$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/affe2c48-2287-3075-9f8e-6d7e4ab388f8.roa File: affe2c48-2287-3075-9f8e-6d7e4ab388f8.roa (raw, json) Hash identifier: wy+MxbF4O/xfD9CQAODSJGJZgjqG5Arzp6hO/he+m4M= Subject key identifier: C9:16:02:6E:1D:22:C6:A4:95:11:AD:1A:56:01:C1:71:3E:5A:E8:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B66B628892159E49129DD3D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/affe2c48-2287-3075-9f8e-6d7e4ab388f8.roa Signing time: Fri 03 Oct 2025 17:27:11 +0000 ROA not before: Fri 03 Oct 2025 17:27:11 +0000 ROA not after: Thu 01 Jan 2026 18:27:11 +0000 asID: 30036 IP address blocks: 2604:2d80:5180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:b6:28:89:21:59:e4:91:29:dd:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 17:27:11 2025 GMT Not After : Jan 1 18:27:11 2026 GMT Subject: CN=7ab72504-7da5-4964-bc9b-18a76023c5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:5a:fb:e8:b3:b8:e4:2b:0b:4a:c5:cf:30: e5:f2:31:59:c7:9b:3c:ba:3b:5d:ec:62:ea:16:c4: 9a:0e:b1:8e:be:41:0d:9d:1b:21:b7:d8:88:5b:8a: 98:08:40:09:21:8e:5a:31:bf:97:97:2f:44:42:f1: 89:77:42:ee:6e:73:33:7c:19:81:e0:3c:5a:fd:3a: 10:2c:e9:db:02:01:46:05:cd:4a:b8:5b:f3:db:25: af:1d:6e:9b:15:31:d3:71:75:6a:f2:5b:27:08:4f: 94:dc:42:60:30:c6:3e:14:a7:78:eb:6f:4b:4f:8a: d3:8e:67:7e:bc:00:43:5c:7b:ad:33:dd:49:54:05: d1:ca:f3:f3:d5:b4:72:be:10:42:97:cb:ae:24:ff: dc:72:00:0e:06:68:9d:98:4d:67:db:7e:ad:c6:0f: dd:5f:db:9a:80:5e:a2:6a:86:30:46:7b:33:3d:48: a6:f8:b6:19:a2:cd:f9:92:c2:51:b8:60:63:ce:72: c1:12:3c:c2:94:50:70:00:54:19:57:6f:02:28:6a: 35:ce:4c:df:b8:d7:89:cd:b6:55:f3:3f:12:65:d6: bc:a9:a1:e1:07:ab:43:d7:32:32:68:16:33:94:40: 30:c5:90:be:5c:63:ac:03:58:0b:4b:2f:43:45:3c: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:16:02:6E:1D:22:C6:A4:95:11:AD:1A:56:01:C1:71:3E:5A:E8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/affe2c48-2287-3075-9f8e-6d7e4ab388f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4d:b5:4a:64:75:83:20:78:48:91:77:c0:30:69:45:7a:79: b6:32:ce:35:cd:57:0c:bd:8c:75:81:7d:72:95:13:7a:9a:2e: 94:0b:35:fb:7c:6f:1e:e9:37:6d:92:c7:a9:9c:33:79:87:ba: f9:95:a9:12:bc:32:45:fd:fc:d7:df:45:f3:bb:46:8b:f6:5a: c8:ca:0e:b9:83:b5:a5:e2:92:d1:32:03:eb:75:20:80:d6:8d: 7d:e4:1f:18:97:d4:a2:36:40:d5:b4:15:6d:77:0a:3a:2f:6c: 26:54:55:a6:0f:28:d7:b4:0a:82:bd:f4:88:7e:99:e2:64:d2: 65:0b:2a:dd:ff:32:47:7b:ed:53:c8:4b:a0:34:16:f1:5b:76: b0:54:00:ee:ba:94:75:52:13:57:fe:5a:44:b2:32:69:35:5b: c3:8d:95:a2:dd:6d:01:2f:23:1c:1f:ca:38:44:52:c5:80:bc: c1:cc:c3:9d:0b:cd:b5:f6:00:95:c2:24:41:b4:8c:7b:ec:7e: fe:0a:cd:15:b9:c5:e2:92:ec:6c:f2:c5:2d:97:13:cc:1a:46: b1:95:b1:85:08:91:f5:81:82:0b:a3:72:04:a6:98:0b:17:47: c6:ed:5e:95:ed:46:23:81:2c:db:a7:24:cc:b9:c8:57:81:30: 01:ac:2d:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmtiiJIVnkkSndPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzE3MjcxMVoXDTI2MDEwMTE4MjcxMVowLzEtMCsGA1UEAxMk N2FiNzI1MDQtN2RhNS00OTY0LWJjOWItMThhNzYwMjNjNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Za++izuOQrC0rFzzDl8jFZx5s8ujtd7GLq FsSaDrGOvkENnRsht9iIW4qYCEAJIY5aMb+Xly9EQvGJd0LubnMzfBmB4Dxa/ToQ LOnbAgFGBc1KuFvz2yWvHW6bFTHTcXVq8lsnCE+U3EJgMMY+FKd4629LT4rTjmd+ vABDXHutM91JVAXRyvPz1bRyvhBCl8uuJP/ccgAOBmidmE1n236txg/dX9uagF6i aoYwRnszPUim+LYZos35ksJRuGBjznLBEjzClFBwAFQZV28CKGo1zkzfuNeJzbZV 8z8SZda8qaHhB6tD1zIyaBYzlEAwxZC+XGOsA1gLSy9DRTz4MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkWAm4dIsaklRGtGlYBwXE+WugoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZmZTJjNDgtMjI4Ny0z MDc1LTlmOGUtNmQ3ZTRhYjM4OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGhNtUpkdYMgeEiRd8AwaUV6ebYyzjXNVwy9jHWBfXKVE3qaLpQL Nft8bx7pN22Sx6mcM3mHuvmVqRK8MkX9/NffRfO7Rov2WsjKDrmDtaXiktEyA+t1 IIDWjX3kHxiX1KI2QNW0FW13CjovbCZUVaYPKNe0CoK99Ih+meJk0mULKt3/Mkd7 7VPIS6A0FvFbdrBUAO66lHVSE1f+WkSyMmk1W8ONlaLdbQEvIxwfyjhEUsWAvMHM w50LzbX2AJXCJEG0jHvsfv4KzRW5xeKS7GzyxS2XE8waRrGVsYUIkfWBggujcgSm mAsXR8btXpXtRiOBLNunJMy5yFeBMAGsLXI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:19 2025 by rpki-client