$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa File: 0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa (raw, json) Hash identifier: DQiuo6LS1uA1ad6NowAQFMVbYJPYNhpMhokGQC5qZwQ= Subject key identifier: 39:A0:32:FB:84:7F:9B:47:D4:6E:25:EC:66:B0:73:BD:F9:F4:85:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410DF8FCDF48D4031DB3A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:bf00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:df:8f:cd:f4:8d:40:31:db:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6f4291a3-7383-407a-b127-934af880a8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:7b:3e:39:73:65:d1:19:a0:65:41:f7:f8: 66:3e:30:99:08:e7:84:f7:41:bd:7e:ec:23:19:b1: 75:c1:6c:9f:b8:a9:2f:23:a5:52:ca:7b:58:43:ec: 92:36:19:4f:2c:0d:93:fe:c1:8e:7a:06:9d:ab:85: 10:7d:a4:e7:ff:e6:ce:7d:49:db:e8:f0:1b:95:3c: 98:e5:37:65:67:de:ea:f0:8a:a7:6b:a0:f3:0d:33: 99:95:28:e1:92:c1:f4:04:fe:62:36:bf:6c:41:65: 1e:cd:37:ab:64:f3:2a:b7:86:be:79:4d:8b:40:66: 5e:86:57:0a:eb:64:49:a8:e5:a8:cb:dd:4a:05:3d: 8d:82:eb:19:3c:1e:f2:c2:e6:de:f1:35:36:db:1a: 40:09:ac:58:74:13:0f:6b:4c:93:56:9b:7f:45:8f: ce:41:bd:e8:17:c3:45:2d:59:ad:98:27:96:d1:b3: 26:50:22:62:dc:d0:10:a6:aa:08:8e:73:79:2b:af: 02:7e:eb:41:e5:df:a8:aa:1f:0f:d0:2f:ad:00:cd: 95:c1:85:af:45:d4:01:9b:81:15:ba:bb:0a:a2:6f: fe:03:58:23:88:ee:53:4a:e4:6b:08:79:64:ca:88: f1:7d:ac:ef:db:28:76:38:e0:f9:b9:cd:7b:c5:48: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:32:FB:84:7F:9B:47:D4:6E:25:EC:66:B0:73:BD:F9:F4:85:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:bf00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6d:07:fd:0b:e1:92:ef:29:7b:b5:22:1b:0b:99:f3:9e:8b: 4b:ad:5f:c4:62:79:da:e9:87:b1:d3:cc:7f:62:e0:58:1d:73: 2e:31:22:0e:a6:0e:5c:44:8e:a4:69:59:1d:66:e4:aa:f9:fa: d0:33:3f:4d:23:55:da:f8:90:1f:36:88:4e:4a:91:b4:6e:7e: a6:1d:55:95:9b:e0:49:04:76:a7:8d:33:5d:97:26:05:77:85: 88:50:93:16:fd:27:c4:fc:72:70:da:9c:da:3a:03:51:cc:4b: ce:93:00:00:87:7d:30:3a:f1:46:d6:db:77:08:10:2c:06:a6: e0:fd:af:72:b9:e7:00:de:e3:dd:c2:c0:f9:78:f8:66:28:e2: 2d:ac:44:71:69:21:47:9c:73:6e:07:ab:d8:bd:a8:21:c5:3a: 67:e5:e5:c1:9e:b7:5a:58:01:09:0a:28:87:49:1d:29:3f:7b: d7:66:72:2a:bb:c8:62:37:bb:6a:e1:64:63:1e:10:01:e6:03: 98:92:95:0b:ac:85:ac:73:b0:b5:12:3b:d8:ed:9a:e0:ed:4d: 8b:1e:d0:d2:b1:23:a4:6b:8c:ca:c0:21:16:71:95:54:06:f3: 53:6a:8f:5b:01:2d:f3:b3:31:5d:72:ae:89:0e:d7:84:44:c3: cd:45:3c:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEN+PzfSNQDHbOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmY0MjkxYTMtNzM4My00MDdhLWIxMjctOTM0YWY4ODBhOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAx7PjlzZdEZoGVB9/hmPjCZCOeE90G9fuwj GbF1wWyfuKkvI6VSyntYQ+ySNhlPLA2T/sGOegadq4UQfaTn/+bOfUnb6PAblTyY 5TdlZ97q8Iqna6DzDTOZlSjhksH0BP5iNr9sQWUezTerZPMqt4a+eU2LQGZehlcK 62RJqOWoy91KBT2NgusZPB7ywube8TU22xpACaxYdBMPa0yTVpt/RY/OQb3oF8NF LVmtmCeW0bMmUCJi3NAQpqoIjnN5K68CfutB5d+oqh8P0C+tAM2VwYWvRdQBm4EV ursKom/+A1gjiO5TSuRrCHlkyojxfazv2yh2OOD5uc17xUgIqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmgMvuEf5tH1G4l7Gawc7359IVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFkOGVhNjQtOGRjMy0z OWRhLThmMzgtYzk5YTlmZjY1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgL8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdtB/0L4ZLvKXu1IhsLmfOei0utX8Riedrph7HTzH9i4Fgdcy4x Ig6mDlxEjqRpWR1m5Kr5+tAzP00jVdr4kB82iE5KkbRufqYdVZWb4EkEdqeNM12X JgV3hYhQkxb9J8T8cnDanNo6A1HMS86TAACHfTA68UbW23cIECwGpuD9r3K55wDe 493CwPl4+GYo4i2sRHFpIUecc24Hq9i9qCHFOmfl5cGet1pYAQkKKIdJHSk/e9dm ciq7yGI3u2rhZGMeEAHmA5iSlQushaxzsLUSO9jtmuDtTYse0NKxI6RrjMrAIRZx lVQG81Nqj1sBLfOzMV1yrokO14REw81FPCo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:01 2025 by rpki-client