$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa File: b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa (raw, json) Hash identifier: cwhjBr8pgU7B8STz90of6Ek+/DNGKLeLrrSdhyGPDXw= Subject key identifier: 2A:96:8B:81:A1:2C:F8:DD:46:52:C9:19:29:EE:35:13:72:9A:3C:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B7DECC903B51C2770B9547EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 30036 IP address blocks: 2604:2d81:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c9:03:b5:1c:27:70:b9:54:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=049d3ece-8e9e-455c-a4cd-c19b691445be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:e0:46:0b:c9:25:7a:56:f2:c3:de:10:6d: 95:a8:e6:af:12:45:64:37:91:8e:b6:03:48:d2:b3: 0b:1c:36:cb:9b:33:77:71:56:a4:df:3c:bb:52:01: 6b:b8:3e:01:c3:10:a1:17:f8:5a:85:08:dd:7d:4a: fc:ef:09:2f:fb:8a:8b:06:d9:8e:79:a2:e0:4c:0e: 70:e4:5b:63:fc:0a:7d:5b:b8:2a:67:cd:ec:35:8a: c8:a7:59:1f:ee:93:c8:4d:b3:cd:d8:56:7c:e7:19: 2f:2d:4a:79:87:37:b1:4f:78:0d:b4:a8:e9:a2:5f: c6:7b:ce:bf:30:c2:27:68:6d:18:06:16:03:55:c0: 56:f8:3e:da:b1:73:87:4c:82:a3:12:f1:54:a7:f9: 6f:ce:01:24:66:82:40:62:0b:9e:77:02:08:00:61: b8:1e:75:1a:f4:a6:28:5b:6a:28:54:7e:ac:14:62: fd:72:c2:ef:8b:d5:6b:66:b1:25:63:77:b8:a0:21: 34:bf:14:b2:7e:73:25:45:b6:23:4d:46:d3:e4:41: 95:43:d7:bc:0d:ce:b4:18:01:54:33:45:72:07:90: d3:60:a7:7e:b8:7c:74:47:0c:e7:a4:df:a0:e0:d5: 8d:d2:dd:cd:a1:a6:a3:ce:a6:b6:08:f7:e6:1e:9c: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:8B:81:A1:2C:F8:DD:46:52:C9:19:29:EE:35:13:72:9A:3C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b0138c-d1c8-38b6-a2b1-8bfa80923e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8c:67:a0:e2:92:09:f7:f8:1f:96:01:af:fa:0b:7f:6a:72: c0:f8:bd:47:c7:56:1a:f5:d6:75:04:31:04:c2:94:52:20:27: 37:f2:14:8c:b9:2b:ff:4c:8c:b9:90:fc:d6:d7:46:54:4d:4c: 2a:ab:65:d8:07:22:31:a9:f9:0a:08:cd:be:e4:31:c3:c9:b2: 9e:c8:51:97:c0:2a:41:b6:1e:91:cd:9f:dd:13:a5:63:68:d8: 9e:46:ed:16:74:bd:d5:60:b6:6e:5f:9b:b1:4a:46:5f:d3:07: 75:8f:25:61:e9:0c:f7:2a:10:6d:3d:f7:87:bb:e8:c4:66:35: 60:e4:12:27:7e:62:29:75:c5:01:d5:b2:b5:32:19:2f:16:bd: 62:a6:a4:d8:4a:b1:02:3a:dc:6d:de:a1:87:90:be:3d:f7:1d: 90:32:64:b7:6a:39:d3:fc:67:a5:54:83:7f:36:d0:b1:8e:38: 63:f5:d2:f2:28:51:de:aa:89:13:b6:0a:1a:5d:f5:9e:7e:52: 7a:ce:9a:78:15:f9:d1:2f:5e:49:25:57:b6:08:b8:bb:38:df: 2b:9c:0b:59:4e:f9:ab:7e:6e:39:99:cc:92:45:34:51:35:92: 5d:a3:3e:85:41:7c:d0:23:9c:1e:90:2c:6f:cd:65:c8:9b:14: 9a:c0:9a:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt97MkDtRwncLlUfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MDQ5ZDNlY2UtOGU5ZS00NTVjLWE0Y2QtYzE5YjY5MTQ0NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge3gRgvJJXpW8sPeEG2VqOavEkVkN5GOtgNI 0rMLHDbLmzN3cVak3zy7UgFruD4BwxChF/hahQjdfUr87wkv+4qLBtmOeaLgTA5w 5Ftj/Ap9W7gqZ83sNYrIp1kf7pPITbPN2FZ85xkvLUp5hzexT3gNtKjpol/Ge86/ MMInaG0YBhYDVcBW+D7asXOHTIKjEvFUp/lvzgEkZoJAYguedwIIAGG4HnUa9KYo W2ooVH6sFGL9csLvi9VrZrElY3e4oCE0vxSyfnMlRbYjTUbT5EGVQ9e8Dc60GAFU M0VyB5DTYKd+uHx0RwznpN+g4NWN0t3Noaajzqa2CPfmHpyazQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCqWi4GhLPjdRlLJGSnuNRNymjy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJiMDEzOGMtZDFjOC0z OGI2LWEyYjEtOGJmYTgwOTIzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGIxnoOKSCff4H5YBr/oLf2pywPi9R8dWGvXWdQQxBMKUUiAnN/IU jLkr/0yMuZD81tdGVE1MKqtl2AciMan5CgjNvuQxw8mynshRl8AqQbYekc2f3ROl Y2jYnkbtFnS91WC2bl+bsUpGX9MHdY8lYekM9yoQbT33h7voxGY1YOQSJ35iKXXF AdWytTIZLxa9Yqak2EqxAjrcbd6hh5C+PfcdkDJkt2o50/xnpVSDfzbQsY44Y/XS 8ihR3qqJE7YKGl31nn5Ses6aeBX50S9eSSVXtgi4uzjfK5wLWU75q35uOZnMkkU0 UTWSXaM+hUF80COcHpAsb81lyJsUmsCa/Q== -----END CERTIFICATE-----Generated at Mon Oct 20 05:13:45 2025 by rpki-client