$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa File: 4af779d3-3ad5-368f-ae8a-873a3a528992.roa (raw, json) Hash identifier: x7T4nEOFnmFwqP8+kdzLMZ4kwEbgGWxqCNlPF8XLNPE= Subject key identifier: F8:59:41:4D:C8:AF:5C:BE:EF:AB:31:9B:B5:7A:A0:85:50:E5:39:17 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410F1B61CB74C9B9A00F440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:a680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f1:b6:1c:b7:4c:9b:9a:00:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=05e7c0e1-787a-47ea-bbd4-147f72193294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:f0:42:cd:e6:70:53:bf:55:26:30:fa:5c: 37:ff:8b:f4:ba:a2:3f:da:d0:cd:bf:79:1e:f0:4d: 45:18:e5:84:15:fc:83:31:e9:2c:0d:9e:75:58:37: c5:29:56:d1:5a:1c:32:ae:7b:ad:10:e4:78:cb:20: 1d:11:5c:3a:c5:5f:65:6c:d4:fc:3c:4f:0b:23:67: ae:54:3e:5b:86:7a:a3:96:3b:21:29:f0:b5:4b:75: e3:ab:a3:d4:b6:f3:04:51:4d:fd:81:1c:95:77:a2: 05:85:6b:f3:df:60:f0:c8:8a:48:96:b2:50:df:b9: 5c:9e:46:62:df:35:35:c5:b0:e1:f0:3b:8a:78:d3: 93:f9:f5:ab:21:be:ac:7f:70:84:dd:1f:9b:f3:4d: e0:c5:64:5b:53:78:ef:65:33:f4:f9:03:13:fc:3c: d1:ff:52:f1:4c:21:90:4d:a7:92:e4:8c:e8:91:12: 6b:cc:b3:5b:e5:e3:86:27:d5:52:fa:19:6d:06:8b: 82:c1:48:d7:bd:aa:58:c7:a2:24:59:39:62:11:83: 7c:63:57:02:a8:eb:64:0b:e1:7b:18:f7:88:fe:bb: a9:d0:1f:68:a6:1f:6c:18:8c:c3:6a:2b:f0:f5:d2: 51:fc:80:90:e5:e0:d6:5f:59:b7:0b:08:e6:69:fd: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:41:4D:C8:AF:5C:BE:EF:AB:31:9B:B5:7A:A0:85:50:E5:39:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:35:64:3c:79:94:49:15:cc:0e:ea:ca:35:e8:ed:cb:cf:02: 46:d3:b4:bd:1b:ba:36:49:fc:cc:c2:38:2b:2e:dd:9b:8a:a7: 6f:49:87:4a:10:91:99:39:be:1c:2c:b3:dd:49:2d:be:ae:bd: 72:2e:59:a3:84:21:10:f4:0f:35:ed:9e:ca:e7:ec:75:bf:4a: 38:e5:cb:81:40:91:3e:a2:c0:e1:af:36:d8:7a:a3:43:93:eb: 75:9e:59:82:9a:ea:d0:47:fe:9f:98:e7:9e:76:81:13:a8:8f: 7e:66:d4:37:22:5d:26:d8:52:44:96:ea:91:32:1e:90:74:27: a1:62:d8:20:1f:c7:d9:f1:15:07:71:e1:5e:5b:ba:f5:df:99: 49:7e:66:8a:f1:3f:06:78:d2:24:a9:5f:ef:31:7d:36:a2:18: 5e:e3:39:94:73:d6:08:36:9b:97:d1:c1:e8:95:de:d9:94:a7: 54:62:8d:be:6b:76:f3:fa:40:f6:54:c1:eb:ad:93:0a:41:32: bf:71:a3:11:90:03:b9:0d:03:15:eb:25:0c:43:54:5e:d7:07: 95:1b:d8:72:77:89:4d:56:3f:88:24:e0:d8:f2:c7:80:90:a4: 12:f9:d1:72:1d:6d:66:24:5c:90:97:9c:63:c5:cf:a0:18:cd: fd:3c:ac:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEPG2HLdMm5oA9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDVlN2MwZTEtNzg3YS00N2VhLWJiZDQtMTQ3ZjcyMTkzMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNnwQs3mcFO/VSYw+lw3/4v0uqI/2tDNv3ke 8E1FGOWEFfyDMeksDZ51WDfFKVbRWhwyrnutEOR4yyAdEVw6xV9lbNT8PE8LI2eu VD5bhnqjljshKfC1S3Xjq6PUtvMEUU39gRyVd6IFhWvz32DwyIpIlrJQ37lcnkZi 3zU1xbDh8DuKeNOT+fWrIb6sf3CE3R+b803gxWRbU3jvZTP0+QMT/DzR/1LxTCGQ TaeS5IzokRJrzLNb5eOGJ9VS+hltBouCwUjXvapYx6IkWTliEYN8Y1cCqOtkC+F7 GPeI/rup0B9oph9sGIzDaivw9dJR/ICQ5eDWX1m3Cwjmaf0iOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhZQU3Ir1y+76sxm7V6oIVQ5TkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGFmNzc5ZDMtM2FkNS0z NjhmLWFlOGEtODczYTNhNTI4OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABI1ZDx5lEkVzA7qyjXo7cvPAkbTtL0bujZJ/MzCOCsu3ZuKp29J h0oQkZk5vhwss91JLb6uvXIuWaOEIRD0DzXtnsrn7HW/Sjjly4FAkT6iwOGvNth6 o0OT63WeWYKa6tBH/p+Y5552gROoj35m1DciXSbYUkSW6pEyHpB0J6Fi2CAfx9nx FQdx4V5buvXfmUl+ZorxPwZ40iSpX+8xfTaiGF7jOZRz1gg2m5fRweiV3tmUp1Ri jb5rdvP6QPZUweutkwpBMr9xoxGQA7kNAxXrJQxDVF7XB5Ub2HJ3iU1WP4gk4Njy x4CQpBL50XIdbWYkXJCXnGPFz6AYzf08rLU= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:35 2025 by rpki-client