$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa File: 64c04f54-9581-3d57-ac79-e867202a23c3.roa (raw, json) Hash identifier: SeDQqUsU5TfyQc/7XtE+8fcMFndrfPUes4VFNmMhqTA= Subject key identifier: 35:88:66:AC:48:69:86:DC:44:33:18:26:76:28:11:6E:9E:F9:41:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0B1702426D05F210D9C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 2604:2d80:d580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b1:70:24:26:d0:5f:21:0d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=1dd4d097-c84a-428d-aa5a-6c403911b8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:a5:12:77:f6:b5:50:64:0b:6d:db:92:05: ff:af:3f:2f:ff:22:61:a1:8b:8b:0e:0f:39:a4:1e: e9:41:70:f1:e8:12:80:d8:93:cf:a3:7e:89:53:97: f4:0e:a7:28:09:90:c7:d7:99:4d:ba:dd:90:0a:c9: 2c:1e:47:94:bb:d9:97:05:b0:8f:93:1f:6c:20:55: 09:78:f8:f0:70:d3:43:76:41:68:45:b5:8d:9b:21: a1:6f:60:4e:6a:0a:ff:dd:73:bf:8e:c0:36:18:bf: 99:8c:ed:03:8e:50:62:b5:81:e2:cc:62:94:d0:72: d9:92:51:57:67:89:cc:f1:c1:78:6a:1b:31:86:48: e0:b2:af:4e:90:69:cb:e9:eb:8a:f2:62:46:2d:b0: 52:1e:fd:38:86:c0:6c:41:31:3c:34:c9:59:78:06: 3d:e3:f9:3e:07:4e:c9:32:f3:d3:33:0a:93:de:c2: 21:1d:78:00:dc:22:a7:55:a8:61:9e:58:35:d8:68: 9d:f8:b6:ac:89:2a:dc:28:3b:8e:25:02:9f:0a:77: fe:43:e8:ed:fd:fb:96:dd:a4:96:72:a6:88:e9:9a: 35:47:4a:1f:fe:0a:4a:ab:2b:87:6a:16:3a:38:1f: fa:57:40:8b:0a:8a:f0:d7:db:cb:30:f7:4d:13:74: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:66:AC:48:69:86:DC:44:33:18:26:76:28:11:6E:9E:F9:41:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:2a:a8:40:cd:3e:86:b9:dc:63:a5:a1:32:29:fb:e7:1e: be:7c:a8:4b:1e:45:86:01:d4:5d:90:39:18:8f:c1:b0:56:b9: ab:3e:b2:0b:49:de:df:c4:46:aa:26:a9:8d:52:72:5f:ee:04: 40:0e:df:8e:6f:87:28:e6:b9:71:13:b7:2a:9e:0b:ec:3f:44: 7c:df:60:fb:f1:c2:d8:73:a4:7f:e1:1f:19:df:7f:0a:eb:b6: 65:b7:4d:e9:f3:e6:13:30:b1:03:5f:10:3c:10:36:d8:61:f3: 59:f2:43:37:5a:e9:e2:ee:59:9d:6c:03:8a:a8:0c:f7:ab:d6: 1a:57:7f:d7:dc:8c:48:88:72:65:23:9d:84:59:e7:a8:cb:0d: da:b5:af:fe:6a:0d:0e:d2:c8:74:3a:75:07:1e:48:9a:7e:c9: 41:a7:9f:05:54:b1:f2:53:6c:bf:27:ef:40:b4:b7:ee:e8:91: 27:a0:7f:d2:bb:76:a7:48:f7:39:3d:79:64:66:4b:ea:a1:da: 3c:c6:5c:b0:55:2f:77:9b:c5:18:ab:65:83:46:66:21:7a:ed: b9:b9:63:d2:46:00:a6:ad:b6:19:d2:ae:f8:67:b3:e3:ff:73: 04:a3:a8:60:25:e5:58:7d:5e:ea:4a:d6:2d:cf:11:07:90:e2: 97:76:e3:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp7sLFwJCbQXyENnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MWRkNGQwOTctYzg0YS00MjhkLWFhNWEtNmM0MDM5MTFiOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPWlEnf2tVBkC23bkgX/rz8v/yJhoYuLDg85 pB7pQXDx6BKA2JPPo36JU5f0DqcoCZDH15lNut2QCsksHkeUu9mXBbCPkx9sIFUJ ePjwcNNDdkFoRbWNmyGhb2BOagr/3XO/jsA2GL+ZjO0DjlBitYHizGKU0HLZklFX Z4nM8cF4ahsxhkjgsq9OkGnL6euK8mJGLbBSHv04hsBsQTE8NMlZeAY94/k+B07J MvPTMwqT3sIhHXgA3CKnVahhnlg12Gid+LasiSrcKDuOJQKfCnf+Q+jt/fuW3aSW cqaI6Zo1R0of/gpKqyuHahY6OB/6V0CLCorw19vLMPdNE3TJHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWIZqxIaYbcRDMYJnYoEW6e+UFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjRjMDRmNTQtOTU4MS0z ZDU3LWFjNzktZTg2NzIwMmEyM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANmKqhAzT6GudxjpaEyKfvnHr58qEseRYYB1F2QORiPwbBWuas+ sgtJ3t/ERqomqY1Scl/uBEAO345vhyjmuXETtyqeC+w/RHzfYPvxwthzpH/hHxnf fwrrtmW3Tenz5hMwsQNfEDwQNthh81nyQzda6eLuWZ1sA4qoDPer1hpXf9fcjEiI cmUjnYRZ56jLDdq1r/5qDQ7SyHQ6dQceSJp+yUGnnwVUsfJTbL8n70C0t+7okSeg f9K7dqdI9zk9eWRmS+qh2jzGXLBVL3ebxRirZYNGZiF67bm5Y9JGAKatthnSrvhn s+P/cwSjqGAl5Vh9XupK1i3PEQeQ4pd24yM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:57 2025 by rpki-client