$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f439a753-09c9-3f33-b5c7-6b1a3003a476.roa File: f439a753-09c9-3f33-b5c7-6b1a3003a476.roa (raw, json) Hash identifier: 3VS935SNpTWYfuwk2n1v70OG3KIwB+J6yOoZTQzf8Pc= Subject key identifier: 81:7D:4B:66:A8:1A:87:85:37:94:D9:A9:77:0C:EB:40:4F:11:F2:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B7A40F4E15F2D5186F40DBE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f439a753-09c9-3f33-b5c7-6b1a3003a476.roa Signing time: Fri 10 Oct 2025 17:27:12 +0000 ROA not before: Fri 10 Oct 2025 17:27:12 +0000 ROA not after: Thu 08 Jan 2026 18:27:12 +0000 asID: 19905 IP address blocks: 2604:2d81:1180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:40:f4:e1:5f:2d:51:86:f4:0d:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 17:27:12 2025 GMT Not After : Jan 8 18:27:12 2026 GMT Subject: CN=38c0232f-b365-433c-94ae-be7c82943060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:f5:01:60:87:99:f1:e1:fe:cd:89:44:d5: 32:50:68:41:db:d4:5d:07:42:72:b0:68:9f:40:54: e2:5a:17:3c:31:73:04:a3:78:56:14:b6:19:92:ea: 5a:2c:b3:e7:ac:82:25:36:32:29:14:bf:4e:3c:92: 71:ef:d1:df:7d:87:bb:10:fb:5c:b7:a9:7e:61:a7: b8:90:16:77:53:e7:35:44:f3:e1:61:3b:b6:8f:b0: 15:ad:3e:d3:97:fc:9c:c0:af:3e:18:a4:4a:1f:ae: b6:3e:c2:ae:ce:ab:e2:b3:b4:ce:e1:75:f0:7e:7e: d0:3b:61:83:c5:a4:94:81:e5:80:b8:3e:d6:70:8e: 8c:34:d8:43:75:f6:0b:0b:0c:6b:cf:7b:5d:35:70: 67:ce:42:e0:e8:88:ab:6c:e2:92:9f:0f:5c:3a:1f: 07:c2:8e:ad:31:34:45:42:4c:fa:f8:08:e3:cd:5a: b3:30:ff:3a:9a:ff:dd:fa:f2:85:99:27:d4:88:d9: 01:c0:ff:b9:d5:d8:47:14:da:6d:10:36:25:61:eb: da:5b:b9:77:9c:45:42:74:ac:90:e2:b6:5b:32:73: 4e:15:31:00:ea:a2:4e:e3:d9:4e:72:12:26:ae:0f: 82:0b:e4:19:04:85:e1:2a:14:eb:43:83:2e:1f:4f: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7D:4B:66:A8:1A:87:85:37:94:D9:A9:77:0C:EB:40:4F:11:F2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f439a753-09c9-3f33-b5c7-6b1a3003a476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fb:1d:9b:4a:29:0c:fc:3a:ff:f4:a3:fb:2b:12:9d:86:8c: 5f:f3:df:dc:0a:a1:8b:5a:20:04:71:da:be:c4:03:a2:00:76: af:63:72:7e:21:bd:eb:a9:82:ed:54:f6:19:22:dc:be:2c:4d: 4e:05:e9:cb:d0:6c:11:68:fc:fb:7f:0a:77:a5:51:89:a5:7f: ad:90:dc:3c:a2:c9:30:ed:66:f7:43:a0:80:35:02:e1:0c:e3: 76:d9:26:4b:d6:9d:76:8f:1f:0e:95:b7:38:15:8f:8b:10:04: eb:c8:cd:50:9a:2e:6c:ff:9b:70:2d:c1:00:8e:7b:70:fb:a7: e8:c0:92:27:76:f9:87:0b:51:b8:ac:53:de:dc:d0:94:f5:1c: 35:e4:78:3e:44:6d:e6:e7:9a:55:fa:2e:61:0c:32:e7:49:c9: a0:4c:f3:b1:1a:2c:a3:c4:9e:6f:53:3e:c1:61:d1:ae:12:97: 81:8e:b1:67:17:e7:17:35:42:d0:33:7d:ba:ec:71:12:c3:05: 80:fb:38:d4:29:5b:3a:7b:92:a1:15:bf:33:6b:d1:9a:3f:33: 80:4a:7f:2c:8d:10:b2:9f:44:5d:9a:6c:cd:2b:cd:d7:90:bc: 2d:e6:ad:19:45:4e:d9:f0:83:c0:e4:53:fe:4e:c3:c4:e1:91: 71:69:38:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt6QPThXy1RhvQNvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDE3MjcxMloXDTI2MDEwODE4MjcxMlowLzEtMCsGA1UEAxMk MzhjMDIzMmYtYjM2NS00MzNjLTk0YWUtYmU3YzgyOTQzMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhX1AWCHmfHh/s2JRNUyUGhB29RdB0JysGif QFTiWhc8MXMEo3hWFLYZkupaLLPnrIIlNjIpFL9OPJJx79HffYe7EPtct6l+Yae4 kBZ3U+c1RPPhYTu2j7AVrT7Tl/ycwK8+GKRKH662PsKuzqvis7TO4XXwfn7QO2GD xaSUgeWAuD7WcI6MNNhDdfYLCwxrz3tdNXBnzkLg6IirbOKSnw9cOh8Hwo6tMTRF Qkz6+AjjzVqzMP86mv/d+vKFmSfUiNkBwP+51dhHFNptEDYlYevaW7l3nEVCdKyQ 4rZbMnNOFTEA6qJO49lOchImrg+CC+QZBIXhKhTrQ4MuH08WIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIF9S2aoGoeFN5TZqXcM60BPEfKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjQzOWE3NTMtMDljOS0z ZjMzLWI1YzctNmIxYTMwMDNhNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAD7HZtKKQz8Ov/0o/srEp2GjF/z39wKoYtaIARx2r7EA6IAdq9j cn4hveupgu1U9hki3L4sTU4F6cvQbBFo/Pt/CnelUYmlf62Q3DyiyTDtZvdDoIA1 AuEM43bZJkvWnXaPHw6VtzgVj4sQBOvIzVCaLmz/m3AtwQCOe3D7p+jAkid2+YcL UbisU97c0JT1HDXkeD5EbebnmlX6LmEMMudJyaBM87EaLKPEnm9TPsFh0a4Sl4GO sWcX5xc1QtAzfbrscRLDBYD7ONQpWzp7kqEVvzNr0Zo/M4BKfyyNELKfRF2abM0r zdeQvC3mrRlFTtnwg8DkU/5Ow8ThkXFpOBI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:07 2025 by rpki-client