$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37636e21-da48-3e3d-9069-7f9d1a726583.roa File: 37636e21-da48-3e3d-9069-7f9d1a726583.roa (raw, json) Hash identifier: ZLn+EBOCaFu/jKLI6O1nCoInlWHN1Ffphf28YsZboIk= Subject key identifier: 1D:94:4A:A5:43:EC:3B:E8:2F:6A:0E:37:39:A7:34:F2:73:86:6A:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81463AE0E1EE330BD7B19680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37636e21-da48-3e3d-9069-7f9d1a726583.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2d80:a000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:3a:e0:e1:ee:33:0b:d7:b1:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d46d917f-346f-46af-8aae-203355fe2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:c7:bb:3f:2e:b9:33:7f:ea:e1:04:67:6e: d5:29:f8:72:fa:da:7c:bf:15:9c:4e:25:b2:07:d1: 42:46:9d:0d:df:c2:1f:29:41:29:a2:71:4d:f1:70: 84:7b:a0:44:ee:e4:17:eb:63:2b:fe:f9:4d:e9:58: b5:7d:d8:b9:86:c7:61:b6:6b:08:1a:47:1a:fb:8a: 49:1e:00:7f:48:04:b9:cc:b3:2d:ea:79:b7:a8:73: 43:94:46:80:dc:a3:5c:90:08:18:08:5b:34:2a:cd: d2:2b:b6:61:0b:8d:e9:6f:3e:1c:d6:93:71:42:73: 20:53:ab:e5:a5:4b:e6:ec:ce:d3:46:05:f1:83:ad: 6d:88:45:95:77:6f:80:bf:1e:1a:ef:35:92:03:34: 9b:6e:98:ba:a6:48:41:aa:77:ca:7d:23:12:16:b8: b6:a3:0f:00:92:95:ab:57:65:83:ea:c2:b7:06:d0: f3:db:89:2b:d0:7d:15:9c:7a:47:4f:14:f6:b8:d8: f2:28:55:a5:1f:5d:69:fb:fa:b1:57:d7:b1:40:ab: 87:76:ec:2e:12:5c:7e:d8:9e:94:95:99:cd:97:05: 53:d1:e7:e2:b4:ad:49:7a:53:36:5f:09:7e:62:63: 6b:99:a6:84:57:86:b9:3a:82:d1:4b:90:72:73:e9: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:94:4A:A5:43:EC:3B:E8:2F:6A:0E:37:39:A7:34:F2:73:86:6A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37636e21-da48-3e3d-9069-7f9d1a726583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:52:76:7d:af:1d:08:f5:d4:60:99:76:82:71:b3:76:92: 49:51:86:48:7b:b4:09:df:6b:f9:5e:89:3b:48:fa:0e:78:5e: 69:91:58:75:5b:fa:25:21:1e:a1:05:d5:85:96:c3:96:b2:b3: 9c:f8:40:6e:ab:26:d1:53:53:6e:bc:88:3b:13:83:91:68:1b: b8:e7:25:b2:bd:fb:01:10:97:ba:77:e3:d8:a7:1c:65:78:4b: ee:90:df:f2:5e:8c:f8:b6:f7:bf:f0:6a:40:4a:8b:64:d4:aa: 63:55:81:b2:f2:9d:1a:22:82:ae:e6:d0:ef:4b:92:b3:1b:7f: 13:a0:61:17:55:dd:44:d3:e5:b5:a4:56:98:71:2d:5e:6c:a9: 80:31:72:1e:78:6a:4b:f4:28:d7:05:39:4e:86:24:3c:32:6e: 91:ab:17:92:6b:1c:10:0c:29:01:3f:cf:c6:b2:86:b5:5f:54: 99:ef:f4:22:11:3c:00:20:5d:1b:1b:af:e8:87:80:ca:43:7b: 21:bd:cf:19:f4:06:53:91:2d:98:22:d1:d5:f4:1d:c2:c5:b0: 2e:f3:29:c1:05:4d:75:30:9f:37:59:5d:6d:00:69:f9:4d:dd: ad:69:90:92:9c:a4:e1:83:bb:4e:65:13:0f:d0:7c:4f:fe:44: 00:e9:b2:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjrg4e4zC9exloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDQ2ZDkxN2YtMzQ2Zi00NmFmLThhYWUtMjAzMzU1ZmUyNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLvHuz8uuTN/6uEEZ27VKfhy+tp8vxWcTiWy B9FCRp0N38IfKUEponFN8XCEe6BE7uQX62Mr/vlN6Vi1fdi5hsdhtmsIGkca+4pJ HgB/SAS5zLMt6nm3qHNDlEaA3KNckAgYCFs0Ks3SK7ZhC43pbz4c1pNxQnMgU6vl pUvm7M7TRgXxg61tiEWVd2+Avx4a7zWSAzSbbpi6pkhBqnfKfSMSFri2ow8AkpWr V2WD6sK3BtDz24kr0H0VnHpHTxT2uNjyKFWlH11p+/qxV9exQKuHduwuElx+2J6U lZnNlwVT0efitK1JelM2Xwl+YmNrmaaEV4a5OoLRS5Byc+loBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2USqVD7DvoL2oONzmnNPJzhmq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzc2MzZlMjEtZGE0OC0z ZTNkLTkwNjktN2Y5ZDFhNzI2NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUQUnZ9rx0I9dRgmXaCcbN2kklRhkh7tAnfa/leiTtI+g54XmmR WHVb+iUhHqEF1YWWw5ays5z4QG6rJtFTU268iDsTg5FoG7jnJbK9+wEQl7p349in HGV4S+6Q3/JejPi297/wakBKi2TUqmNVgbLynRoigq7m0O9LkrMbfxOgYRdV3UTT 5bWkVphxLV5sqYAxch54akv0KNcFOU6GJDwybpGrF5JrHBAMKQE/z8ayhrVfVJnv 9CIRPAAgXRsbr+iHgMpDeyG9zxn0BlORLZgi0dX0HcLFsC7zKcEFTXUwnzdZXW0A aflN3a1pkJKcpOGDu05lEw/QfE/+RADpsr8= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:24 2025 by rpki-client