$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa3ee02a-b620-37b0-a985-a4b74258bbd3.roa File: fa3ee02a-b620-37b0-a985-a4b74258bbd3.roa (raw, json) Hash identifier: E33a30vJ/s442mnFuxJk47nDPhw7Z7STQNAhp5OzIGM= Subject key identifier: 70:80:53:0B:B8:88:A6:56:E1:08:06:5C:D4:CB:76:A5:23:CA:28:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B8D477F88FC14FDC329F0A800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa3ee02a-b620-37b0-a985-a4b74258bbd3.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 19905 IP address blocks: 2604:2d80:f300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7f:88:fc:14:fd:c3:29:f0:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=f79b33de-04f4-4588-9ba6-a337d0aa1846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:e2:41:03:92:de:49:33:55:b4:3f:aa:a6: 4c:5b:c4:1e:e8:30:9a:4b:4f:7e:72:db:fd:28:ba: 9b:1e:11:aa:bf:f1:3e:c2:cd:fb:0a:ea:8d:ae:51: 54:e4:22:51:eb:e2:95:31:35:b8:71:52:9e:f3:b3: 2f:4e:67:a2:f7:b9:ac:9a:61:cd:17:0d:db:c9:cd: 1e:e2:bf:28:bb:08:f1:34:69:7f:06:0c:ad:15:24: 66:e3:f7:58:b9:75:f1:a1:44:39:72:84:ce:7f:a3: ae:d8:60:62:8e:29:a2:6c:9b:c6:c4:a1:83:63:9e: 4e:32:46:4f:a2:2a:41:60:92:07:5a:67:4b:10:b8: ba:08:cb:67:e2:04:8c:02:bc:e8:59:27:f5:d5:62: 54:be:f4:f0:9a:8d:91:65:1f:75:7b:ac:75:c3:66: 6d:45:62:f5:52:a1:19:d6:c9:57:b4:4b:02:6f:d6: 06:02:a0:14:06:eb:62:89:43:07:cd:0f:ac:2e:9a: 4a:49:11:52:2b:a1:84:17:30:1e:48:7a:38:42:26: b2:71:51:a9:5d:7f:df:db:8f:a9:21:a0:39:23:5d: 13:87:dd:ae:d7:31:26:68:ae:31:95:e7:53:07:df: e0:ec:bb:0a:fa:18:4c:0c:5a:b2:cf:1a:00:8a:4e: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:53:0B:B8:88:A6:56:E1:08:06:5C:D4:CB:76:A5:23:CA:28:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa3ee02a-b620-37b0-a985-a4b74258bbd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2e:d1:26:43:f8:70:89:16:e7:46:f6:5c:da:2b:36:74:2c: 9c:d8:65:0f:4a:1b:14:24:e6:e0:0b:f0:d6:a3:3f:70:23:e9: 4b:8b:42:3e:65:55:78:27:3d:cc:c9:79:5b:a5:fa:92:4f:39: cf:aa:f6:56:10:2f:57:80:c3:33:7f:fd:0a:8a:ef:44:11:48: b0:9f:d0:c5:77:84:c4:1d:c7:ef:d6:44:ca:b6:70:90:7b:b6: c2:fb:7d:41:83:82:65:a8:ef:85:16:bd:8c:7f:38:0f:fa:58: e2:f6:f7:12:5c:75:8d:df:39:d2:2f:1f:86:9a:3e:d3:0b:66: 4d:c4:c7:fc:76:c0:3b:42:df:e1:22:3f:5a:50:bd:4a:42:72: 5f:7c:d0:31:60:fc:f5:8b:c1:b5:1a:bc:89:f4:93:fa:f5:08: 38:4a:c8:b6:eb:6d:1b:f1:37:6d:a0:d5:37:26:48:69:c6:82: 03:be:db:dd:62:86:62:02:6b:3d:57:25:99:8e:cd:69:e2:dc: 63:c2:51:87:ec:9d:1b:48:3a:6a:8e:de:68:7f:80:9a:c0:0e: 3a:78:59:da:87:73:a6:66:f1:eb:b6:65:6c:c8:b2:55:ba:73: f9:da:fb:c3:99:6b:d9:6f:4d:ac:0c:57:9a:e8:70:17:d0:2b: 29:eb:27:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuNR3+I/BT9wynwqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk Zjc5YjMzZGUtMDRmNC00NTg4LTliYTYtYTMzN2QwYWExODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg7iQQOS3kkzVbQ/qqZMW8Qe6DCaS09+ctv9 KLqbHhGqv/E+ws37CuqNrlFU5CJR6+KVMTW4cVKe87MvTmei97msmmHNFw3byc0e 4r8ouwjxNGl/BgytFSRm4/dYuXXxoUQ5coTOf6Ou2GBijimibJvGxKGDY55OMkZP oipBYJIHWmdLELi6CMtn4gSMArzoWSf11WJUvvTwmo2RZR91e6x1w2ZtRWL1UqEZ 1slXtEsCb9YGAqAUButiiUMHzQ+sLppKSRFSK6GEFzAeSHo4QiaycVGpXX/f24+p IaA5I10Th92u1zEmaK4xledTB9/g7LsK+hhMDFqyzxoAik6nGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCAUwu4iKZW4QgGXNTLdqUjyij4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEzZWUwMmEtYjYyMC0z N2IwLWE5ODUtYTRiNzQyNThiYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcu0SZD+HCJFudG9lzaKzZ0LJzYZQ9KGxQk5uAL8NajP3Aj6UuL Qj5lVXgnPczJeVul+pJPOc+q9lYQL1eAwzN//QqK70QRSLCf0MV3hMQdx+/WRMq2 cJB7tsL7fUGDgmWo74UWvYx/OA/6WOL29xJcdY3fOdIvH4aaPtMLZk3Ex/x2wDtC 3+EiP1pQvUpCcl980DFg/PWLwbUavIn0k/r1CDhKyLbrbRvxN22g1TcmSGnGggO+ 291ihmICaz1XJZmOzWni3GPCUYfsnRtIOmqO3mh/gJrADjp4WdqHc6Zm8eu2ZWzI slW6c/na+8OZa9lvTawMV5rocBfQKynrJyI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:24 2025 by rpki-client