$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa File: ffa67dac-9013-3d2d-a4f6-1d307d212778.roa (raw, json) Hash identifier: xN8czFg3y3BByXbA6c5hRxiFWavjNFBJ7dhcv6JXA4E= Subject key identifier: A0:18:FD:83:B2:72:74:B6:0F:83:7F:A4:DE:02:8B:76:91:36:7D:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB8023537DF87A7622080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b8:02:35:37:df:87:a7:62:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2588c954-4be3-42c3-9a91-11dd5a5912dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:da:59:9e:5d:8b:2a:3c:6d:67:4f:d5:e7: 18:ad:60:b0:c9:26:cc:8b:de:33:c7:59:69:74:12: 0b:9f:c7:d4:fe:b6:12:04:35:01:54:3d:39:23:5b: 04:f0:52:eb:29:e4:54:20:3c:54:c4:3a:56:e6:e2: 58:1c:5d:32:da:06:6d:5c:15:17:3a:5e:bd:61:db: 2b:54:dc:b3:44:ad:bd:a7:f2:bc:97:b7:30:62:ef: 60:8d:44:a7:a6:83:42:f8:72:5f:0c:19:5c:48:bc: 29:98:86:ef:0d:ca:3a:70:cb:5f:51:89:4d:74:1b: 8b:d1:2e:74:e7:f7:07:11:48:ae:b2:24:76:68:b6: 0c:bd:01:2c:e8:99:54:ef:99:31:f7:94:6f:59:19: 39:90:4a:97:68:96:62:8e:66:fd:bb:11:82:39:e8: a6:33:e0:04:86:d5:05:e6:08:fc:25:f4:5d:1e:52: ec:3f:e4:4e:55:a1:d6:7a:5a:85:56:07:c4:98:cb: 09:dd:20:cb:99:0c:89:5b:13:e9:66:f5:af:46:59: 08:b3:d2:59:4f:7f:8e:a3:29:53:81:da:4e:ae:7a: 87:8a:05:48:bb:f1:02:8d:51:b9:08:bb:9d:f1:50: 1e:77:11:d1:69:ff:d2:fd:9e:02:53:ea:a1:d1:a0: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:FD:83:B2:72:74:B6:0F:83:7F:A4:DE:02:8B:76:91:36:7D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ad:eb:c9:6b:77:16:99:d5:cc:b3:74:5d:92:97:66:0b:4a: bc:9d:87:36:2e:6a:07:8a:d7:04:47:af:bb:bf:38:0d:52:75: 07:3c:5c:68:9a:8b:fe:e9:56:f6:b4:4b:eb:17:56:7c:2e:e6: 24:e7:fd:e0:8c:fe:a3:cb:84:4c:48:4d:06:7a:e4:13:67:1e: 0d:84:77:18:c9:4a:64:6e:78:84:87:c4:4d:32:23:13:d5:aa: 0f:a8:e5:f0:2b:4f:24:12:b7:20:ea:87:9e:fd:6f:d1:b1:be: 88:56:43:ca:f0:e8:0f:c8:2e:69:f5:fc:e0:1f:b6:2a:b7:68: dc:1a:38:68:5c:91:40:94:8a:8b:2e:43:83:91:b2:29:3b:6c: 26:da:d8:42:b9:71:ed:09:90:17:58:00:6e:db:9b:c1:57:00: 9e:64:e4:b5:ae:8e:c3:3d:89:7d:87:dc:a4:5a:a9:03:8d:3d: a7:8a:16:df:2b:cd:08:f2:dc:db:67:47:fb:53:4a:0f:75:fe: 5f:4b:d5:e9:76:70:f8:16:d8:71:ea:7a:ae:98:7b:74:3a:02: d9:c6:fe:13:e3:3a:bf:48:9a:88:cb:d2:ed:b8:0a:65:23:2a: 49:93:75:d8:e0:cc:e5:70:41:92:e5:34:90:56:29:ed:26:92: 87:ae:28:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzLgCNTffh6diIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjU4OGM5NTQtNGJlMy00MmMzLTlhOTEtMTFkZDVhNTkxMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6naWZ5diyo8bWdP1ecYrWCwySbMi94zx1lp dBILn8fU/rYSBDUBVD05I1sE8FLrKeRUIDxUxDpW5uJYHF0y2gZtXBUXOl69Ydsr VNyzRK29p/K8l7cwYu9gjUSnpoNC+HJfDBlcSLwpmIbvDco6cMtfUYlNdBuL0S50 5/cHEUiusiR2aLYMvQEs6JlU75kx95RvWRk5kEqXaJZijmb9uxGCOeimM+AEhtUF 5gj8JfRdHlLsP+ROVaHWelqFVgfEmMsJ3SDLmQyJWxPpZvWvRlkIs9JZT3+OoylT gdpOrnqHigVIu/ECjVG5CLud8VAedxHRaf/S/Z4CU+qh0aDGWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKAY/YOycnS2D4N/pN4Ci3aRNn3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZhNjdkYWMtOTAxMy0z ZDJkLWE0ZjYtMWQzMDdkMjEyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADit68lrdxaZ1cyzdF2Sl2YLSrydhzYuageK1wRHr7u/OA1SdQc8 XGiai/7pVva0S+sXVnwu5iTn/eCM/qPLhExITQZ65BNnHg2EdxjJSmRueISHxE0y IxPVqg+o5fArTyQStyDqh579b9GxvohWQ8rw6A/ILmn1/OAftiq3aNwaOGhckUCU iosuQ4ORsik7bCba2EK5ce0JkBdYAG7bm8FXAJ5k5LWujsM9iX2H3KRaqQONPaeK Ft8rzQjy3NtnR/tTSg91/l9L1el2cPgW2HHqeq6Ye3Q6AtnG/hPjOr9ImojL0u24 CmUjKkmTddjgzOVwQZLlNJBWKe0mkoeuKJI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:46 2025 by rpki-client