jZ2kA2NJv3WHA775OCAgEcXBM+Qx/BQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:20 2025 by rpki-client