$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa File: aed558aa-edfb-3843-81dc-08c64632ee56.roa (raw, json) Hash identifier: sv9x2yeqrISVWCBTeJMhnMSe3RM70+MW0R0PkJP8a4E= Subject key identifier: 33:33:BF:8E:E0:A0:C3:CA:A6:AA:D1:17:FC:B6:77:52:CA:D5:DE:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0CDC2A65CB1A72B99BA59B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:a000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2a:65:cb:1a:72:b9:9b:a5:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=4fd7cf88-3590-47ed-ac49-6addc279b0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:af:ef:e8:e0:56:63:f7:1e:55:01:8d:21: 6f:31:49:20:93:75:76:f1:a2:87:b0:4c:7c:dc:65: e6:f4:f8:b6:82:95:b7:56:99:03:90:21:c6:f9:74: 57:0b:02:ba:38:8f:b9:ce:cb:45:c4:27:cc:75:c1: b4:e6:ef:ff:39:71:d5:9c:7f:6d:fa:5f:bc:d5:6f: 41:ef:d1:e9:e4:c9:fe:d1:96:96:f2:ea:7e:88:60: 2c:fc:2b:5b:0b:ef:7f:1c:ab:f3:e3:31:ee:a0:00: 25:68:ac:0b:c0:96:02:4e:86:cb:eb:93:05:91:6b: 88:4c:ce:52:f7:8d:2e:06:77:36:de:4d:34:c1:0a: 74:37:d4:33:54:87:20:89:f2:ca:c0:e9:d7:0c:5a: 58:b5:64:a8:95:54:39:68:31:20:57:b0:da:0e:5d: 9d:41:a5:f9:02:6e:ad:cd:6d:bf:ca:79:28:92:26: 39:0e:ae:d6:cc:91:43:f0:e4:f3:f3:b5:29:a7:90: 02:df:7e:c5:7e:8a:60:8d:6f:d5:68:59:53:cf:a8: 07:8e:9a:e0:40:f9:b3:fa:9d:ba:c0:32:c9:b7:05: 38:c3:0a:cf:00:47:83:d4:e1:8e:9a:ee:86:c8:62: 14:9d:4e:e7:00:e5:5e:c7:c9:d7:a1:92:3b:a2:0b: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:BF:8E:E0:A0:C3:CA:A6:AA:D1:17:FC:B6:77:52:CA:D5:DE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7d:e3:bb:79:be:14:74:56:c9:b1:b5:d8:ee:bf:6c:76:39: 60:59:e5:d9:e1:68:e4:b1:cb:0c:ce:89:81:89:01:11:2e:05: b2:c1:21:54:a2:17:7b:ae:3c:92:47:5a:17:58:fe:06:77:67: da:0c:62:70:78:dc:36:bf:72:af:82:2c:9e:8b:a3:5e:c7:5e: 65:0b:da:ab:06:22:c5:b1:f5:15:8c:86:68:fc:b4:f6:10:97: 8b:d0:0b:20:a6:c4:e1:96:1f:cb:cb:02:5a:b6:76:c0:20:25: f0:fc:df:a6:80:c8:40:7c:7b:bb:81:dc:32:6b:0a:28:5e:29: f3:b8:2a:26:ee:f2:56:d1:12:ba:17:b8:0b:8b:d0:6e:03:47: e5:3a:1d:68:f3:45:34:00:54:3e:f3:58:f2:d8:6d:ab:e9:47: 11:36:69:20:cb:72:21:48:ed:ee:75:79:46:c0:53:64:09:bc: 37:72:27:0f:7a:0f:fd:6f:9d:7e:9b:9e:e1:b1:cf:14:d3:4b: b8:e4:90:ba:cf:ab:b8:ca:67:b4:31:9f:63:e9:a0:e8:dd:7e: 40:25:72:dc:d8:ee:7e:50:07:18:2e:b8:22:5e:26:e5:d5:3f: 4c:c2:48:75:29:86:ad:37:7b:a7:17:70:07:5a:f2:2b:03:92: d9:36:6b:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsM3CplyxpyuZulm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NGZkN2NmODgtMzU5MC00N2VkLWFjNDktNmFkZGMyNzliMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKOv7+jgVmP3HlUBjSFvMUkgk3V28aKHsEx8 3GXm9Pi2gpW3VpkDkCHG+XRXCwK6OI+5zstFxCfMdcG05u//OXHVnH9t+l+81W9B 79Hp5Mn+0ZaW8up+iGAs/CtbC+9/HKvz4zHuoAAlaKwLwJYCTobL65MFkWuITM5S 940uBnc23k00wQp0N9QzVIcgifLKwOnXDFpYtWSolVQ5aDEgV7DaDl2dQaX5Am6t zW2/ynkokiY5Dq7WzJFD8OTz87Upp5AC337FfopgjW/VaFlTz6gHjprgQPmz+p26 wDLJtwU4wwrPAEeD1OGOmu6GyGIUnU7nAOVex8nXoZI7ogtSGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDMzv47goMPKpqrRF/y2d1LK1d6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWVkNTU4YWEtZWRmYi0z ODQzLTgxZGMtMDhjNjQ2MzJlZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbH3ju3m+FHRWybG12O6/bHY5YFnl2eFo5LHLDM6JgYkBES4FssEh VKIXe648kkdaF1j+Bndn2gxicHjcNr9yr4IsnoujXsdeZQvaqwYixbH1FYyGaPy0 9hCXi9ALIKbE4ZYfy8sCWrZ2wCAl8PzfpoDIQHx7u4HcMmsKKF4p87gqJu7yVtES uhe4C4vQbgNH5TodaPNFNABUPvNY8thtq+lHETZpIMtyIUjt7nV5RsBTZAm8N3In D3oP/W+dfpue4bHPFNNLuOSQus+ruMpntDGfY+mg6N1+QCVy3NjuflAHGC64Il4m 5dU/TMJIdSmGrTd7pxdwB1ryKwOS2TZrgQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:30 2025 by rpki-client