$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffdbc5b0-a8e0-3591-b58a-ba291b790d9f.roa File: ffdbc5b0-a8e0-3591-b58a-ba291b790d9f.roa (raw, json) Hash identifier: EKKmDAuRc8gqosQ9vbZLLj+4DPaJFyHo9LN5Pm58F6s= Subject key identifier: 2F:77:72:CD:F8:48:36:62:C5:35:47:6A:60:82:62:30:E9:9C:38:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BC05F082F99E9D5459EC3F100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffdbc5b0-a8e0-3591-b58a-ba291b790d9f.roa Signing time: Tue 04 Nov 2025 20:14:23 +0000 ROA not before: Tue 04 Nov 2025 20:14:23 +0000 ROA not after: Mon 02 Feb 2026 20:14:23 +0000 asID: 30036 IP address blocks: 2604:2d81:2e00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:5f:08:2f:99:e9:d5:45:9e:c3:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 4 20:14:23 2025 GMT Not After : Feb 2 20:14:23 2026 GMT Subject: CN=bca6b1f6-968b-4dda-adc7-f28574865e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:76:1d:2d:99:c5:11:2f:14:bc:b9:9e:f4: 92:f7:25:8d:50:7d:c0:56:3c:86:ec:64:44:ce:ba: e7:be:89:31:af:88:9a:2a:2d:cd:63:ac:3d:b7:13: 55:83:3b:66:f8:c3:2f:77:4a:eb:ae:69:c6:ad:a9: a1:2e:66:97:09:aa:04:a4:84:44:04:f7:3a:51:d2: 34:cc:12:37:3f:b9:fa:ce:7e:6a:96:db:4c:90:c8: a0:f7:7d:9c:5c:68:8d:54:ee:93:cf:ac:3b:b8:ae: 9f:c9:85:a3:97:d3:13:fc:15:dd:89:3d:96:43:f2: 8b:c2:20:68:17:f2:73:b4:15:32:4d:18:06:87:41: 25:36:c0:31:36:fd:91:23:22:b5:05:5f:80:77:4a: 9a:bb:ee:fc:6b:3e:75:42:7e:cc:5d:ca:4f:32:fb: 40:31:d1:59:b0:f6:81:c0:57:59:92:70:85:59:77: 75:d5:09:76:17:70:ce:d1:71:8b:ac:e4:3f:e4:09: 59:79:0a:3d:b7:b6:98:b5:d2:44:4a:37:79:3d:4e: 3f:18:fe:60:4b:e8:0d:c4:b2:c6:09:28:6e:eb:80: 78:09:ff:5c:43:9a:f1:02:dd:41:f0:ae:94:36:f4: 8e:af:7a:2e:84:96:e1:e8:c1:42:b9:4c:8e:fa:72: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:77:72:CD:F8:48:36:62:C5:35:47:6A:60:82:62:30:E9:9C:38:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffdbc5b0-a8e0-3591-b58a-ba291b790d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2e00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ab:2b:66:60:4e:b9:90:31:49:30:40:0e:04:9a:a9:1a:a6: fb:d5:e4:96:45:3f:9e:4e:34:b7:45:43:d1:42:d0:dc:33:4e: 0d:58:c6:ca:62:67:b3:9b:fd:c1:cb:2c:75:c7:69:81:97:b2: b3:26:15:1f:b4:48:eb:27:dd:c6:c3:08:a7:1a:de:95:9a:8a: c2:da:ec:2f:ef:fc:5b:09:1d:76:63:34:b3:58:39:81:6a:2d: 7f:59:0b:b1:ed:99:6f:63:c8:3e:6d:95:71:01:7e:d1:6b:6d: 02:60:16:e9:61:50:e3:be:51:02:5f:39:78:5b:3e:b1:03:d4: 59:7a:e6:ae:1f:00:ad:b6:06:39:7c:1e:33:30:0e:12:dc:cd: 8a:59:7f:b5:39:7c:d1:64:86:14:54:5a:f5:64:f2:59:2f:75: 06:5f:c2:b9:c3:34:78:6e:bb:91:6e:24:af:d4:e3:da:52:eb: 52:76:b1:4c:d1:cd:0b:e3:a3:d9:e5:9a:46:9a:6f:ab:2b:04: 94:2a:84:0f:78:d5:ef:e7:d8:b9:a6:5c:42:f1:1b:76:67:09: 74:ef:5d:65:8f:62:8f:cc:fa:be:71:1c:2d:1b:fb:11:c7:8e: 37:98:4f:8f:57:b8:cb:77:fc:ce:7c:cb:2e:a9:4d:e1:b1:8f: 4f:77:6c:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvAXwgvmenVRZ7D8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNDIwMTQyM1oXDTI2MDIwMjIwMTQyM1owLzEtMCsGA1UEAxMk YmNhNmIxZjYtOTY4Yi00ZGRhLWFkYzctZjI4NTc0ODY1ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJd2HS2ZxREvFLy5nvSS9yWNUH3AVjyG7GRE zrrnvokxr4iaKi3NY6w9txNVgztm+MMvd0rrrmnGramhLmaXCaoEpIREBPc6UdI0 zBI3P7n6zn5qlttMkMig932cXGiNVO6Tz6w7uK6fyYWjl9MT/BXdiT2WQ/KLwiBo F/JztBUyTRgGh0ElNsAxNv2RIyK1BV+Ad0qau+78az51Qn7MXcpPMvtAMdFZsPaB wFdZknCFWXd11Ql2F3DO0XGLrOQ/5AlZeQo9t7aYtdJESjd5PU4/GP5gS+gNxLLG CShu64B4Cf9cQ5rxAt1B8K6UNvSOr3ouhJbh6MFCuUyO+nKnCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC93cs34SDZixTVHamCCYjDpnDixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZkYmM1YjAtYThlMC0z NTkxLWI1OGEtYmEyOTFiNzkwZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgS4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+rK2ZgTrmQMUkwQA4EmqkapvvV5JZFP55ONLdFQ9FC0NwzTg1Y xspiZ7Ob/cHLLHXHaYGXsrMmFR+0SOsn3cbDCKca3pWaisLa7C/v/FsJHXZjNLNY OYFqLX9ZC7HtmW9jyD5tlXEBftFrbQJgFulhUOO+UQJfOXhbPrED1Fl65q4fAK22 Bjl8HjMwDhLczYpZf7U5fNFkhhRUWvVk8lkvdQZfwrnDNHhuu5FuJK/U49pS61J2 sUzRzQvjo9nlmkaab6srBJQqhA941e/n2LmmXELxG3ZnCXTvXWWPYo/M+r5xHC0b +xHHjjeYT49XuMt3/M58yy6pTeGxj093bNE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:43:40 2025 by rpki-client