$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa File: bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa (raw, json) Hash identifier: 5fXgXkvAYt0xQn0yC7TccCihKdXAd9MYT2QLUcMAQ4A= Subject key identifier: 81:48:BB:E0:90:C1:2E:14:10:48:25:6E:71:A3:5A:4E:FD:18:35:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC9A997F2941516812E780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:7880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:9a:99:7f:29:41:51:68:12:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=adf9d29e-92c4-473b-9665-91371d0b0e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:dd:88:cf:67:02:24:7e:04:72:90:b8:53: d5:4c:a3:1f:aa:86:a7:f2:56:19:b2:54:14:68:f9: 99:d0:12:03:fa:35:d1:e0:d6:ce:53:78:65:a0:9b: ff:d0:d8:30:86:99:ee:35:c8:f7:09:7f:bb:b5:dd: bc:5e:6e:ab:71:70:ea:ba:41:21:ef:66:b8:65:1c: 22:00:8b:ab:d1:c8:4d:1c:8e:e1:2d:2c:78:67:65: c5:74:bd:64:af:92:d4:49:40:7e:31:a2:e5:57:fe: 3d:32:56:dd:73:61:22:ba:9f:25:36:78:84:5f:7a: 0a:b4:19:ed:09:d7:09:c0:da:9a:b7:38:66:16:fc: fd:76:7e:0f:2e:94:fd:66:8f:08:05:de:11:29:3f: 29:d1:55:56:ae:41:27:68:cb:1f:c2:7a:c6:17:92: c4:fe:1e:6c:84:46:04:0f:3c:79:11:49:aa:1a:a9: 85:e7:f9:45:30:6b:8a:4d:be:a9:0f:b5:5f:a7:13: 28:d5:31:96:74:df:f4:9c:4c:ae:52:7a:c9:34:f3: 7a:d8:84:6c:9f:a0:10:22:ec:53:a2:8d:2a:ca:3d: 98:89:e1:a9:0e:c9:08:59:ff:f7:89:f4:63:ed:b8: e5:12:fe:fb:04:70:ff:ae:ff:74:47:a8:6c:33:a7: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:48:BB:E0:90:C1:2E:14:10:48:25:6E:71:A3:5A:4E:FD:18:35:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3f:04:6e:3b:5a:b6:c1:b3:38:c9:02:5e:af:bd:93:d4:9c: 80:16:48:c1:e6:82:f7:b7:2a:46:74:c0:a4:39:52:1f:06:dd: 45:6b:d4:df:64:e5:5e:0a:40:f0:79:0c:4e:54:19:c3:33:27: 54:92:d6:3f:f2:76:f5:28:40:a8:4f:1b:cb:b7:8a:46:aa:12: 91:68:07:53:20:67:b0:7f:fb:53:ca:ec:07:3f:32:c8:28:fc: ec:5f:a3:ff:6e:7e:10:9b:eb:2a:b4:96:c2:16:a3:d6:22:19: 40:03:8d:e9:60:9b:e8:5c:58:9e:db:f3:ff:33:09:31:da:7b: 48:fe:ab:9e:51:1b:e7:55:ea:96:3d:d1:fd:9d:81:e2:65:d4: d1:32:e2:c4:62:77:79:a3:b2:a7:66:a6:56:47:d8:21:de:08: 36:9c:31:4b:46:cc:57:ad:6c:87:20:66:c5:06:33:2b:bf:01: 9a:cd:1d:81:19:28:4e:94:05:64:3b:d1:01:8a:c3:b4:6d:ac: 93:f2:2f:bd:2c:7f:3c:e7:cd:8c:b2:9e:ea:f0:1b:c0:57:49: 2d:54:a7:35:59:d9:32:f4:bf:1c:e3:98:12:cb:1c:5b:37:f0: 2b:26:fa:18:cd:72:a8:1a:f4:3b:92:30:d5:2c:fb:92:d2:da: c7:c2:1f:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJqZfylBUWgS54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWRmOWQyOWUtOTJjNC00NzNiLTk2NjUtOTEzNzFkMGIwZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqindiM9nAiR+BHKQuFPVTKMfqoan8lYZslQU aPmZ0BID+jXR4NbOU3hloJv/0NgwhpnuNcj3CX+7td28Xm6rcXDqukEh72a4ZRwi AIur0chNHI7hLSx4Z2XFdL1kr5LUSUB+MaLlV/49Mlbdc2Eiup8lNniEX3oKtBnt CdcJwNqatzhmFvz9dn4PLpT9Zo8IBd4RKT8p0VVWrkEnaMsfwnrGF5LE/h5shEYE Dzx5EUmqGqmF5/lFMGuKTb6pD7VfpxMo1TGWdN/0nEyuUnrJNPN62IRsn6AQIuxT oo0qyj2YieGpDskIWf/3ifRj7bjlEv77BHD/rv90R6hsM6crYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIFIu+CQwS4UEEglbnGjWk79GDX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmNzI4ZjUtZmUyZi0z YzlhLWI1ZDgtMjU2OWZjOWIyMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0/BG47WrbBszjJAl6vvZPUnIAWSMHmgve3KkZ0wKQ5Uh8G3UVr 1N9k5V4KQPB5DE5UGcMzJ1SS1j/ydvUoQKhPG8u3ikaqEpFoB1MgZ7B/+1PK7Ac/ Msgo/Oxfo/9ufhCb6yq0lsIWo9YiGUADjelgm+hcWJ7b8/8zCTHae0j+q55RG+dV 6pY90f2dgeJl1NEy4sRid3mjsqdmplZH2CHeCDacMUtGzFetbIcgZsUGMyu/AZrN HYEZKE6UBWQ70QGKw7RtrJPyL70sfzznzYyynurwG8BXSS1UpzVZ2TL0vxzjmBLL HFs38Csm+hjNcqga9DuSMNUs+5LS2sfCH/c= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:30 2025 by rpki-client