$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa File: af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json) Hash identifier: sXAPKrlsFRjR383BFaOt6/DhNoFGPf3sAh67X0Xw0fE= Subject key identifier: DD:8A:05:D8:36:94:41:95:91:EB:27:E6:C1:1A:0E:69:BA:23:E8:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA23789F47EFD847890AED380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:89:f4:7e:fd:84:78:90:ae:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=a9cffa9d-0140-477e-b139-91650bdcaef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0e:94:ba:fc:82:d6:f6:44:e1:f4:6b:75:fd: c3:45:a5:e8:7f:d7:bc:45:2f:f2:6c:99:60:34:f2: 0f:73:cf:e4:5a:9a:d1:01:1d:38:01:44:63:1b:e0: 18:32:fa:45:04:55:58:ca:c6:05:fa:2d:85:73:b9: 37:8f:13:d7:c4:93:83:6f:73:9a:21:14:36:a3:62: 0c:81:86:18:63:1c:90:de:81:2e:2d:aa:9f:5d:3e: c9:7c:8c:27:ad:52:d5:78:e6:55:0b:68:cc:22:21: 09:b4:ca:62:e0:84:28:3b:05:f7:c4:f4:29:c4:ce: 6c:6d:ac:03:7d:9c:ce:60:f5:fe:74:50:0b:e5:d3: 1f:58:22:35:71:b6:3f:68:ae:f2:5f:de:05:71:ea: 15:fa:6d:83:90:18:ce:5a:f3:d2:cb:31:50:59:2f: 81:a9:ed:e4:8b:24:46:55:19:3e:5d:8b:ad:6c:59: dc:21:92:52:ab:5f:4c:03:81:ff:fb:87:1f:6e:93: b6:f1:bd:2a:71:e4:81:5e:62:04:b6:92:c6:30:02: 0b:0d:9b:b7:79:1d:5e:bc:e9:fc:5f:b8:51:1e:3d: 13:6f:4e:ec:1d:13:5c:b5:73:61:dd:10:af:bd:07: 89:35:3d:ea:b9:29:53:37:fd:2e:ff:af:21:59:d6: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:05:D8:36:94:41:95:91:EB:27:E6:C1:1A:0E:69:BA:23:E8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f6:c8:aa:c6:14:32:17:17:62:8e:8e:a4:49:88:61:c0:53: 64:fd:84:8e:60:30:50:71:70:8a:9d:b7:fb:7c:4d:fd:00:2c: d5:19:e8:25:af:5e:40:c8:96:39:13:cd:b2:c0:f9:16:c5:31: fb:4e:01:23:d9:cc:08:1b:26:22:6e:ed:fb:05:16:77:3a:bb: b3:c1:77:5e:84:81:00:5c:22:83:e7:62:04:fd:18:28:4c:d3: 19:0b:a3:3f:88:a5:47:ed:b0:a2:c1:45:9d:65:09:19:09:63: 82:25:1e:81:ca:9e:3a:d8:7a:55:a2:07:83:fc:90:af:da:23: 4f:e4:6b:b5:4f:93:32:bd:c2:5e:7c:a3:1d:72:88:ee:7e:c4: c8:34:9a:b3:d9:59:a5:e0:30:e5:49:36:2b:ed:20:0f:0a:f0: 7a:d1:a0:1b:df:83:7e:ec:1d:6b:c7:5e:08:30:2a:52:b5:eb: 3f:59:ed:47:e4:81:f0:37:ac:5b:17:0d:a6:d4:54:d8:a6:74: e1:58:1f:01:91:81:83:95:ad:5a:ba:3d:a2:77:73:86:65:c5: b6:6c:6a:9c:55:78:bd:75:74:b9:f9:88:78:8a:d2:74:48:8b: 11:53:ad:be:bf:99:d4:98:c2:32:59:4a:65:b5:4f:7b:1e:d7: 30:cd:c3:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN4n0fv2EeJCu04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YTljZmZhOWQtMDE0MC00NzdlLWIxMzktOTE2NTBiZGNhZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w6UuvyC1vZE4fRrdf3DRaXof9e8RS/ybJlg NPIPc8/kWprRAR04AURjG+AYMvpFBFVYysYF+i2Fc7k3jxPXxJODb3OaIRQ2o2IM gYYYYxyQ3oEuLaqfXT7JfIwnrVLVeOZVC2jMIiEJtMpi4IQoOwX3xPQpxM5sbawD fZzOYPX+dFAL5dMfWCI1cbY/aK7yX94FceoV+m2DkBjOWvPSyzFQWS+Bqe3kiyRG VRk+XYutbFncIZJSq19MA4H/+4cfbpO28b0qceSBXmIEtpLGMAILDZu3eR1evOn8 X7hRHj0Tb07sHRNctXNh3RCvvQeJNT3quSlTN/0u/68hWdZh1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN2KBdg2lEGVkesn5sEaDmm6I+idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYyNGZhYmItYTQ0Ni0z NTkzLTliMDItNzU0NGI0ZmJiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALPbIqsYUMhcXYo6OpEmIYcBTZP2EjmAwUHFwip23+3xN/QAs1Rno Ja9eQMiWORPNssD5FsUx+04BI9nMCBsmIm7t+wUWdzq7s8F3XoSBAFwig+diBP0Y KEzTGQujP4ilR+2wosFFnWUJGQljgiUegcqeOth6VaIHg/yQr9ojT+RrtU+TMr3C XnyjHXKI7n7EyDSas9lZpeAw5Uk2K+0gDwrwetGgG9+Dfuwda8deCDAqUrXrP1nt R+SB8DesWxcNptRU2KZ04VgfAZGBg5WtWro9ondzhmXFtmxqnFV4vXV0ufmIeIrS dEiLEVOtvr+Z1JjCMllKZbVPex7XMM3DVw== -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:59 2025 by rpki-client