$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa File: 682ff451-e7f8-34da-9f17-1b849a279e3a.roa (raw, json) Hash identifier: fBSuAmYsxel+NETd82oPLZ0/lqiFW0z8WMjxpR+MLP8= Subject key identifier: 99:D1:CA:2C:C9:D2:5C:29:17:AA:53:EB:16:84:AA:67:1E:C8:83:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AA0C7791ABF1B582F29814D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa Signing time: Thu 24 Jul 2025 19:52:01 +0000 ROA not before: Thu 24 Jul 2025 19:52:01 +0000 ROA not after: Wed 22 Oct 2025 19:52:01 +0000 asID: 19905 IP address blocks: 2604:2d81:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:c7:79:1a:bf:1b:58:2f:29:81:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 24 19:52:01 2025 GMT Not After : Oct 22 19:52:01 2025 GMT Subject: CN=9a5395e1-6abf-48a7-90df-fa8b3c27e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:39:3c:12:d8:8b:17:17:e0:78:33:2f:8e:0d: 27:cd:9f:78:02:60:70:16:8c:53:c6:58:54:19:bc: 33:78:fc:8a:8c:c4:16:d3:5a:46:20:9d:dc:63:dd: 30:20:ae:b7:5e:06:45:c6:46:97:04:35:74:3d:58: 2a:9f:35:56:b7:d4:d7:d7:53:96:cb:7a:b8:48:82: d9:be:55:58:64:ce:e0:30:53:2e:f5:47:a3:da:44: da:31:a1:6e:88:26:0c:29:df:b9:fa:61:bb:f8:3f: e0:e3:ec:9a:4a:5b:22:30:7b:8e:e2:70:ea:8e:f1: f6:75:02:d2:82:43:16:4b:92:f5:82:a4:62:52:48: eb:3c:2e:42:56:ef:e8:1f:37:b6:79:cc:ac:9e:24: 9a:23:d7:44:92:45:0d:be:19:af:56:c0:9c:6e:e3: 18:70:ca:e7:94:61:46:0b:82:28:84:97:69:88:ef: 65:c5:7b:a0:7c:76:b2:e4:48:6b:54:54:8f:5e:96: 7e:14:d0:c2:fd:f8:cc:52:f9:13:e5:52:f2:9b:0a: 41:e2:42:3c:bc:10:18:70:1a:f5:06:86:23:f9:54: 9f:9c:a9:be:a9:0d:43:00:80:12:13:52:1b:06:61: 96:3b:3f:93:15:f3:ac:54:a3:f0:39:cb:39:4f:a9: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:CA:2C:C9:D2:5C:29:17:AA:53:EB:16:84:AA:67:1E:C8:83:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7b:da:50:8f:2e:16:75:8b:a4:20:d0:be:26:18:90:09:d5: 82:37:02:16:6f:11:04:4f:bc:2f:36:3e:89:3b:69:5a:31:10: 08:5d:41:9b:04:33:88:60:db:45:73:af:96:b6:d2:f3:44:b2: bf:65:c8:83:ed:0e:a2:b0:38:d7:7c:bf:6c:e4:55:cf:22:09: 21:1c:26:f2:24:5b:36:73:8b:72:f1:ee:2e:ac:02:57:23:67: b4:3a:c6:cc:0d:e5:e5:9a:a4:15:0f:d2:f6:54:df:c9:15:a9: ac:15:e9:e1:13:ca:db:9a:b1:b9:6c:fc:35:53:a3:78:94:f7: 26:9b:ec:61:13:a1:43:4e:34:47:56:28:a0:34:d1:b2:2a:67: 5b:d5:ea:86:4d:10:b3:75:ea:09:63:de:cc:ef:03:f5:2d:4c: d6:3e:69:b9:2e:ea:cd:90:c9:59:3b:1f:53:ff:75:69:99:ab: 25:9c:ed:4f:09:aa:69:49:e4:11:31:ab:3f:d7:6b:f7:6d:05: 22:6c:af:b6:0f:3d:ab:eb:b7:84:d3:08:95:22:b2:09:d4:e2: 10:db:a6:a3:61:50:51:75:f5:8e:6c:20:d1:f3:98:b3:54:da: 5c:a9:a2:7c:21:47:b6:fc:6c:a5:1a:6c:c2:39:5a:93:32:b4: 35:38:d1:5a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqgx3kavxtYLymBTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcyNDE5NTIwMVoXDTI1MTAyMjE5NTIwMVowLzEtMCsGA1UEAxMk OWE1Mzk1ZTEtNmFiZi00OGE3LTkwZGYtZmE4YjNjMjdlODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDk8EtiLFxfgeDMvjg0nzZ94AmBwFoxTxlhU GbwzePyKjMQW01pGIJ3cY90wIK63XgZFxkaXBDV0PVgqnzVWt9TX11OWy3q4SILZ vlVYZM7gMFMu9Uej2kTaMaFuiCYMKd+5+mG7+D/g4+yaSlsiMHuO4nDqjvH2dQLS gkMWS5L1gqRiUkjrPC5CVu/oHze2ecysniSaI9dEkkUNvhmvVsCcbuMYcMrnlGFG C4IohJdpiO9lxXugfHay5EhrVFSPXpZ+FNDC/fjMUvkT5VLymwpB4kI8vBAYcBr1 BoYj+VSfnKm+qQ1DAIASE1IbBmGWOz+TFfOsVKPwOcs5T6li6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJnRyizJ0lwpF6pT6xaEqmceyIOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjgyZmY0NTEtZTdmOC0z NGRhLTlmMTctMWI4NDlhMjc5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH3vaUI8uFnWLpCDQviYYkAnVgjcCFm8RBE+8LzY+iTtpWjEQCF1B mwQziGDbRXOvlrbS80Syv2XIg+0OorA413y/bORVzyIJIRwm8iRbNnOLcvHuLqwC VyNntDrGzA3l5ZqkFQ/S9lTfyRWprBXp4RPK25qxuWz8NVOjeJT3JpvsYROhQ040 R1YooDTRsipnW9Xqhk0Qs3XqCWPezO8D9S1M1j5puS7qzZDJWTsfU/91aZmrJZzt TwmqaUnkETGrP9dr920FImyvtg89q+u3hNMIlSKyCdTiENumo2FQUXX1jmwg0fOY s1TaXKmifCFHtvxspRpswjlakzK0NTjRWg== -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:17 2025 by rpki-client