$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa File: aaac33d9-9851-3e29-a8fb-c6896545a96d.roa (raw, json) Hash identifier: ykKX3/jPwcr5IPZKSQ9i4iuVpM6r/ZDkP70mBow2Jao= Subject key identifier: B6:23:9C:BE:29:24:C9:00:A9:A0:6A:77:6E:6C:AF:3C:A5:A5:16:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EF4489D57FC2E160C300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ef:44:89:d5:7f:c2:e1:60:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aefc94e7-dba0-40bb-867c-9931ab96c58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:1f:3f:bf:56:96:ce:2e:39:d0:92:e0:a8: e3:d5:9b:2f:2b:82:cf:32:0e:e0:b0:22:43:25:3c: 5e:ff:a3:07:87:7a:d4:56:c4:82:26:a6:6e:f9:4d: 76:6f:26:93:48:7d:91:14:59:e3:12:f2:07:f2:0b: 7b:91:3d:7b:93:91:22:2c:b6:32:cf:7f:e7:ff:f4: 86:62:67:90:ed:14:8a:19:94:0f:bd:ba:53:ae:c4: 55:20:1b:93:ae:43:d0:fb:57:44:2a:f9:eb:87:a3: 93:c9:42:a7:33:a6:00:52:e6:be:5e:1a:c6:06:8e: e9:83:32:86:e0:bc:38:85:83:13:50:43:46:53:0e: 51:02:0d:de:ac:51:76:c5:a2:91:43:65:82:79:6a: 8b:38:66:e4:44:8b:97:db:8f:67:c3:26:c8:7c:1b: d6:73:c9:e4:23:2c:87:08:85:38:e0:9b:7e:0e:ac: 97:b0:e6:18:e7:6f:06:e1:e8:5c:d7:21:61:eb:94: f2:f7:b3:77:8b:21:ae:cb:90:9b:01:f6:8d:c2:6b: 68:5f:dd:b2:5d:93:6f:48:c1:e0:ab:88:17:1e:d7: 44:f3:88:e5:44:d5:f6:32:33:78:75:cf:93:c9:a5: 28:b0:f2:ab:21:0d:c1:a0:f3:a5:b8:ab:13:04:59: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:9C:BE:29:24:C9:00:A9:A0:6A:77:6E:6C:AF:3C:A5:A5:16:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dd:ea:3f:22:87:6a:1e:06:bd:47:22:80:ea:84:66:b7:d0: 16:a5:20:3f:57:eb:ad:77:e7:ea:80:a3:57:58:37:1a:fb:bb: c2:21:04:d6:96:5f:59:90:b4:c5:39:bb:03:b9:b9:da:38:19: fc:95:0a:bd:f2:2c:75:8e:dd:97:4a:d7:68:b3:dd:25:c4:23: 51:53:99:47:d4:02:db:61:4d:4a:b7:88:b7:30:c4:f2:4f:a3: a6:02:d1:e9:15:db:5a:98:06:af:44:8a:d6:58:c4:2a:86:e1: 16:54:10:22:a6:f0:49:13:84:bf:26:a4:04:30:72:91:b9:cd: 49:17:6e:07:04:fc:7b:29:01:95:17:20:2b:50:b6:e9:81:d9: e5:a8:86:58:ab:a4:59:aa:d4:8a:29:de:99:a3:b5:fc:4e:89: 8e:3c:e9:23:26:b7:8e:6c:5c:bd:41:5d:18:b8:44:b9:d2:31: 1c:21:f2:3d:93:24:18:41:c2:0f:7f:9e:38:fc:09:d2:c9:15: d6:17:f4:1d:46:46:9d:bf:76:b6:2d:a6:fd:b0:18:54:b6:32: 3b:22:cf:c5:fa:a5:d8:ca:47:b6:5f:1e:3b:1a:72:88:eb:a5: 90:a6:5e:96:ed:d9:d9:c4:51:e2:20:df:ec:12:f7:9d:08:7b: 25:fa:40:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEO9EidV/wuFgwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWVmYzk0ZTctZGJhMC00MGJiLTg2N2MtOTkzMWFiOTZjNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk4fP79Wls4uOdCS4Kjj1ZsvK4LPMg7gsCJD JTxe/6MHh3rUVsSCJqZu+U12byaTSH2RFFnjEvIH8gt7kT17k5EiLLYyz3/n//SG YmeQ7RSKGZQPvbpTrsRVIBuTrkPQ+1dEKvnrh6OTyUKnM6YAUua+XhrGBo7pgzKG 4Lw4hYMTUENGUw5RAg3erFF2xaKRQ2WCeWqLOGbkRIuX249nwybIfBvWc8nkIyyH CIU44Jt+DqyXsOYY528G4ehc1yFh65Ty97N3iyGuy5CbAfaNwmtoX92yXZNvSMHg q4gXHtdE84jlRNX2MjN4dc+TyaUosPKrIQ3BoPOluKsTBFl9AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYjnL4pJMkAqaBqd25srzylpRaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFhYzMzZDktOTg1MS0z ZTI5LWE4ZmItYzY4OTY1NDVhOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgA0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHd6j8ih2oeBr1HIoDqhGa30BalID9X66135+qAo1dYNxr7u8Ih BNaWX1mQtMU5uwO5udo4GfyVCr3yLHWO3ZdK12iz3SXEI1FTmUfUAtthTUq3iLcw xPJPo6YC0ekV21qYBq9EitZYxCqG4RZUECKm8EkThL8mpAQwcpG5zUkXbgcE/Hsp AZUXICtQtumB2eWohlirpFmq1Iop3pmjtfxOiY486SMmt45sXL1BXRi4RLnSMRwh 8j2TJBhBwg9/njj8CdLJFdYX9B1GRp2/drYtpv2wGFS2Mjsiz8X6pdjKR7ZfHjsa cojrpZCmXpbt2dnEUeIg3+wS950IeyX6QJw= -----END CERTIFICATE-----Generated at Tue Aug 5 22:59:57 2025 by rpki-client