$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae4dac1c-8e2c-3a42-87c6-fca6b4782f8d.roa File: ae4dac1c-8e2c-3a42-87c6-fca6b4782f8d.roa (raw, json) Hash identifier: /yeukTPkYCCFnzl8iJxwcY/+mSNanwyUeHo73m+ypCY= Subject key identifier: FD:83:29:27:F5:08:A6:0F:18:17:E2:15:39:33:E9:A7:BD:D6:71:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC0740DD919EF7FB4CCD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae4dac1c-8e2c-3a42-87c6-fca6b4782f8d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:db00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:07:40:dd:91:9e:f7:fb:4c:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=429be26e-0d02-42ea-bea5-59c936d1c8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:4b:fb:e7:1d:aa:a0:4c:c8:3e:1a:20:36: 40:c6:b7:94:0a:f0:be:5c:03:ed:ed:5e:94:a3:47: 06:f8:78:b0:fa:48:4d:65:85:b8:c0:11:4e:7b:e2: 8d:c8:0c:00:a5:a1:88:26:15:04:85:77:f0:db:58: a3:35:65:e7:2d:6f:72:d5:8d:76:ca:58:4a:34:f1: 42:46:3b:c6:6e:67:2f:d8:bf:6c:b2:45:7f:9b:9e: 3c:bc:b9:75:b8:08:26:52:e4:7e:c7:31:73:09:8a: 6d:a1:c8:1d:3b:64:93:42:6c:41:d1:c5:a3:c8:8d: fd:fd:31:7f:dd:dc:4f:dd:00:25:c8:c4:bb:f8:ef: f8:0d:d6:07:cc:a9:13:50:19:00:59:0f:53:b0:4a: 3e:30:5a:17:ab:b3:f2:32:b2:0b:10:b4:b9:18:f8: 8c:66:c5:12:f0:61:0c:b5:36:61:7c:14:a2:a4:47: fb:f9:f9:a8:6f:a6:e6:fd:1d:d1:97:4e:d0:ec:4c: 1a:3d:59:8f:b8:6d:84:25:84:b1:a4:66:7f:0d:f9: 0a:08:58:3d:94:55:f3:6f:fa:e1:a4:30:3b:82:bc: da:87:71:d0:59:c6:8f:7a:e1:3a:de:47:e7:57:ad: 22:aa:e2:76:56:30:1c:33:e8:b6:3c:77:a5:2a:fb: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:29:27:F5:08:A6:0F:18:17:E2:15:39:33:E9:A7:BD:D6:71:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae4dac1c-8e2c-3a42-87c6-fca6b4782f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:db00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b0:53:29:7a:36:36:f1:a0:d8:c1:6a:9b:22:40:0a:3e:a3: 41:a2:3c:a7:73:5c:47:d9:bf:bb:38:4a:40:a8:b9:08:14:bd: e2:97:fc:32:26:f8:b3:ab:e5:b2:7f:8b:4b:f0:87:0b:9d:07: 0b:9d:dc:76:51:9b:6c:6d:25:a2:6e:36:52:3b:9b:52:f9:6a: 25:3f:ab:78:0d:7d:ad:91:6e:ba:28:bb:0e:d8:fc:db:a3:71: bc:48:94:7e:0a:6f:33:bb:7b:8b:4c:db:a8:02:46:fe:fc:1a: d6:fd:99:5e:0f:87:5e:66:ae:0c:e2:64:3e:e1:a1:78:08:33: 1e:dd:a9:bb:a9:7e:27:18:ea:a8:88:23:33:ee:a6:57:14:d0: 94:55:21:23:e2:c2:b1:94:17:08:ca:94:9a:ed:5c:af:15:5f: fc:ff:d7:a7:af:b7:e9:e5:e0:52:17:07:06:19:5c:3f:e0:97: 48:70:56:ae:25:c7:4b:4c:dd:42:c5:c2:fc:d3:72:59:95:fa: 09:15:39:43:6a:31:0e:1e:43:a2:e5:0f:c9:a5:43:5a:54:df: a6:fe:98:ad:81:cb:1b:ae:fd:af:7c:62:cf:ae:a5:80:35:8b: 36:28:2e:72:bb:f5:79:bd:fe:ac:a6:03:d7:91:68:e0:2f:50: 2e:b3:cc:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqG3AdA3ZGe9/tMzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDI5YmUyNmUtMGQwMi00MmVhLWJlYTUtNTljOTM2ZDFjOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nhL++cdqqBMyD4aIDZAxreUCvC+XAPt7V6U o0cG+Hiw+khNZYW4wBFOe+KNyAwApaGIJhUEhXfw21ijNWXnLW9y1Y12ylhKNPFC RjvGbmcv2L9sskV/m548vLl1uAgmUuR+xzFzCYptocgdO2STQmxB0cWjyI39/TF/ 3dxP3QAlyMS7+O/4DdYHzKkTUBkAWQ9TsEo+MFoXq7PyMrILELS5GPiMZsUS8GEM tTZhfBSipEf7+fmob6bm/R3Rl07Q7EwaPVmPuG2EJYSxpGZ/DfkKCFg9lFXzb/rh pDA7grzah3HQWcaPeuE63kfnV60iquJ2VjAcM+i2PHelKvvpOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2DKSf1CKYPGBfiFTkz6ae91nGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU0ZGFjMWMtOGUyYy0z YTQyLTg3YzYtZmNhNmI0NzgyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmwUyl6NjbxoNjBapsiQAo+o0GiPKdzXEfZv7s4SkCouQgUveKX /DIm+LOr5bJ/i0vwhwudBwud3HZRm2xtJaJuNlI7m1L5aiU/q3gNfa2Rbroouw7Y /NujcbxIlH4KbzO7e4tM26gCRv78Gtb9mV4Ph15mrgziZD7hoXgIMx7dqbupficY 6qiIIzPuplcU0JRVISPiwrGUFwjKlJrtXK8VX/z/16evt+nl4FIXBwYZXD/gl0hw Vq4lx0tM3ULFwvzTclmV+gkVOUNqMQ4eQ6LlD8mlQ1pU36b+mK2Byxuu/a98Ys+u pYA1izYoLnK79Xm9/qymA9eRaOAvUC6zzEw= -----END CERTIFICATE-----Generated at Tue Aug 5 22:58:08 2025 by rpki-client