$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa File: 42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa (raw, json) Hash identifier: TkMqOL1/m8Y8k5WXkHHIgkFHvjsiy90Wi2ArL3sjUYU= Subject key identifier: 7A:64:7B:34:C2:08:17:7C:92:D3:B6:50:C4:99:76:53:0D:39:97:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841254F8455E0BA0D1244E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:b480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:54:f8:45:5e:0b:a0:d1:24:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5d0390b5-09e1-44d9-9967-6fe6f35b3d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:28:49:4f:80:0b:63:fb:97:c9:99:b5:7a: 96:0b:db:1c:b3:eb:c1:b7:0e:bc:da:b9:43:44:67: ba:8e:c0:1f:f4:2d:85:77:18:cc:61:1a:c2:86:3b: b1:e0:c3:ca:71:3b:d6:88:43:e7:c0:f5:19:2b:1d: e4:5a:6e:c6:85:ad:08:2a:e0:f2:92:c7:5b:b5:e2: d5:9f:0c:2b:82:d4:0c:cf:b9:62:e3:fc:1c:8a:c5: fc:41:5d:f1:ea:31:b1:fa:56:28:19:58:7c:b9:49: eb:b7:e2:e9:cb:13:5d:97:e2:66:16:11:81:16:b0: d3:e5:35:41:aa:74:70:97:33:d0:e0:88:fd:34:a4: 60:26:e5:29:06:6c:3b:c2:53:42:8a:d4:da:82:e7: 67:2b:4e:9c:ef:1e:73:2b:eb:0d:d8:68:22:be:21: 53:e2:c5:6b:4a:9d:b0:8b:fc:2c:ad:2e:62:42:d4: 72:55:92:48:1a:4d:78:b5:d7:17:56:27:46:e8:7f: e5:4d:fb:45:fe:40:72:9d:d9:25:22:dc:53:1d:45: e8:6f:7d:ae:de:93:c6:1c:01:33:75:5c:c7:ff:a1: 0b:df:8b:4d:8f:b8:c2:fc:b3:84:bc:4a:62:07:6b: b5:a0:61:e4:68:a1:7f:c4:13:18:8e:cb:20:d9:dd: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:64:7B:34:C2:08:17:7C:92:D3:B6:50:C4:99:76:53:0D:39:97:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b480::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8d:7f:d7:4a:51:03:b5:db:1b:d3:97:70:9e:59:c2:f2:c1: ce:2c:f5:5f:6a:0a:c9:78:9b:1f:d3:9e:39:21:de:c1:80:f6: 48:68:d1:86:2b:a6:f2:2c:9d:a5:c1:3b:96:68:f8:a7:a4:cd: 19:4a:a1:a7:9b:66:9d:c3:ca:fa:13:5a:de:5a:fa:ee:cf:98: 15:4c:66:39:78:5a:4a:08:dc:f9:e3:a2:dd:07:3e:15:9f:ef: 0a:1f:97:54:8b:23:92:9d:5b:8e:06:7a:81:39:9b:64:7e:56: b3:08:47:08:36:25:0d:73:a8:c6:f9:a3:36:3c:fc:c2:22:1e: 07:b5:10:f6:45:8a:e2:9b:47:07:17:88:f6:0a:bd:82:e0:21: 34:04:51:16:9a:2c:ec:ea:ee:d7:51:a6:7c:5a:b7:7b:88:6f: 71:1a:42:d3:36:e7:70:ec:1d:c6:15:56:e7:17:15:38:30:2f: d7:78:e4:7f:00:5f:06:03:b3:34:a9:77:bf:f9:88:c9:11:81: 03:b3:0d:95:2b:5d:c9:a6:37:8a:9b:20:77:87:07:26:fb:80: da:0b:17:14:bb:e3:15:f2:9a:39:21:9f:53:0c:18:b8:99:7d: d1:b1:2b:a4:56:9b:c7:2b:79:8c:6f:b7:25:b8:24:a9:9a:bf: 38:99:00:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEElT4RV4LoNEkToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWQwMzkwYjUtMDllMS00NGQ5LTk5NjctNmZlNmYzNWIzZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TgoSU+AC2P7l8mZtXqWC9scs+vBtw682rlD RGe6jsAf9C2FdxjMYRrChjux4MPKcTvWiEPnwPUZKx3kWm7Gha0IKuDyksdbteLV nwwrgtQMz7li4/wcisX8QV3x6jGx+lYoGVh8uUnrt+LpyxNdl+JmFhGBFrDT5TVB qnRwlzPQ4Ij9NKRgJuUpBmw7wlNCitTagudnK06c7x5zK+sN2GgiviFT4sVrSp2w i/wsrS5iQtRyVZJIGk14tdcXVidG6H/lTftF/kByndklItxTHUXob32u3pPGHAEz dVzH/6EL34tNj7jC/LOEvEpiB2u1oGHkaKF/xBMYjssg2d0PgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpkezTCCBd8ktO2UMSZdlMNOZcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDJjNGJkZGEtMWNiZi0z ZjAwLTg2MTQtNTQzMTRjZWViODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqNf9dKUQO12xvTl3CeWcLywc4s9V9qCsl4mx/Tnjkh3sGA9kho 0YYrpvIsnaXBO5Zo+KekzRlKoaebZp3DyvoTWt5a+u7PmBVMZjl4WkoI3Pnjot0H PhWf7wofl1SLI5KdW44GeoE5m2R+VrMIRwg2JQ1zqMb5ozY8/MIiHge1EPZFiuKb RwcXiPYKvYLgITQEURaaLOzq7tdRpnxat3uIb3EaQtM253DsHcYVVucXFTgwL9d4 5H8AXwYDszSpd7/5iMkRgQOzDZUrXcmmN4qbIHeHByb7gNoLFxS74xXymjkhn1MM GLiZfdGxK6RWm8creYxvtyW4JKmavziZAEA= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:41 2025 by rpki-client