$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa File: 8af02d33-3818-363b-9ae2-bd31488eab24.roa (raw, json) Hash identifier: 18TG5EVROuPhYpStPJL7aZUM7Zw34OTEkMqCwa1KHzo= Subject key identifier: DD:A4:D2:86:4B:0E:25:61:58:86:23:67:E3:9D:3A:E6:C1:22:C3:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ABD4BB272284E7A0CB275D900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d81:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b2:72:28:4e:7a:0c:b2:75:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=e340153d-644c-4de2-a4bb-143ee1aaa7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:cd:cc:c4:13:5b:d0:18:0e:65:5c:93:51: 5a:0f:5c:ae:e8:8e:f7:25:4f:ea:57:5f:7a:e0:4d: 75:fa:6e:87:b0:f8:4b:27:f4:60:ee:eb:eb:16:c4: c7:3f:db:dc:b0:04:21:21:e3:30:70:99:2d:0e:6e: ce:6a:39:71:1b:22:3e:14:2e:4b:ba:23:51:70:9c: 55:61:38:35:00:e7:e3:91:ac:a2:3f:13:2e:76:71: 11:c5:ad:ec:58:20:8f:4d:d7:68:3b:8a:70:ec:72: b0:ab:74:c9:62:9f:d1:26:00:bb:08:ff:16:d9:30: a7:5e:8a:3b:40:f3:77:ac:34:83:f1:92:a7:20:09: 4a:09:20:cf:27:b1:b1:e7:61:d9:ef:f5:12:b4:f1: ca:40:3d:cc:cd:a9:64:cd:37:8b:68:d5:9c:4d:81: bc:bb:6d:62:91:a2:1c:fb:b3:8a:21:23:e7:df:3b: bf:91:7e:8d:07:84:cf:3a:d2:0c:c4:ac:84:82:db: 66:0e:c4:a2:0c:d0:ec:2e:11:41:26:70:02:c5:3f: 60:81:08:2d:05:b0:58:e9:aa:33:68:d0:11:4b:53: ac:94:3d:af:aa:85:22:07:c5:c5:a4:3c:f9:59:b1: b4:ee:fd:0a:79:c4:59:7c:e3:a3:88:24:fc:2a:02: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:D2:86:4B:0E:25:61:58:86:23:67:E3:9D:3A:E6:C1:22:C3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ee:4c:5c:25:91:7e:0a:91:c0:5b:a3:46:ae:2a:b9:40:52: 5f:97:1c:1d:60:2c:2d:32:48:1e:f4:81:4e:ec:38:36:1a:bd: 95:34:5a:4f:20:ad:53:30:aa:91:db:32:58:a4:73:42:9c:4a: a3:de:d0:93:a0:8c:cc:ed:a6:85:69:4c:dc:95:2f:d7:8a:d2: a2:9d:54:c8:d2:7f:77:24:fd:f3:ee:25:4f:20:56:15:33:81: d7:68:f8:20:43:70:24:f6:2b:24:90:ed:8d:42:41:9c:c5:fb: da:eb:f2:83:b0:a2:cc:b4:f3:d1:e6:8e:64:bc:f2:d1:74:69: 91:bc:8d:b8:28:a2:73:54:8f:6a:10:a1:49:aa:ab:92:74:8a: f5:88:07:e6:e5:de:79:0c:a0:65:5e:d5:ab:6c:93:7a:36:1a: 86:d0:69:f7:14:fa:fe:1b:18:58:3a:e8:2b:30:6c:c3:82:b1: 80:da:39:3d:88:b9:0c:7e:32:4f:82:ab:81:03:d0:5f:47:dc: 07:6a:77:ec:99:2d:92:88:e0:1a:9a:54:2f:ee:cc:9e:7c:f9: a3:11:e0:c6:cd:bd:84:58:7a:02:54:4d:c1:09:f9:aa:97:f4: 9a:fd:28:93:dd:80:3a:a0:a2:09:9e:50:09:7b:19:de:0f:7a: 0d:57:0e:e3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq9S7JyKE56DLJ12QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTM0MDE1M2QtNjQ0Yy00ZGUyLWE0YmItMTQzZWUxYWFhN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/vNzMQTW9AYDmVck1FaD1yu6I73JU/qV196 4E11+m6HsPhLJ/Rg7uvrFsTHP9vcsAQhIeMwcJktDm7OajlxGyI+FC5LuiNRcJxV YTg1AOfjkayiPxMudnERxa3sWCCPTddoO4pw7HKwq3TJYp/RJgC7CP8W2TCnXoo7 QPN3rDSD8ZKnIAlKCSDPJ7Gx52HZ7/UStPHKQD3MzalkzTeLaNWcTYG8u21ikaIc +7OKISPn3zu/kX6NB4TPOtIMxKyEgttmDsSiDNDsLhFBJnACxT9ggQgtBbBY6aoz aNARS1OslD2vqoUiB8XFpDz5WbG07v0KecRZfOOjiCT8KgK08QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN2k0oZLDiVhWIYjZ+OdOubBIsN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMDJkMzMtMzgxOC0z NjNiLTlhZTItYmQzMTQ4OGVhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQe5MXCWRfgqRwFujRq4quUBSX5ccHWAsLTJIHvSBTuw4Nhq9lTRa TyCtUzCqkdsyWKRzQpxKo97Qk6CMzO2mhWlM3JUv14rSop1UyNJ/dyT98+4lTyBW FTOB12j4IENwJPYrJJDtjUJBnMX72uvyg7CizLTz0eaOZLzy0XRpkbyNuCiic1SP ahChSaqrknSK9YgH5uXeeQygZV7Vq2yTejYahtBp9xT6/hsYWDroKzBsw4KxgNo5 PYi5DH4yT4KrgQPQX0fcB2p37JktkojgGppUL+7Mnnz5oxHgxs29hFh6AlRNwQn5 qpf0mv0ok92AOqCiCZ5QCXsZ3g96DVcO4w== -----END CERTIFICATE-----Generated at Wed Aug 6 00:40:49 2025 by rpki-client