$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa File: db37c17f-050f-342f-aee5-a6889e623c6b.roa (raw, json) Hash identifier: k0ug5HNMVdRKJkaOlQmETcWC0pdL9SLw5dqecPkAeiI= Subject key identifier: 48:A8:79:52:58:D4:52:45:C6:62:6F:3F:C2:4B:ED:91:91:A1:D1:AB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620208553D92EA7381BD8900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2d80:db80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:08:55:3d:92:ea:73:81:bd:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0485ca1e-db37-420b-b4cd-c4d317bc524b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:2f:55:17:cc:9a:61:46:4b:75:38:5d:35: 27:4a:81:73:3f:3b:7f:8f:a1:2b:23:c8:9d:46:a5: 09:76:be:0d:d5:31:f6:69:a3:ee:f6:ba:c3:4a:a6: b6:5d:91:96:83:c2:07:5a:1e:e9:5c:45:f9:29:2c: ef:e9:2d:7d:c7:e9:e9:7d:91:a8:b0:67:1b:4c:d3: a7:91:7b:c2:40:65:13:c0:87:26:8b:fc:d3:74:90: 30:bd:9c:0d:97:1f:e5:6b:47:73:41:df:6b:37:cc: 09:88:23:5f:e4:2f:18:8f:e3:cb:ff:5d:76:40:e2: fb:ff:f1:b1:74:93:63:61:00:bd:bb:32:c7:b4:d0: 4b:1c:75:47:3d:6d:b8:d6:5a:97:cb:7d:92:62:c6: df:21:35:e5:dc:d0:3e:80:b0:a4:57:3f:ea:39:58: 0c:50:f0:46:94:14:69:c0:c3:b1:74:72:f4:a1:7e: bf:a5:97:4d:1e:b1:99:36:b4:a2:34:4e:19:1d:d3: aa:34:e6:42:9a:44:f4:38:f5:6c:28:24:c9:0e:16: a2:04:e5:d8:a3:b0:b0:ba:95:d9:43:22:77:6b:41: 4c:71:96:1d:89:72:36:a0:e0:4b:5d:f6:d8:3f:63: 36:ac:2d:6a:b5:a1:46:1a:26:a0:00:ec:ad:2f:3b: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A8:79:52:58:D4:52:45:C6:62:6F:3F:C2:4B:ED:91:91:A1:D1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:db80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:33:49:12:5f:45:7f:62:ab:32:fe:68:11:e0:12:62:04:ce: cd:f0:10:4a:76:f9:ca:d1:1e:85:52:10:f0:52:11:29:11:b1: 19:a0:62:48:a4:2e:10:58:8e:e9:3b:d0:6a:9b:7f:f6:18:14: 2f:2b:3d:56:0d:ce:e9:fa:0b:a7:2e:15:cf:b0:31:72:8e:0e: b6:3d:9e:25:36:67:07:75:30:82:b5:aa:79:c7:d7:b6:41:49: df:87:82:b9:b5:81:ae:12:ee:6a:f5:25:14:60:28:98:56:4f: b9:a1:00:56:fd:ab:b6:87:ae:ac:dd:f2:3a:24:e2:f1:67:4e: e7:4d:04:20:f0:4b:9b:af:2b:c5:1c:be:7f:37:0a:d4:8f:91: 38:8b:df:72:64:3b:7c:10:2f:5c:df:43:4f:9a:8e:34:70:06: 8e:8f:32:ba:d7:62:eb:3e:eb:4b:20:54:de:67:3f:08:95:74: e2:32:da:d1:ab:af:93:cc:a7:2b:2e:a9:aa:b2:d7:0a:87:84: 58:a5:8f:86:8f:4a:ff:ca:56:20:41:ce:8d:5e:c0:1c:08:34: af:c9:1a:ea:dd:92:6a:2f:ea:a6:76:f2:20:e9:89:aa:04:27: fe:a4:e4:73:9a:70:86:e5:d2:b2:ca:ba:e4:50:55:90:45:2f: 97:38:5b:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAghVPZLqc4G9iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDQ4NWNhMWUtZGIzNy00MjBiLWI0Y2QtYzRkMzE3YmM1MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKUvVRfMmmFGS3U4XTUnSoFzPzt/j6ErI8id RqUJdr4N1TH2aaPu9rrDSqa2XZGWg8IHWh7pXEX5KSzv6S19x+npfZGosGcbTNOn kXvCQGUTwIcmi/zTdJAwvZwNlx/la0dzQd9rN8wJiCNf5C8Yj+PL/112QOL7//Gx dJNjYQC9uzLHtNBLHHVHPW241lqXy32SYsbfITXl3NA+gLCkVz/qOVgMUPBGlBRp wMOxdHL0oX6/pZdNHrGZNrSiNE4ZHdOqNOZCmkT0OPVsKCTJDhaiBOXYo7CwupXZ QyJ3a0FMcZYdiXI2oOBLXfbYP2M2rC1qtaFGGiagAOytLzvvqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEioeVJY1FJFxmJvP8JL7ZGRodGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIzN2MxN2YtMDUwZi0z NDJmLWFlZTUtYTY4ODllNjIzYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0zSRJfRX9iqzL+aBHgEmIEzs3wEEp2+crRHoVSEPBSESkRsRmg YkikLhBYjuk70Gqbf/YYFC8rPVYNzun6C6cuFc+wMXKODrY9niU2Zwd1MIK1qnnH 17ZBSd+Hgrm1ga4S7mr1JRRgKJhWT7mhAFb9q7aHrqzd8jok4vFnTudNBCDwS5uv K8Ucvn83CtSPkTiL33JkO3wQL1zfQ0+ajjRwBo6PMrrXYus+60sgVN5nPwiVdOIy 2tGrr5PMpysuqaqy1wqHhFilj4aPSv/KViBBzo1ewBwINK/JGurdkmov6qZ28iDp iaoEJ/6k5HOacIbl0rLKuuRQVZBFL5c4W64= -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:15 2025 by rpki-client