$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576b8bed-b95c-3f6d-b869-bf609a8f59db.roa File: 576b8bed-b95c-3f6d-b869-bf609a8f59db.roa (raw, json) Hash identifier: OpL2x/gOOzXO7YcIy2gJKjmtfx8TkkWn83grREr0/Lc= Subject key identifier: 17:F3:08:CA:01:69:5F:C0:C9:21:AF:61:B6:52:46:DC:B7:15:63:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E720AE69A729C2F49C81 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576b8bed-b95c-3f6d-b869-bf609a8f59db.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:2880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e7:20:ae:69:a7:29:c2:f4:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=894ca29b-ff13-4a14-ad49-293ec450c050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:14:40:ec:06:ad:a3:25:ee:f6:29:84:75: 24:ee:87:e4:56:5c:1e:d7:c4:03:e4:ca:cd:3e:9c: 55:cc:a2:03:ac:36:0e:2d:9d:d0:b6:ed:7c:24:52: 6b:b8:26:ae:ef:87:97:dd:6f:9e:e0:ff:1f:70:c5: 78:95:8e:fd:4a:c7:1b:c7:d8:4d:02:be:b6:5e:14: da:3d:0c:50:a2:c1:53:f6:f9:93:33:ec:1a:f6:d8: a7:41:02:b4:ed:67:5f:93:35:6a:51:3d:ca:c6:70: 81:65:05:58:65:49:e0:97:db:e5:1f:53:d5:6d:8c: 8e:e7:36:4d:48:0b:9f:f7:ca:2d:d7:d2:c6:7b:19: cd:3e:4f:4e:09:cf:88:e9:c0:1c:d1:26:1d:cd:ac: 15:1e:df:77:e2:68:f5:6f:25:78:7e:92:9f:05:d6: ff:4a:be:f7:7e:6b:10:bc:63:42:ae:59:73:ba:a2: 42:12:00:bb:26:8e:75:c9:63:14:9c:8b:8c:9e:38: 42:b8:0d:2f:f7:ed:47:c8:c8:2f:9a:83:cd:fc:49: 59:bc:49:fb:47:fe:da:d1:8a:3c:71:77:7d:e5:d8: c8:e9:7b:a1:9a:fb:88:08:9e:9a:9a:ff:1c:f6:87: 0a:07:0b:17:ac:6a:a5:c7:de:70:14:8c:1b:44:38: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F3:08:CA:01:69:5F:C0:C9:21:AF:61:B6:52:46:DC:B7:15:63:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576b8bed-b95c-3f6d-b869-bf609a8f59db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5b:dc:5e:a6:04:f4:28:f9:cc:88:a2:68:03:8f:ef:b8:4f: a8:95:72:9f:c8:ba:46:f9:6c:be:8e:ff:d0:ea:ec:89:4d:c4: a9:57:a2:b4:a8:9d:16:ef:b9:32:72:8b:18:d8:7b:24:4d:fa: 8f:db:e4:fd:42:55:e0:0b:7d:a5:3c:ff:8d:75:78:04:d2:0d: e4:f0:a9:72:0c:b6:d3:e3:43:4d:83:20:ef:a4:56:4a:18:cb: fe:b4:3d:3b:53:e9:e6:4b:74:72:c2:3a:f9:bc:9a:27:ed:fe: ae:91:22:83:f2:a9:26:3a:09:d1:50:bc:12:0a:ae:ff:c0:eb: 33:f7:ed:04:9a:e6:1d:8a:62:39:d6:8c:8e:d5:df:13:3c:32: ba:15:39:d4:87:76:0e:c8:ac:08:4e:0c:16:0a:98:c7:46:f4: 0a:21:04:52:75:33:0c:7d:31:8b:49:d5:87:99:c4:28:cb:1a: 7b:d6:fa:46:60:5e:e9:c0:af:d8:f1:ac:82:a7:f8:66:c9:ba: 8b:ec:c4:a4:f0:45:5e:3a:9e:cd:b1:19:29:18:a6:a9:a9:c6: 6e:ff:1a:86:c1:4b:de:e4:ca:02:78:23:a3:4d:e5:49:bc:b6: a4:63:30:27:7b:84:ba:ef:c3:b8:74:08:27:ca:ef:4b:40:ad: fb:18:ea:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEOcgrmmnKcL0nIEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODk0Y2EyOWItZmYxMy00YTE0LWFkNDktMjkzZWM0NTBjMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoUQOwGraMl7vYphHUk7ofkVlwe18QD5MrN PpxVzKIDrDYOLZ3Qtu18JFJruCau74eX3W+e4P8fcMV4lY79Sscbx9hNAr62XhTa PQxQosFT9vmTM+wa9tinQQK07WdfkzVqUT3KxnCBZQVYZUngl9vlH1PVbYyO5zZN SAuf98ot19LGexnNPk9OCc+I6cAc0SYdzawVHt934mj1byV4fpKfBdb/Sr73fmsQ vGNCrllzuqJCEgC7Jo51yWMUnIuMnjhCuA0v9+1HyMgvmoPN/ElZvEn7R/7a0Yo8 cXd95djI6XuhmvuICJ6amv8c9ocKBwsXrGqlx95wFIwbRDj2hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfzCMoBaV/AySGvYbZSRty3FWP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTc2YjhiZWQtYjk1Yy0z ZjZkLWI4NjktYmY2MDlhOGY1OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1b3F6mBPQo+cyIomgDj++4T6iVcp/Iukb5bL6O/9Dq7IlNxKlX orSonRbvuTJyixjYeyRN+o/b5P1CVeALfaU8/411eATSDeTwqXIMttPjQ02DIO+k VkoYy/60PTtT6eZLdHLCOvm8mift/q6RIoPyqSY6CdFQvBIKrv/A6zP37QSa5h2K YjnWjI7V3xM8MroVOdSHdg7IrAhODBYKmMdG9AohBFJ1Mwx9MYtJ1YeZxCjLGnvW +kZgXunAr9jxrIKn+GbJuovsxKTwRV46ns2xGSkYpqmpxm7/GobBS97kygJ4I6NN 5Um8tqRjMCd7hLrvw7h0CCfK70tArfsY6i4= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:41 2025 by rpki-client