$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa File: 108d38b5-d516-319e-93f7-5d3c6a4ba434.roa (raw, json) Hash identifier: nx3YXb3YuQ72Yd5YKBfBwr+uYYnIlh//UYmyp83g+Ok= Subject key identifier: 7A:FD:09:DD:A3:B9:A5:72:31:EA:A9:EF:76:AD:88:08:AE:E9:22:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81466593C80E3D29F417A0C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2d80:b400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:65:93:c8:0e:3d:29:f4:17:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d5f75b9d-d039-4293-bd5b-67824de593d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:62:9e:3d:aa:4c:91:b6:92:c7:15:24:18: 65:54:0b:99:b3:6f:4e:1b:8f:32:39:11:e8:c7:0e: 32:31:9e:34:24:2f:a8:6f:dc:c9:12:a3:78:62:8f: a4:23:17:66:8c:83:0e:e2:9e:63:59:5c:ab:32:39: ad:77:31:3b:49:8e:46:30:c0:61:2d:d7:b1:30:57: 48:a9:29:b1:ae:af:41:cd:2f:d2:e5:3c:cb:31:03: 2e:fd:e3:c5:22:2c:4f:16:7d:30:f3:d6:23:f2:01: 31:ef:48:93:61:f7:8e:0d:5e:2c:17:0a:c3:a5:31: ea:94:62:20:36:98:cb:45:ce:d3:27:29:21:9a:ad: a5:6a:c1:24:60:94:ec:eb:4f:d4:99:33:94:93:fc: d8:9e:b3:ad:94:fc:67:28:35:d7:f6:10:9c:11:b2: 8a:f0:3e:58:65:4c:23:7a:99:51:24:c1:c2:b0:ca: 5f:4c:ca:90:9f:6d:e7:17:0e:26:ac:af:23:21:4a: d1:98:73:08:51:ff:39:55:1b:fb:6b:6a:b3:b7:d8: 2f:af:e6:fa:b8:47:8b:21:a2:20:56:1f:de:89:96: ef:a9:14:5f:13:66:d3:5a:f3:89:3f:08:d4:1f:dd: 83:06:ab:f0:7c:f4:27:7a:13:42:41:31:bb:6c:86: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FD:09:DD:A3:B9:A5:72:31:EA:A9:EF:76:AD:88:08:AE:E9:22:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b2:b1:7c:8a:c3:23:1d:58:77:22:4d:ad:57:bf:34:0a:e2: d5:fd:2b:18:7b:1e:b8:6f:ef:2b:5b:5b:be:eb:f2:f9:06:53: 2d:56:30:97:c5:b8:9c:2f:01:6c:98:ce:be:d2:85:21:21:9e: 12:92:20:6e:ef:fb:e3:99:38:9f:5d:97:55:be:a1:b1:d8:96: ac:be:8d:76:21:d0:68:1a:3d:b0:93:e7:59:e2:e8:6f:d1:7c: 32:e6:79:ad:8d:e0:46:f8:fc:3a:5c:3e:2c:97:da:1c:79:4e: 43:19:56:bd:d2:f5:b2:42:5e:0d:9a:c6:09:94:a2:fd:00:87: 75:6f:19:7f:e2:be:c4:85:2e:0a:3a:7a:4c:d4:ba:a9:0d:14: 83:ec:b2:8d:50:e9:76:3f:b7:42:08:03:43:06:1a:de:50:46: ac:90:d0:26:b9:de:0d:dd:5e:c9:48:2a:55:54:9b:4a:f3:7e: 4c:30:79:aa:83:c2:d2:c0:79:f5:de:7b:f6:d3:2a:6d:58:68: da:79:75:e3:8b:f7:15:a6:bb:50:5f:8d:9c:72:01:93:04:64: 7b:ad:14:be:98:3f:94:aa:e7:ca:ff:10:f1:15:7b:26:aa:4a: c3:5a:a7:6a:4c:62:66:4a:fb:cc:b5:34:17:1f:e0:dc:eb:47: 6c:1d:4c:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRmWTyA49KfQXoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDVmNzViOWQtZDAzOS00MjkzLWJkNWItNjc4MjRkZTU5M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KBinj2qTJG2kscVJBhlVAuZs29OG48yORHo xw4yMZ40JC+ob9zJEqN4Yo+kIxdmjIMO4p5jWVyrMjmtdzE7SY5GMMBhLdexMFdI qSmxrq9BzS/S5TzLMQMu/ePFIixPFn0w89Yj8gEx70iTYfeODV4sFwrDpTHqlGIg NpjLRc7TJykhmq2lasEkYJTs60/UmTOUk/zYnrOtlPxnKDXX9hCcEbKK8D5YZUwj eplRJMHCsMpfTMqQn23nFw4mrK8jIUrRmHMIUf85VRv7a2qzt9gvr+b6uEeLIaIg Vh/eiZbvqRRfE2bTWvOJPwjUH92DBqvwfPQnehNCQTG7bIbKLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHr9Cd2juaVyMeqp73atiAiu6SJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTA4ZDM4YjUtZDUxNi0z MTllLTkzZjctNWQzYzZhNGJhNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICysXyKwyMdWHciTa1XvzQK4tX9Kxh7Hrhv7ytbW77r8vkGUy1W MJfFuJwvAWyYzr7ShSEhnhKSIG7v++OZOJ9dl1W+obHYlqy+jXYh0GgaPbCT51ni 6G/RfDLmea2N4Eb4/DpcPiyX2hx5TkMZVr3S9bJCXg2axgmUov0Ah3VvGX/ivsSF Lgo6ekzUuqkNFIPsso1Q6XY/t0IIA0MGGt5QRqyQ0Ca53g3dXslIKlVUm0rzfkww eaqDwtLAefXee/bTKm1YaNp5deOL9xWmu1BfjZxyAZMEZHutFL6YP5Sq58r/EPEV eyaqSsNap2pMYmZK+8y1NBcf4NzrR2wdTKI= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:43 2025 by rpki-client