$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa File: 2c5c95e4-0541-3987-b7e1-993bb9e37090.roa (raw, json) Hash identifier: 9VTcv1QYmK3uPI9d2/FqWYVyZXeX2l8FV6VBE62TKQg= Subject key identifier: 33:C9:52:01:18:64:83:B1:2F:37:82:6F:02:64:92:C4:AC:05:28:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E5CCCD3BA916B8320D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:7580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e5:cc:cd:3b:a9:16:b8:32:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b7a7943c-8d01-42ba-8f5a-ff6597d47143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:5a:1c:66:96:81:ec:53:23:57:bb:23:fa: c4:70:f4:4a:d7:e9:29:bf:a0:88:5e:3a:27:ac:83: 84:45:e4:b5:49:8e:59:eb:c4:48:66:13:48:24:f2: 45:b1:13:bf:f1:94:bb:9c:2a:fb:f9:46:c8:eb:4a: 71:13:15:e3:25:09:ee:20:c8:0c:df:1a:aa:42:34: 10:12:94:fb:dc:91:12:37:1d:d7:c0:f7:20:df:bf: 3e:98:7d:38:2e:fa:65:46:1c:2c:90:49:cc:8c:98: b7:fe:ea:ae:3e:46:2a:7b:72:79:35:e2:b8:a5:f0: 98:19:ae:47:b6:69:31:18:58:61:d1:41:b3:f4:7d: 03:2d:b5:35:25:a7:a3:12:00:8b:64:5d:22:ac:be: d5:ac:45:49:7f:a3:94:04:a2:b6:a1:8c:c9:68:83: 8e:55:22:8a:c7:20:e4:42:69:96:ea:85:dd:40:f0: 20:9e:96:20:c6:44:65:62:a0:a7:5f:72:c2:b0:65: 93:7e:2e:58:db:8b:f0:77:99:55:18:d5:c8:15:8c: e7:4e:82:18:a1:05:63:c3:2d:9f:a2:db:10:9b:19: 46:f1:26:a0:9f:0e:42:41:c6:6b:f9:4e:17:95:ae: dc:ec:54:9a:8c:2e:cf:33:cb:8a:7e:f9:ba:70:77: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:52:01:18:64:83:B1:2F:37:82:6F:02:64:92:C4:AC:05:28:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:31:11:22:fa:8f:e9:cb:70:d7:48:32:e6:5f:b1:5e:18:6d: 04:d4:7d:cc:ab:d9:28:f3:10:aa:88:ec:3b:ed:11:00:2f:81: df:f3:e3:82:f3:f8:de:2f:91:1d:be:5b:7b:3b:95:da:57:d0: 39:9b:8a:40:1d:ad:55:b4:f6:76:b5:fd:38:5b:de:79:89:06: 2a:85:eb:70:57:3b:a7:37:f9:a2:7b:1a:fd:32:b7:9b:2a:f1: 7b:99:f2:1e:c5:48:73:28:b4:8d:58:f5:44:a3:af:9e:7c:a6: 07:83:c7:ca:44:32:76:6b:44:4c:00:b6:76:0e:60:28:93:ae: 3f:6d:b5:36:3b:83:67:d3:c0:b3:0f:89:96:95:52:fd:f0:c6: 89:93:b9:09:4b:b9:ef:1d:d2:e2:04:91:d1:47:5f:c0:0f:8b: 9a:fa:cc:50:46:60:fb:e4:5a:13:eb:1f:82:d1:56:f7:a9:fc: 77:4f:21:ff:a0:a2:6d:b2:63:3c:49:2f:2f:45:ba:43:65:c0: a2:8f:97:81:9d:82:59:4a:91:e8:2a:e4:82:4e:35:d8:a5:2a: 52:9b:21:b3:e3:40:70:5f:92:24:4d:3f:b5:ad:f5:07:73:cc: 9a:ce:72:a2:13:8b:62:1c:c5:a2:bc:bc:55:78:5d:12:2d:74: 78:71:1c:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEOXMzTupFrgyDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjdhNzk0M2MtOGQwMS00MmJhLThmNWEtZmY2NTk3ZDQ3MTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUNaHGaWgexTI1e7I/rEcPRK1+kpv6CIXjon rIOEReS1SY5Z68RIZhNIJPJFsRO/8ZS7nCr7+UbI60pxExXjJQnuIMgM3xqqQjQQ EpT73JESNx3XwPcg378+mH04LvplRhwskEnMjJi3/uquPkYqe3J5NeK4pfCYGa5H tmkxGFhh0UGz9H0DLbU1JaejEgCLZF0irL7VrEVJf6OUBKK2oYzJaIOOVSKKxyDk QmmW6oXdQPAgnpYgxkRlYqCnX3LCsGWTfi5Y24vwd5lVGNXIFYznToIYoQVjwy2f otsQmxlG8Sagnw5CQcZr+U4Xla7c7FSajC7PM8uKfvm6cHcGGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPJUgEYZIOxLzeCbwJkksSsBSjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmM1Yzk1ZTQtMDU0MS0z OTg3LWI3ZTEtOTkzYmI5ZTM3MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYxESL6j+nLcNdIMuZfsV4YbQTUfcyr2SjzEKqI7DvtEQAvgd/z 44Lz+N4vkR2+W3s7ldpX0DmbikAdrVW09na1/Thb3nmJBiqF63BXO6c3+aJ7Gv0y t5sq8XuZ8h7FSHMotI1Y9USjr558pgeDx8pEMnZrREwAtnYOYCiTrj9ttTY7g2fT wLMPiZaVUv3wxomTuQlLue8d0uIEkdFHX8APi5r6zFBGYPvkWhPrH4LRVvep/HdP If+gom2yYzxJLy9FukNlwKKPl4GdgllKkegq5IJONdilKlKbIbPjQHBfkiRNP7Wt 9QdzzJrOcqITi2IcxaK8vFV4XRItdHhxHKM= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:19 2025 by rpki-client