$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa File: bf188245-b724-390d-8f18-b309fe789633.roa (raw, json) Hash identifier: aNTu2n3W0R47Vm2CW7oLdc6WMsZ0MCr2Bhcoqn5VcY4= Subject key identifier: 4E:A2:4A:AB:2E:6A:1B:0B:3E:23:FF:B1:13:AC:B9:87:AC:BB:30:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA2378C5AB141372430B83280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:3300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8c:5a:b1:41:37:24:30:b8:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=7ac834fd-c7e3-4ebe-a50a-969f582df79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:63:45:8b:76:d9:3c:b7:96:5c:82:c8:0d: b6:03:54:f8:fc:5b:61:81:4c:1c:75:a7:73:2c:47: 8c:53:a9:45:b4:c0:2d:05:bb:30:3e:85:1d:76:e6: 53:16:fa:4c:d4:32:ea:d0:66:dd:65:e4:a4:ea:1e: 6a:18:ca:24:9a:f9:a9:81:a9:ca:1e:c9:45:b4:20: d2:bd:83:f0:ea:7d:4f:8b:bb:6b:c7:ae:e3:92:41: 3e:21:1e:00:de:05:ee:5b:bb:39:71:84:3e:11:a5: 0b:d7:92:48:db:92:5a:ca:d4:5e:50:c9:4e:4b:ed: 84:1c:1c:af:93:db:58:c7:18:e8:dd:b1:e6:e6:eb: ce:35:93:2c:50:c9:b3:cf:b2:a7:16:33:70:fe:d0: b0:88:25:c0:ca:7a:09:f5:16:d8:f6:7c:84:31:37: 3f:fb:bc:a8:05:f7:23:cb:4d:34:9a:0a:67:74:52: 40:ff:33:80:88:c5:ec:85:34:31:0e:8c:11:40:40: 43:e1:49:63:94:15:f0:61:a5:0e:5b:8b:05:5f:87: ac:a3:0f:d5:11:fb:ec:a4:6e:9c:cf:e6:75:49:f2: f4:b4:f6:e8:6e:a4:39:f7:84:59:64:d2:90:8d:71: 03:a4:63:7c:63:cd:d6:78:4d:0a:2c:bb:36:08:de: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:4A:AB:2E:6A:1B:0B:3E:23:FF:B1:13:AC:B9:87:AC:BB:30:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:66:a8:00:16:b4:08:81:d6:ef:ec:5f:2b:df:bd:22:e8:77: 6a:43:62:6b:04:a5:96:79:1f:10:36:6b:c2:22:ff:01:9e:0b: f9:43:d0:6e:b0:9e:7d:8e:4e:64:b9:08:52:1f:bd:c6:3d:2c: 27:47:58:85:20:1b:af:3a:53:77:35:26:44:59:93:c9:70:59: 89:21:3e:4b:c8:dc:73:ec:e2:4e:4c:2b:5f:3c:8f:8b:9d:28: 85:c7:ca:1b:01:0f:de:98:85:80:6f:0f:1f:9f:65:6a:e5:2f: a1:c2:12:4a:b3:ad:dc:0f:06:61:0b:5d:88:dd:89:01:4a:85: d2:93:13:3a:48:99:ad:66:a1:dd:97:56:c7:19:e9:a5:c0:8f: 09:05:1b:69:81:c6:83:35:9f:61:42:f8:21:45:3a:74:c2:6d: df:32:21:09:05:68:5c:6c:b2:58:af:ce:2b:df:1f:45:a9:23: 1e:29:2b:ea:14:f0:a8:7b:37:d6:02:8a:d5:3a:94:4f:df:19: b6:22:0d:8a:58:53:f7:7d:0f:0e:df:a3:52:cd:8f:ff:78:35: 81:9a:69:4a:64:23:5f:49:d6:10:64:f7:12:23:b4:5a:92:c5: 81:15:c6:57:bd:8f:8c:40:28:7a:79:28:b2:a6:4b:28:7e:5a: 8e:ee:f9:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuiN4xasUE3JDC4MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk N2FjODM0ZmQtYzdlMy00ZWJlLWE1MGEtOTY5ZjU4MmRmNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLhjRYt22Ty3llyCyA22A1T4/FthgUwcdadz LEeMU6lFtMAtBbswPoUdduZTFvpM1DLq0GbdZeSk6h5qGMokmvmpganKHslFtCDS vYPw6n1Pi7trx67jkkE+IR4A3gXuW7s5cYQ+EaUL15JI25JaytReUMlOS+2EHByv k9tYxxjo3bHm5uvONZMsUMmzz7KnFjNw/tCwiCXAynoJ9RbY9nyEMTc/+7yoBfcj y000mgpndFJA/zOAiMXshTQxDowRQEBD4UljlBXwYaUOW4sFX4esow/VEfvspG6c z+Z1SfL0tPbobqQ594RZZNKQjXEDpGN8Y83WeE0KLLs2CN4rmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE6iSqsuahsLPiP/sROsuYesuzBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYxODgyNDUtYjcyNC0z OTBkLThmMTgtYjMwOWZlNzg5NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJmqAAWtAiB1u/sXyvfvSLod2pDYmsEpZZ5HxA2a8Ii/wGeC/lD 0G6wnn2OTmS5CFIfvcY9LCdHWIUgG686U3c1JkRZk8lwWYkhPkvI3HPs4k5MK188 j4udKIXHyhsBD96YhYBvDx+fZWrlL6HCEkqzrdwPBmELXYjdiQFKhdKTEzpIma1m od2XVscZ6aXAjwkFG2mBxoM1n2FC+CFFOnTCbd8yIQkFaFxsslivzivfH0WpIx4p K+oU8Kh7N9YCitU6lE/fGbYiDYpYU/d9Dw7fo1LNj/94NYGaaUpkI19J1hBk9xIj tFqSxYEVxle9j4xAKHp5KLKmSyh+Wo7u+YY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:53:46 2025 by rpki-client