$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa File: 9631be6f-d901-3a45-8f69-7f4bb3437f76.roa (raw, json) Hash identifier: cIgGyIyG5Dj84vb8gvwXZqkgoieKKRkdzj6m8Bfy08Q= Subject key identifier: 10:F4:A4:DF:B8:F1:03:DC:3E:23:3E:20:E3:B0:65:B7:0E:5A:1A:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81466858D91AB1998DD8BF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2d80:7280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:68:58:d9:1a:b1:99:8d:d8:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2620a2b0-71c5-4015-8538-e329d25d5ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:c3:6e:6e:0e:43:bb:5d:dc:fc:b4:30:cd: b2:b1:4a:c9:2b:7a:fc:98:53:55:8b:27:2c:62:56: 55:40:28:82:e6:ad:e6:d0:3f:de:73:87:fa:ff:41: bb:64:75:6e:2d:6b:c1:57:fe:2d:65:33:85:f6:e5: d9:04:fb:65:e6:13:1c:9a:1b:f1:68:45:84:00:17: 2d:64:b8:c5:b8:c0:33:eb:38:10:02:86:61:11:b0: 4f:32:32:3e:e0:66:ff:1e:aa:57:cf:c6:20:dd:cd: 22:ab:c0:c4:20:1d:29:cf:7a:3d:c5:46:1d:c4:1e: 78:a2:55:c0:29:ab:bc:1c:50:18:a6:f8:a6:46:7b: 49:c5:5f:ec:aa:a4:34:e0:e2:a2:0d:9f:94:aa:c4: 07:87:24:e1:fc:cd:7b:8f:9c:8f:98:4b:e1:f5:d2: 9e:2c:ac:f3:3d:a5:77:aa:4e:0d:81:1e:95:68:f2: c4:bc:2d:5c:95:d5:9b:96:86:53:f1:f1:06:a1:8f: 83:33:fc:28:d5:54:15:5b:5d:70:06:92:a1:42:2a: 23:8d:e7:92:ac:41:2c:8d:de:a9:8e:c2:8f:bb:70: a2:d2:6d:99:9d:22:bc:ee:04:5e:88:0c:d0:8a:dd: 8d:d3:df:c5:ec:96:03:73:10:44:26:02:dd:17:55: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F4:A4:DF:B8:F1:03:DC:3E:23:3E:20:E3:B0:65:B7:0E:5A:1A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b8:c9:96:a0:bf:99:e9:1a:d3:83:37:a6:09:4e:ab:41:f1: e3:0c:30:f6:94:e8:a6:cc:eb:fb:0a:7f:78:37:08:bb:4a:82: 14:67:24:cd:aa:ce:58:1a:f9:1a:f5:78:fc:3b:1a:29:c2:21: 28:55:e1:7f:23:34:0c:4c:de:16:fc:e7:9e:ec:e9:8b:b4:ef: 29:a5:59:eb:93:0f:c8:14:85:75:ea:28:2e:be:46:a1:67:a1: c4:a7:31:62:18:fa:ee:af:db:14:13:df:e7:91:26:a8:2d:3e: f0:ce:1c:0e:76:fd:7e:93:8d:6b:9d:79:d2:4b:3b:9d:89:7c: ad:29:19:68:20:0d:a8:88:f5:52:91:6b:89:45:d7:23:c0:55: b2:9a:4e:06:fa:78:4c:6a:96:6f:b6:2f:ab:2d:7d:59:7e:9d: 62:f5:bc:1a:f5:1d:33:ee:db:0f:18:b6:c0:15:12:b7:eb:57: 59:38:3d:78:3f:2b:2a:63:30:a2:9e:c7:2f:41:33:3b:c9:dd: 8a:c7:2c:c1:ea:9a:39:4b:a4:3d:08:6e:13:71:cb:f7:35:53: 84:cb:dd:54:35:20:a2:f7:48:f2:ab:35:cf:41:49:d9:95:13: ec:7f:9d:64:85:71:78:f9:d6:3b:2f:8e:dd:44:8a:14:62:64: 6a:1c:33:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRmhY2RqxmY3Yv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjYyMGEyYjAtNzFjNS00MDE1LTg1MzgtZTMyOWQyNWQ1ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWbDbm4OQ7td3Py0MM2ysUrJK3r8mFNViycs YlZVQCiC5q3m0D/ec4f6/0G7ZHVuLWvBV/4tZTOF9uXZBPtl5hMcmhvxaEWEABct ZLjFuMAz6zgQAoZhEbBPMjI+4Gb/HqpXz8Yg3c0iq8DEIB0pz3o9xUYdxB54olXA Kau8HFAYpvimRntJxV/sqqQ04OKiDZ+UqsQHhyTh/M17j5yPmEvh9dKeLKzzPaV3 qk4NgR6VaPLEvC1cldWbloZT8fEGoY+DM/wo1VQVW11wBpKhQiojjeeSrEEsjd6p jsKPu3Ci0m2ZnSK87gReiAzQit2N09/F7JYDcxBEJgLdF1VjJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBD0pN+48QPcPiM+IOOwZbcOWhqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTYzMWJlNmYtZDkwMS0z YTQ1LThmNjktN2Y0YmIzNDM3Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGq4yZagv5npGtODN6YJTqtB8eMMMPaU6KbM6/sKf3g3CLtKghRn JM2qzlga+Rr1ePw7GinCIShV4X8jNAxM3hb8557s6Yu07ymlWeuTD8gUhXXqKC6+ RqFnocSnMWIY+u6v2xQT3+eRJqgtPvDOHA52/X6TjWudedJLO52JfK0pGWggDaiI 9VKRa4lF1yPAVbKaTgb6eExqlm+2L6stfVl+nWL1vBr1HTPu2w8YtsAVErfrV1k4 PXg/KypjMKKexy9BMzvJ3YrHLMHqmjlLpD0IbhNxy/c1U4TL3VQ1IKL3SPKrNc9B SdmVE+x/nWSFcXj51jsvjt1EihRiZGocM9A= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:30 2025 by rpki-client