$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa File: 2908e372-28dc-3583-8025-0be1feb02253.roa (raw, json) Hash identifier: 8YQRXTkJL/IAQBgk9E/gPGSGVS2EmgmhMWht4C9+Ens= Subject key identifier: 0A:9C:05:D3:85:F0:7B:C5:37:DC:E2:78:06:6F:83:93:BE:99:2A:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814664E53BF84D7D9260CA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2d80:e500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:64:e5:3b:f8:4d:7d:92:60:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=6a8d43ca-5ed5-4241-a510-cb05d7949df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:31:ae:e1:28:c5:d7:f1:ef:47:7c:7d:f3: 77:d3:7a:b7:20:88:1d:1f:1e:a3:40:44:dc:2f:7e: fd:8f:79:fb:54:0a:e8:25:98:51:84:2c:19:09:3c: c4:40:e4:a6:81:81:c3:c4:69:72:39:8c:05:c4:d6: b0:db:00:72:47:d3:dd:0f:d4:bf:66:e8:6b:bc:77: 8b:57:7b:ae:c2:dd:c4:1e:b1:24:a4:2b:ed:a8:e8: fb:85:51:eb:43:51:6f:cf:ea:6b:c6:1e:5c:fd:82: ef:d2:6a:f6:e1:21:67:d8:17:00:d2:16:73:4e:c7: 1c:bc:73:f4:0a:3d:f8:f5:2c:77:f3:7d:f4:64:b4: 5c:2b:76:ef:2d:5a:19:22:95:c0:19:fd:c1:d2:4c: 8b:b3:e6:ec:31:f3:cb:17:a6:31:f4:f4:2b:2c:77: 05:a1:7f:8a:83:45:26:b2:31:7b:6f:6a:98:af:8d: ca:7d:c0:a4:f7:f5:ed:c3:60:06:34:a9:79:a8:3e: 8e:8e:1a:38:ec:f3:65:4d:98:1f:01:7d:f0:f6:e0: e9:14:07:cf:b5:fe:da:66:af:c5:f8:9c:b0:00:af: 72:03:68:3e:51:4d:e1:49:ee:13:9c:6f:ae:44:5e: c7:a4:d8:50:6c:13:b2:37:35:a7:6f:b0:49:da:e6: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:05:D3:85:F0:7B:C5:37:DC:E2:78:06:6F:83:93:BE:99:2A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2b:21:10:26:09:63:60:26:35:b9:bc:7e:4e:76:9b:4c:28: fe:f6:c8:f8:61:e9:d8:83:64:90:fa:46:d7:23:7e:05:b0:9d: df:a2:15:6e:f9:1d:02:2d:d5:49:4a:57:e3:69:15:72:b5:ec: c1:4e:bf:a3:cc:f7:64:11:b0:14:d7:1d:51:22:64:c3:c8:68: 04:25:78:c9:fe:3c:1f:42:d9:ed:8c:0f:b4:a0:47:5c:50:e9: d8:19:49:3d:c9:a0:16:31:8d:fe:92:97:be:8f:b8:ea:9b:5a: bd:69:99:bd:57:73:fa:9c:bc:cb:f9:2f:44:f5:74:64:61:5d: fb:2b:6d:b2:a5:e8:71:92:b1:dc:18:a5:94:e9:d3:1b:6c:a0: b2:90:04:a8:50:64:53:b7:82:1c:84:bf:55:b3:10:df:98:b1: 57:2b:e1:e8:55:80:ed:cc:4e:76:5b:f3:6b:f8:a2:ec:55:0a: 4a:38:91:9d:9a:08:f0:52:1e:e9:3b:f8:f6:23:3e:11:f4:2b: 83:ac:1d:b2:b3:e1:7a:9e:57:d8:17:49:97:fb:88:c6:22:25: 6c:d8:41:6c:a8:09:9a:05:a7:ed:11:89:84:88:78:43:3b:b5: fe:71:69:55:f2:45:eb:67:d1:d6:6b:19:fd:96:d1:b3:58:47: c9:2b:20:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRmTlO/hNfZJgygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NmE4ZDQzY2EtNWVkNS00MjQxLWE1MTAtY2IwNWQ3OTQ5ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0xruEoxdfx70d8ffN303q3IIgdHx6jQETc L379j3n7VAroJZhRhCwZCTzEQOSmgYHDxGlyOYwFxNaw2wByR9PdD9S/ZuhrvHeL V3uuwt3EHrEkpCvtqOj7hVHrQ1Fvz+prxh5c/YLv0mr24SFn2BcA0hZzTsccvHP0 Cj349Sx38330ZLRcK3bvLVoZIpXAGf3B0kyLs+bsMfPLF6Yx9PQrLHcFoX+Kg0Um sjF7b2qYr43KfcCk9/Xtw2AGNKl5qD6Ojho47PNlTZgfAX3w9uDpFAfPtf7aZq/F +JywAK9yA2g+UU3hSe4TnG+uRF7HpNhQbBOyNzWnb7BJ2uZw/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqcBdOF8HvFN9zieAZvg5O+mSpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjkwOGUzNzItMjhkYy0z NTgzLTgwMjUtMGJlMWZlYjAyMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACErIRAmCWNgJjW5vH5OdptMKP72yPhh6diDZJD6RtcjfgWwnd+i FW75HQIt1UlKV+NpFXK17MFOv6PM92QRsBTXHVEiZMPIaAQleMn+PB9C2e2MD7Sg R1xQ6dgZST3JoBYxjf6Sl76PuOqbWr1pmb1Xc/qcvMv5L0T1dGRhXfsrbbKl6HGS sdwYpZTp0xtsoLKQBKhQZFO3ghyEv1WzEN+YsVcr4ehVgO3MTnZb82v4ouxVCko4 kZ2aCPBSHuk7+PYjPhH0K4OsHbKz4XqeV9gXSZf7iMYiJWzYQWyoCZoFp+0RiYSI eEM7tf5xaVXyRetn0dZrGf2W0bNYR8krIEs= -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:00 2025 by rpki-client