$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa File: d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa (raw, json) Hash identifier: qhTUKRD8VEQyrMU/esyT5EKAREv08KZIa7EObNOwWv0= Subject key identifier: 96:0F:4F:9B:14:E0:70:E0:5D:36:F2:4F:90:07:96:AF:8A:90:F4:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BB45D44A1D5EF0CC83BE5B200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:44:a1:d5:ef:0c:c8:3b:e5:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=34beed68-39d1-46c0-aab8-bb9ac2409b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:36:a7:1c:a7:20:9c:73:f5:b9:95:bb:20: 40:d3:f6:0d:0b:9f:a2:7a:f5:1b:f1:1f:07:b0:c4: 0b:75:b0:38:ee:b3:39:ce:c7:d1:2c:27:46:0e:83: 2f:21:f9:71:f2:45:6b:ae:92:9c:57:78:08:5c:4a: dc:f5:14:02:81:f1:ca:9c:bf:04:12:2a:60:fb:f0: ba:87:a2:a4:7b:be:6d:f3:54:51:0a:24:b9:6d:a4: 3b:b3:3f:83:0b:b1:aa:1e:1b:aa:07:a8:75:9f:a9: 59:e6:75:a4:5e:a5:41:e4:7d:a1:9e:a9:75:66:41: 21:9b:08:2e:40:3f:da:be:ec:5a:92:f7:d7:69:07: 43:57:1c:e8:42:8f:84:cc:b5:2f:a6:27:47:c7:b2: 3b:be:69:b7:e9:ec:df:8b:c3:08:23:9c:b4:01:55: ce:b7:5b:c8:14:24:32:4e:a3:74:60:91:04:ae:be: ef:82:db:ef:80:48:df:5d:49:82:a4:d3:cc:12:27: a8:a0:0b:e8:ec:d6:f1:89:2f:ed:46:9d:49:57:2d: a0:fc:f4:bd:71:38:8f:1a:4f:cc:e9:1d:82:35:06: 2c:65:bd:2a:b4:26:76:cc:c0:77:6c:99:f4:43:87: 16:fe:0d:f2:40:82:c0:2f:93:03:83:55:6e:d2:83: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:4F:9B:14:E0:70:E0:5D:36:F2:4F:90:07:96:AF:8A:90:F4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ff:c4:16:ea:ca:2f:b9:d2:87:59:c4:b4:88:4b:58:78:30: 66:f0:d4:37:dc:3c:3e:45:c0:e5:76:45:ab:f8:4b:e7:1e:fc: 3a:c3:1c:f2:28:a8:55:df:5c:6a:e4:14:d6:a2:d5:a8:3e:22: 80:4d:47:7d:8d:63:c7:bc:5f:71:c2:01:99:03:d9:16:38:9c: f9:b5:b5:07:cf:da:23:3c:2f:cc:39:4e:ab:2e:b0:c9:69:2b: 47:bb:cd:a3:7a:ec:61:7e:c8:0b:b5:05:96:4d:c0:61:cc:e3: 29:21:02:d4:a4:f0:0f:26:f1:76:36:75:8a:a5:5f:5c:da:ec: b9:86:6b:b8:55:2f:09:18:80:51:fe:24:50:85:07:76:58:5b: 52:aa:8d:e4:b9:e4:52:e6:09:29:73:c5:78:61:1f:fc:d0:d4: c5:d9:4f:30:99:a3:29:c5:38:12:9a:bc:a3:6f:f8:46:20:ef: 96:6a:6e:d4:66:bb:22:0a:4a:8f:fc:45:3d:a7:0d:ca:59:2c: 86:9d:4b:c0:7b:e1:8d:09:12:3d:96:96:f5:5d:a2:42:4f:90: a4:e8:3d:93:63:e8:8e:14:5b:af:8b:ce:82:fb:01:4c:b7:f9: 8b:95:79:ce:14:46:1f:7b:93:5b:a4:30:40:01:ac:0b:cb:ff: 56:0f:63:89 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XUSh1e8MyDvlsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzRiZWVkNjgtMzlkMS00NmMwLWFhYjgtYmI5YWMyNDA5YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniU2pxynIJxz9bmVuyBA0/YNC5+ievUb8R8H sMQLdbA47rM5zsfRLCdGDoMvIflx8kVrrpKcV3gIXErc9RQCgfHKnL8EEipg+/C6 h6Kke75t81RRCiS5baQ7sz+DC7GqHhuqB6h1n6lZ5nWkXqVB5H2hnql1ZkEhmwgu QD/avuxakvfXaQdDVxzoQo+EzLUvpidHx7I7vmm36ezfi8MII5y0AVXOt1vIFCQy TqN0YJEErr7vgtvvgEjfXUmCpNPMEieooAvo7NbxiS/tRp1JVy2g/PS9cTiPGk/M 6R2CNQYsZb0qtCZ2zMB3bJn0Q4cW/g3yQILAL5MDg1Vu0oP1BQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJYPT5sU4HDgXTbyT5AHlq+KkPTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDkxZTNlMGUtNmZmZS0z YzZmLWI0MGEtYmVhZDliNDY3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgNAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO//EFurKL7nSh1nEtIhLWHgwZvDUN9w8PkXA5XZFq/hL5x78OsMc 8iioVd9cauQU1qLVqD4igE1HfY1jx7xfccIBmQPZFjic+bW1B8/aIzwvzDlOqy6w yWkrR7vNo3rsYX7IC7UFlk3AYczjKSEC1KTwDybxdjZ1iqVfXNrsuYZruFUvCRiA Uf4kUIUHdlhbUqqN5LnkUuYJKXPFeGEf/NDUxdlPMJmjKcU4Epq8o2/4RiDvlmpu 1Ga7IgpKj/xFPacNylkshp1LwHvhjQkSPZaW9V2iQk+QpOg9k2PojhRbr4vOgvsB TLf5i5V5zhRGH3uTW6QwQAGsC8v/Vg9jiQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:09 2025 by rpki-client