$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa86a026-80f6-3637-8b8c-25b4f35be7af.roa File: aa86a026-80f6-3637-8b8c-25b4f35be7af.roa (raw, json) Hash identifier: QGZ+FrWuLmZMiv1snehzjf1QyK4+4lLQBkUekzeAkUo= Subject key identifier: F1:F6:65:02:28:8D:43:09:6D:1D:71:F1:18:FE:AD:12:DB:04:24:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B80B782393BED66D4156BD400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa86a026-80f6-3637-8b8c-25b4f35be7af.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 2604:2d81:2800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:82:39:3b:ed:66:d4:15:6b:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=948655e9-c5ce-4ee5-b617-4e278a922978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:3a:ee:ed:a2:53:62:3d:32:29:0b:0e:c6: 8d:c4:6b:65:de:93:4e:62:e3:ea:fc:bf:3c:14:cc: 76:73:85:af:76:0b:4c:c3:5c:5c:7c:3c:bf:ea:bf: 32:cb:67:d2:d9:64:15:3a:1c:ee:e1:f8:db:fb:97: 9e:fa:f2:78:d7:ab:08:80:9a:61:05:b8:d0:0a:5c: f0:21:17:72:2e:80:43:4b:78:e5:03:f2:e1:3e:c0: 76:d9:93:43:93:fd:cc:e1:f3:87:53:cd:29:a1:2f: ba:32:82:a8:91:64:7d:b8:84:3a:aa:3a:81:37:5f: b0:51:e2:f7:df:c3:7b:a7:e5:33:42:6b:bc:49:b0: 03:8f:e8:7d:76:ae:44:30:b9:21:ef:27:bb:6a:df: 1a:98:58:36:88:91:00:da:b2:7d:f9:93:ac:32:66: 95:f5:59:ad:a6:6c:b6:da:a4:c3:dd:23:7b:9c:16: 3f:a6:23:54:a5:25:73:0a:f0:09:77:32:40:b9:38: db:22:17:0d:c1:41:93:a6:1f:e0:d5:e9:eb:d7:b4: 76:af:57:49:ce:c4:0a:0d:32:f9:79:07:d9:2f:a0: c7:81:ac:b2:d7:60:b4:ed:06:c8:db:3f:09:48:fd: 20:42:64:72:7e:3d:61:54:4f:84:4d:dc:a8:d0:dd: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F6:65:02:28:8D:43:09:6D:1D:71:F1:18:FE:AD:12:DB:04:24:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa86a026-80f6-3637-8b8c-25b4f35be7af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c6:b7:08:d8:78:08:f9:30:a4:91:54:01:bf:3b:10:c2:9b: 49:35:a5:c3:af:ed:6d:74:41:67:e5:ea:91:15:f4:00:6b:5f: 38:66:a3:e9:c5:2c:70:bc:be:cb:90:db:a1:3c:7e:62:11:60: 4c:96:6e:95:f9:13:84:e6:e3:5f:41:cf:09:51:a3:01:d3:68: fe:42:87:05:fb:f8:dc:2d:8f:77:bd:6f:0c:e3:7d:ca:a1:89: 15:8d:93:4e:57:ee:b8:c5:39:0f:78:6a:d7:64:46:5b:6a:7b: ba:f0:6f:fa:4d:36:5b:f4:01:83:5d:90:f1:1f:13:0d:d1:26: 0e:aa:dd:11:29:d4:e0:24:57:6b:5a:aa:8b:c6:bd:81:73:b2: 35:f0:ce:5f:ff:f6:30:da:12:94:7a:dc:10:d9:8e:5b:6a:10: cc:9a:8b:b8:b2:02:8a:43:a4:4f:74:99:38:e7:f1:21:87:cd: ab:9c:6e:c7:58:91:9c:11:f7:08:37:f8:b7:a9:cc:fe:f8:c8: c7:49:c5:42:df:6b:74:20:f9:b9:c3:e7:cc:9d:9c:3a:49:5b: 4e:06:58:f1:39:cc:48:75:ce:e8:7e:c9:64:1a:af:41:6f:16: 31:35:d8:0b:e5:f9:4d:ee:86:dd:aa:cb:ef:4a:a4:47:90:a1: 33:21:da:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt4I5O+1m1BVr1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OTQ4NjU1ZTktYzVjZS00ZWU1LWI2MTctNGUyNzhhOTIyOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/U67u2iU2I9MikLDsaNxGtl3pNOYuPq/L88 FMx2c4WvdgtMw1xcfDy/6r8yy2fS2WQVOhzu4fjb+5ee+vJ416sIgJphBbjQClzw IRdyLoBDS3jlA/LhPsB22ZNDk/3M4fOHU80poS+6MoKokWR9uIQ6qjqBN1+wUeL3 38N7p+UzQmu8SbADj+h9dq5EMLkh7ye7at8amFg2iJEA2rJ9+ZOsMmaV9Vmtpmy2 2qTD3SN7nBY/piNUpSVzCvAJdzJAuTjbIhcNwUGTph/g1enr17R2r1dJzsQKDTL5 eQfZL6DHgayy12C07QbI2z8JSP0gQmRyfj1hVE+ETdyo0N0WFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPH2ZQIojUMJbR1x8Rj+rRLbBCTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE4NmEwMjYtODBmNi0z NjM3LThiOGMtMjViNGYzNWJlN2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPGtwjYeAj5MKSRVAG/OxDCm0k1pcOv7W10QWfl6pEV9ABrXzhm o+nFLHC8vsuQ26E8fmIRYEyWbpX5E4Tm419BzwlRowHTaP5ChwX7+Nwtj3e9bwzj fcqhiRWNk05X7rjFOQ94atdkRltqe7rwb/pNNlv0AYNdkPEfEw3RJg6q3REp1OAk V2taqovGvYFzsjXwzl//9jDaEpR63BDZjltqEMyai7iyAopDpE90mTjn8SGHzauc bsdYkZwR9wg3+LepzP74yMdJxULfa3Qg+bnD58ydnDpJW04GWPE5zEh1zuh+yWQa r0FvFjE12Avl+U3uht2qy+9KpEeQoTMh2pY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:13:10 2025 by rpki-client