$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa File: 7d8a9d35-8884-3499-a57d-d954bc9b228f.roa (raw, json) Hash identifier: /JUteHPQrhJOaRgUaUKPPoPfKcU9iJrg+3N7635B54o= Subject key identifier: FE:18:D3:9B:6D:3A:02:43:CD:E9:DC:9F:0F:A0:A9:51:5D:51:45:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8146309A973FEC0873742300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 2604:2d80:b180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:30:9a:97:3f:ec:08:73:74:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=cdca5cf0-22f9-4aa9-8d12-d890846fdaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:dc:ba:a9:c2:d4:a6:5e:71:2e:9a:39:bf: 7d:45:86:d9:a3:33:b5:c1:33:00:84:1e:92:f0:51: 91:cc:bb:a9:ac:67:41:39:41:3d:81:eb:c9:46:75: ab:10:24:55:0c:b9:5f:51:87:ed:f3:f2:2d:04:2c: c1:f4:73:34:a7:ac:ca:fd:8c:6a:34:45:e0:66:e1: 22:46:c0:d1:cb:16:9e:c3:4d:2a:48:f6:19:7b:05: ac:96:01:61:38:4f:e7:5b:b4:46:2d:ee:10:76:69: 2e:90:7c:f8:a4:ce:c0:34:32:c5:62:c2:76:21:20: e2:b8:4e:0b:81:a9:bf:ff:d5:7e:93:e4:74:cf:13: 16:1f:10:0f:91:8d:4d:0f:c2:ef:1b:10:c3:f2:ce: 34:a9:5d:f6:13:7c:3c:ee:c9:5b:8d:ec:57:72:f9: e6:57:d7:5a:49:e5:ce:e9:12:dc:18:35:f4:ba:34: 96:8a:db:c0:52:bb:81:48:2a:99:55:2c:ba:fe:5b: 26:38:90:02:a0:85:9e:3f:0d:eb:31:94:a5:72:39: 73:d1:13:11:7c:a2:a8:79:16:2e:50:5a:fc:08:e8: a3:6f:2c:99:31:75:23:90:79:04:16:e2:44:5d:bf: 2d:11:d7:28:6e:24:02:81:c2:55:d4:1f:d1:2d:43: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:18:D3:9B:6D:3A:02:43:CD:E9:DC:9F:0F:A0:A9:51:5D:51:45:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ff:4c:53:d4:b3:e1:20:04:53:a7:42:63:24:77:20:38:33: a4:54:5c:5b:cf:2f:52:04:6c:81:0d:6f:2c:3f:7a:5d:20:b3: cd:6a:46:78:7a:b2:c3:3c:a5:37:cd:85:a0:ba:1f:52:f5:88: fa:9f:f5:74:9f:52:fb:43:e6:22:b3:ff:db:16:ab:e9:e8:73: de:a2:e9:71:07:53:19:78:cd:e9:cb:ad:d0:f3:b0:4b:23:8c: f9:93:74:06:5d:ea:2c:56:83:65:8b:9c:2b:8d:35:83:56:66: 40:0f:c4:7f:8e:e9:e2:7a:8d:b7:01:99:78:74:ef:53:c3:d6: 65:a3:e0:7c:b5:9d:90:0c:1b:6c:e5:fe:23:8a:af:e7:ea:c2: 4c:a3:a3:72:92:77:e4:4f:8a:82:18:cc:dc:8d:8a:9a:c5:14: 17:6a:87:88:39:35:66:0d:dd:2a:77:ec:c7:a7:39:68:75:15: b4:30:a2:ca:8b:c9:ad:f9:57:93:81:d2:63:f5:45:c0:fd:a8: 0e:58:fd:81:05:e1:8e:83:29:e5:d8:d5:77:b8:75:dc:c1:ad: 2e:28:d9:c3:17:53:5f:07:b8:97:11:ec:54:0d:83:44:ca:0a: 3d:57:5a:bf:77:f3:0c:c4:8e:44:6e:55:61:fa:9d:a4:73:7a: 4f:bf:a1:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjCalz/sCHN0IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2RjYTVjZjAtMjJmOS00YWE5LThkMTItZDg5MDg0NmZkYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu3cuqnC1KZecS6aOb99RYbZozO1wTMAhB6S 8FGRzLuprGdBOUE9gevJRnWrECRVDLlfUYft8/ItBCzB9HM0p6zK/YxqNEXgZuEi RsDRyxaew00qSPYZewWslgFhOE/nW7RGLe4QdmkukHz4pM7ANDLFYsJ2ISDiuE4L gam//9V+k+R0zxMWHxAPkY1ND8LvGxDD8s40qV32E3w87slbjexXcvnmV9daSeXO 6RLcGDX0ujSWitvAUruBSCqZVSy6/lsmOJACoIWePw3rMZSlcjlz0RMRfKKoeRYu UFr8COijbyyZMXUjkHkEFuJEXb8tEdcobiQCgcJV1B/RLUPZ2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4Y05ttOgJDzencnw+gqVFdUUVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2Q4YTlkMzUtODg4NC0z NDk5LWE1N2QtZDk1NGJjOWIyMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACn/TFPUs+EgBFOnQmMkdyA4M6RUXFvPL1IEbIENbyw/el0gs81q Rnh6ssM8pTfNhaC6H1L1iPqf9XSfUvtD5iKz/9sWq+noc96i6XEHUxl4zenLrdDz sEsjjPmTdAZd6ixWg2WLnCuNNYNWZkAPxH+O6eJ6jbcBmXh071PD1mWj4Hy1nZAM G2zl/iOKr+fqwkyjo3KSd+RPioIYzNyNiprFFBdqh4g5NWYN3Sp37MenOWh1FbQw osqLya35V5OB0mP1RcD9qA5Y/YEF4Y6DKeXY1Xe4ddzBrS4o2cMXU18HuJcR7FQN g0TKCj1XWr938wzEjkRuVWH6naRzek+/obc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:40 2025 by rpki-client