$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de39ecf4-f104-3e2f-880f-b86e9da54154.roa File: de39ecf4-f104-3e2f-880f-b86e9da54154.roa (raw, json) Hash identifier: 5crCySQ+Qt0WsZxq0TN36a0iNOaz0wfPDTqaQJ/LwZw= Subject key identifier: 72:FA:98:89:23:86:50:82:B9:4F:81:63:92:C0:3B:6C:47:E1:A3:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B503AB44C39BDCE52D10AF940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de39ecf4-f104-3e2f-880f-b86e9da54154.roa Signing time: Thu 25 Sep 2025 16:10:39 +0000 ROA not before: Thu 25 Sep 2025 16:10:39 +0000 ROA not after: Wed 24 Dec 2025 17:10:39 +0000 asID: 30036 IP address blocks: 2604:2d81:3180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:3a:b4:4c:39:bd:ce:52:d1:0a:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 16:10:39 2025 GMT Not After : Dec 24 17:10:39 2025 GMT Subject: CN=5d68d445-5980-4972-8a75-103b9a0ff981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:16:ce:4c:ef:4c:2c:64:cd:38:4e:79:e1: f5:7f:b7:4e:6d:5b:d6:ce:c9:9d:80:eb:96:67:d2: 34:b1:0e:5a:20:5e:7c:cc:54:28:61:7a:6e:aa:d2: 1b:29:71:42:60:ef:2e:d0:05:72:fb:05:4b:77:f8: 6c:6e:57:ff:3b:3c:6e:be:68:e0:7a:27:41:1c:6b: 26:38:1b:5f:3e:37:93:ef:fa:57:a1:ce:8e:85:e3: 05:e9:34:5e:ab:a8:47:ff:3a:99:42:b0:1b:f9:d6: 62:c1:65:b5:c3:32:bd:12:01:3c:f7:3b:23:a9:d2: 51:f4:8d:12:20:20:5f:4e:9a:79:7c:56:8d:c7:a1: f6:97:30:85:fd:92:25:39:24:f6:31:91:1e:d1:4e: bd:31:5c:5f:65:4f:d5:23:e2:39:8f:aa:ba:cf:f2: 92:62:8f:c6:d7:47:e3:ae:d0:79:8c:a0:97:0f:d1: 23:aa:cc:73:4a:6f:ea:b1:34:95:75:33:1f:fb:13: b5:a3:b1:9a:ae:86:bc:99:26:6f:a6:a4:79:32:6a: 3f:75:c9:23:af:db:4d:bb:8d:42:d2:03:15:98:25: da:b1:3b:79:e0:5b:61:71:3b:de:46:55:bd:b4:83: c3:3e:21:b6:df:80:0c:0b:4d:16:7d:5d:79:3a:0b: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:98:89:23:86:50:82:B9:4F:81:63:92:C0:3B:6C:47:E1:A3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de39ecf4-f104-3e2f-880f-b86e9da54154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:a3:d7:c7:60:bd:47:00:8e:87:c9:bd:41:81:3d:c8:de: d9:e5:e7:f6:52:14:64:d5:61:0f:bf:6f:69:5b:c0:82:5f:ca: 32:e7:09:cf:15:b0:e5:fc:31:bc:3b:aa:64:35:eb:ce:c8:77: 5b:98:80:9d:5f:ea:e7:9f:16:07:0b:a5:6c:c2:20:6d:48:b0: d7:94:4b:fa:53:b5:37:e6:ef:bb:96:f2:2b:c3:cb:bd:90:a8: ce:61:e6:f6:a9:72:11:1f:c8:89:00:3e:ea:cb:e1:b7:68:94: 7a:e0:d7:80:10:0c:d4:9e:b8:43:4d:76:f5:d6:f6:9e:35:96: 10:99:ee:25:b2:64:22:92:c3:92:53:d3:50:7c:b8:29:a2:d7: 4d:e6:55:29:f5:e6:15:ce:59:8e:fd:b1:98:9d:59:96:ab:8e: 6f:28:a3:1c:58:d7:c4:da:69:72:6f:30:88:a7:2f:ae:32:1f: e2:d9:a8:6c:13:e3:56:dc:55:6c:b3:a2:e6:7a:6d:6b:b8:65: f7:04:2e:e3:74:e7:73:1f:0e:02:d6:3d:8c:f6:c2:73:07:8a: 1e:d8:c0:f7:b8:3e:1f:29:c0:a8:79:b5:bd:16:71:aa:0d:77: 34:9e:28:91:9a:61:b4:00:1d:8a:cf:80:7e:f4:a4:ba:1e:af: a5:76:cb:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtQOrRMOb3OUtEK+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNTE2MTAzOVoXDTI1MTIyNDE3MTAzOVowLzEtMCsGA1UEAxMk NWQ2OGQ0NDUtNTk4MC00OTcyLThhNzUtMTAzYjlhMGZmOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkMWzkzvTCxkzThOeeH1f7dObVvWzsmdgOuW Z9I0sQ5aIF58zFQoYXpuqtIbKXFCYO8u0AVy+wVLd/hsblf/OzxuvmjgeidBHGsm OBtfPjeT7/pXoc6OheMF6TReq6hH/zqZQrAb+dZiwWW1wzK9EgE89zsjqdJR9I0S ICBfTpp5fFaNx6H2lzCF/ZIlOST2MZEe0U69MVxfZU/VI+I5j6q6z/KSYo/G10fj rtB5jKCXD9EjqsxzSm/qsTSVdTMf+xO1o7Garoa8mSZvpqR5Mmo/dckjr9tNu41C 0gMVmCXasTt54FthcTveRlW9tIPDPiG234AMC00WfV15OgsTTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHL6mIkjhlCCuU+BY5LAO2xH4aOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGUzOWVjZjQtZjEwNC0z ZTJmLTg4MGYtYjg2ZTlkYTU0MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBJo9fHYL1HAI6Hyb1BgT3I3tnl5/ZSFGTVYQ+/b2lbwIJfyjLn Cc8VsOX8Mbw7qmQ1687Id1uYgJ1f6uefFgcLpWzCIG1IsNeUS/pTtTfm77uW8ivD y72QqM5h5vapchEfyIkAPurL4bdolHrg14AQDNSeuENNdvXW9p41lhCZ7iWyZCKS w5JT01B8uCmi103mVSn15hXOWY79sZidWZarjm8ooxxY18TaaXJvMIinL64yH+LZ qGwT41bcVWyzouZ6bWu4ZfcELuN053MfDgLWPYz2wnMHih7YwPe4Ph8pwKh5tb0W caoNdzSeKJGaYbQAHYrPgH70pLoer6V2ywM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:39:37 2025 by rpki-client