$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bc482d-d717-3d3c-a575-c7a08cf169ec.roa File: 20bc482d-d717-3d3c-a575-c7a08cf169ec.roa (raw, json) Hash identifier: AmkgXLdigvvPTJDevZyDm+eQk3ESKpiPF13KBQNaw0A= Subject key identifier: 9D:6F:8E:A1:00:9F:07:47:10:4B:A4:39:5F:01:FB:54:D1:04:AD:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B7F5207E35E0A37ECAFE70640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bc482d-d717-3d3c-a575-c7a08cf169ec.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 30036 IP address blocks: 2604:2d80:2a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:07:e3:5e:0a:37:ec:af:e7:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ae14cb3f-c320-46b0-8627-e78943d9b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:da:d5:a7:40:b2:ef:b8:a3:73:44:8f:5b: e7:a6:bd:db:38:62:4f:2b:7a:05:9d:04:92:4c:0b: aa:f4:58:6c:fa:1a:de:7b:58:ec:5a:df:03:ce:11: bf:22:6a:f7:7b:c0:70:db:af:f1:cc:f5:36:9c:b8: 93:84:9d:c7:31:29:f1:78:ac:44:d1:ab:52:58:e2: b1:06:91:e1:ac:c2:79:86:6e:87:57:cd:87:f9:c8: d0:f2:a3:de:eb:db:ed:2b:ba:df:66:a8:d2:8d:36: 4e:b6:50:22:cd:41:55:d1:38:e9:c2:24:f7:79:c1: c0:13:3c:0b:8a:f9:64:d3:b1:7d:f6:65:00:ef:83: 66:ba:a8:bf:c8:16:23:e4:fe:1f:d7:00:af:c3:6f: 8f:f1:5f:a0:09:5c:2e:b2:5e:e0:00:f8:93:b3:59: cd:71:06:ff:10:c4:10:cc:7d:fa:35:08:b0:a4:6d: 88:a3:82:28:92:30:80:28:0d:d1:c8:69:b5:05:99: b7:b8:83:6d:bd:5c:05:3c:93:50:26:44:77:84:68: 64:62:17:77:22:d1:6d:c3:b3:8d:d9:4a:75:8d:60: d5:9b:95:f4:6c:e9:06:da:b5:6d:e1:4f:42:4d:53: 48:fe:2a:ce:19:92:23:23:42:ef:d7:25:79:0f:de: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:8E:A1:00:9F:07:47:10:4B:A4:39:5F:01:FB:54:D1:04:AD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bc482d-d717-3d3c-a575-c7a08cf169ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2a00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a3:dc:56:fb:f9:35:0a:2c:5e:84:bd:fa:f8:87:ed:f2:8d: 01:bd:04:b5:86:95:90:c7:6d:28:56:82:c7:fa:f2:0a:05:54: dc:74:f7:3b:37:f6:cf:3b:be:de:00:dc:6e:55:6a:3c:60:3b: 19:f9:b6:8d:27:60:10:4b:5c:aa:ed:0c:6d:df:13:16:fe:4e: 9a:36:6e:15:9e:a4:dc:e3:58:c4:79:a1:13:bc:fa:17:7e:6e: 06:8d:9d:89:57:2f:75:9d:22:0e:b0:2a:8c:a3:9a:1e:46:3e: 36:53:59:6c:fc:58:6b:bc:db:67:08:b2:fc:5d:6c:d1:98:cd: ee:0c:cf:93:ba:98:9d:2c:69:b1:65:eb:ec:ce:db:c0:d0:dd: c9:88:14:7b:6d:4b:25:a0:ef:9e:58:46:44:f2:c6:69:07:03: d6:eb:df:a0:7d:43:fb:25:83:b8:71:1a:6b:50:94:84:a9:48: 19:73:c2:c4:8b:b5:9b:e5:36:99:34:38:b0:97:55:f9:69:1b: 4f:17:ef:05:2a:e9:76:61:61:7b:ab:c8:ac:59:82:8f:18:69: 53:90:b5:61:d6:8c:30:08:7b:53:ba:86:5d:80:f2:f4:6c:a8: 29:56:fe:fb:fb:b3:2d:b9:a1:12:f3:44:ac:f5:7a:e5:83:f9: bf:7e:a4:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UgfjXgo37K/nBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWUxNGNiM2YtYzMyMC00NmIwLTg2MjctZTc4OTQzZDliNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KHa1adAsu+4o3NEj1vnpr3bOGJPK3oFnQSS TAuq9Fhs+hree1jsWt8DzhG/Imr3e8Bw26/xzPU2nLiThJ3HMSnxeKxE0atSWOKx BpHhrMJ5hm6HV82H+cjQ8qPe69vtK7rfZqjSjTZOtlAizUFV0TjpwiT3ecHAEzwL ivlk07F99mUA74Nmuqi/yBYj5P4f1wCvw2+P8V+gCVwusl7gAPiTs1nNcQb/EMQQ zH36NQiwpG2Io4IokjCAKA3RyGm1BZm3uINtvVwFPJNQJkR3hGhkYhd3ItFtw7ON 2Up1jWDVm5X0bOkG2rVt4U9CTVNI/irOGZIjI0Lv1yV5D96eFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1vjqEAnwdHEEukOV8B+1TRBK1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBiYzQ4MmQtZDcxNy0z ZDNjLWE1NzUtYzdhMDhjZjE2OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWj3Fb7+TUKLF6Evfr4h+3yjQG9BLWGlZDHbShWgsf68goFVNx0 9zs39s87vt4A3G5VajxgOxn5to0nYBBLXKrtDG3fExb+Tpo2bhWepNzjWMR5oRO8 +hd+bgaNnYlXL3WdIg6wKoyjmh5GPjZTWWz8WGu822cIsvxdbNGYze4Mz5O6mJ0s abFl6+zO28DQ3cmIFHttSyWg755YRkTyxmkHA9br36B9Q/slg7hxGmtQlISpSBlz wsSLtZvlNpk0OLCXVflpG08X7wUq6XZhYXuryKxZgo8YaVOQtWHWjDAIe1O6hl2A 8vRsqClW/vv7sy25oRLzRKz1euWD+b9+pBU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:14:19 2025 by rpki-client