$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa File: 19ede046-1785-37f6-bded-3d2d1e9bd10a.roa (raw, json) Hash identifier: Y2+AIuXA0Kz2afFPGHZSXzrV/0Yl0IwUoJ3/fMtH4ZI= Subject key identifier: C5:0C:38:35:6B:A6:A3:9B:7A:E3:2C:33:27:5D:BB:C6:85:07:60:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEECC85279144298C553C1280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa Signing time: Thu 21 Aug 2025 18:35:14 +0000 ROA not before: Thu 21 Aug 2025 18:35:14 +0000 ROA not after: Wed 19 Nov 2025 19:35:14 +0000 asID: 19905 IP address blocks: 2604:2d81:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:cc:85:27:91:44:29:8c:55:3c:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 18:35:14 2025 GMT Not After : Nov 19 19:35:14 2025 GMT Subject: CN=8277cc28-3051-4908-ba6e-bcd87827c73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:bd:ff:c9:1d:51:cd:40:bf:86:01:a4:d7: 39:e2:88:f9:79:dc:d7:a7:d2:59:94:7a:92:2d:88: 82:b3:23:c6:79:a9:a4:3f:2c:19:78:e5:81:cf:5f: 76:c5:fc:63:3c:4d:71:e2:6e:3d:20:1f:9d:15:e2: 3e:91:ad:42:dc:35:65:10:a4:c5:d1:d1:51:31:ba: dd:c3:ca:6a:af:49:61:cb:87:d3:16:25:5b:97:59: 99:6b:c5:d9:82:dd:07:df:06:2c:ed:ae:14:46:c1: 14:4a:73:4f:36:95:af:b0:07:35:de:62:c1:30:46: 25:07:9e:0e:8a:a7:3a:e2:4f:3f:9c:13:be:84:7f: 1a:4d:10:da:9d:10:bb:4e:bd:78:49:ee:72:6a:09: 6a:8e:38:5c:a2:3b:99:e5:0b:4c:ae:fa:3f:9b:0d: 9b:23:fc:25:e7:34:af:4a:91:13:ca:6b:07:12:ac: c0:b9:9b:af:8c:fa:6a:ce:e6:be:20:dd:20:49:d2: 55:3c:35:82:b7:e7:93:bc:64:a6:fd:ac:83:72:9c: 19:20:9f:28:b1:04:f8:da:a8:91:d8:b7:b9:4f:2e: e4:29:9b:c8:07:21:88:69:28:a0:ec:af:1c:b4:6c: d1:fe:07:8c:3d:ff:e6:b2:b0:b7:e7:eb:54:4a:7f: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0C:38:35:6B:A6:A3:9B:7A:E3:2C:33:27:5D:BB:C6:85:07:60:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:31:1a:c1:34:c3:62:14:dd:9c:32:f8:a2:01:00:af:84:05: a2:fb:06:f3:d7:db:01:32:cb:cd:bd:1f:1d:19:ad:f3:f6:02: 6e:ab:b8:82:20:b2:f3:c1:c2:a2:b1:9b:62:ac:86:81:52:1e: ef:07:87:ef:31:a8:72:88:85:b3:0a:ee:ec:a8:9a:cc:b6:a3: e6:47:61:9a:f6:9d:4f:4b:17:61:95:f8:cb:ba:85:8f:46:25: ea:96:52:cf:5c:65:43:08:c7:8d:e0:c9:1c:54:eb:ae:0f:fb: 3c:9d:1b:cd:ce:a0:4a:d8:53:36:84:b2:c0:66:3d:7a:df:38: e9:2b:2d:66:7a:9d:0c:4a:5d:fe:27:76:55:a2:94:19:8b:ba: 26:6d:82:0d:5e:cd:4d:4e:8f:c9:10:e6:5f:bc:bc:3e:e7:ba: 90:d5:0b:f3:13:53:d0:0e:58:ce:2b:55:1a:ea:c8:6f:fe:bf: 96:79:d8:05:30:10:fe:f3:e4:6c:c2:48:50:24:90:93:ef:e0: 0b:b3:8c:35:55:ae:c0:aa:80:e5:a5:84:e2:12:b3:d9:a6:3e: 79:c2:e3:71:69:6f:ff:63:83:f5:be:88:64:ff:fc:3f:27:a5: fc:d0:a9:5a:f6:80:5e:02:fb:9a:c0:f3:d6:aa:bb:03:fa:38: 0e:78:32:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEruzIUnkUQpjFU8EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTE4MzUxNFoXDTI1MTExOTE5MzUxNFowLzEtMCsGA1UEAxMk ODI3N2NjMjgtMzA1MS00OTA4LWJhNmUtYmNkODc4MjdjNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1K9/8kdUc1Av4YBpNc54oj5edzXp9JZlHqS LYiCsyPGeamkPywZeOWBz192xfxjPE1x4m49IB+dFeI+ka1C3DVlEKTF0dFRMbrd w8pqr0lhy4fTFiVbl1mZa8XZgt0H3wYs7a4URsEUSnNPNpWvsAc13mLBMEYlB54O iqc64k8/nBO+hH8aTRDanRC7Tr14Se5yaglqjjhcojuZ5QtMrvo/mw2bI/wl5zSv SpETymsHEqzAuZuvjPpqzua+IN0gSdJVPDWCt+eTvGSm/ayDcpwZIJ8osQT42qiR 2Le5Ty7kKZvIByGIaSig7K8ctGzR/geMPf/msrC35+tUSn9xdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMUMODVrpqObeuMsMyddu8aFB2BtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTllZGUwNDYtMTc4NS0z N2Y2LWJkZWQtM2QyZDFlOWJkMTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOTEawTTDYhTdnDL4ogEAr4QFovsG89fbATLLzb0fHRmt8/YCbqu4 giCy88HCorGbYqyGgVIe7weH7zGocoiFswru7KiazLaj5kdhmvadT0sXYZX4y7qF j0Yl6pZSz1xlQwjHjeDJHFTrrg/7PJ0bzc6gSthTNoSywGY9et846SstZnqdDEpd /id2VaKUGYu6Jm2CDV7NTU6PyRDmX7y8Pue6kNUL8xNT0A5YzitVGurIb/6/lnnY BTAQ/vPkbMJIUCSQk+/gC7OMNVWuwKqA5aWE4hKz2aY+ecLjcWlv/2OD9b6IZP/8 Pyel/NCpWvaAXgL7msDz1qq7A/o4DngyoQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:49 2025 by rpki-client