$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa File: c39f5961-d370-3743-b3fc-bd13cbf77407.roa (raw, json) Hash identifier: DXeD7IPm0ZKymn5tGyhvnHOGUm1VSGANgYJ0ktMx1Ok= Subject key identifier: C2:30:A2:7C:A2:85:61:0A:EC:E4:66:D8:0C:AB:AE:C5:47:E3:D8:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124D5D093ECC286B2F0000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:6b80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4d:5d:09:3e:cc:28:6b:2f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=88fc8ccd-d57a-4b01-98eb-bf65d7e68296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:dd:78:59:ee:a3:9b:af:fc:22:00:00:43: e0:6b:2e:ea:c5:a3:22:8f:5b:c9:c0:e3:f9:dc:3c: cd:8f:f4:b7:25:ce:cd:32:50:48:7f:57:f8:0d:8b: d6:78:20:e6:83:ac:e6:ae:9f:36:d1:f8:84:41:77: 8a:aa:05:27:20:d5:e7:4c:60:08:0d:a5:ca:01:cf: bf:33:c6:be:30:db:80:8c:32:96:4d:f5:8e:7a:63: 4e:cd:20:3a:d9:8f:96:3c:0e:ae:5d:30:df:25:7a: 51:c3:0f:39:b1:73:6d:62:3e:63:61:1f:2c:9c:fe: ea:ad:3b:f1:9f:2c:79:34:e4:d1:c5:53:5e:3b:cd: c9:68:d3:6b:c3:56:06:e0:53:e8:af:11:d9:df:c7: 77:af:cd:ca:85:ad:83:86:f8:5a:1b:bf:eb:c9:f3: 99:fc:60:3c:60:cf:b4:47:a9:9e:33:d8:6a:c4:c7: ab:95:46:17:95:48:25:09:67:a8:24:25:43:95:8c: 19:ac:e0:51:95:37:c4:74:0c:8f:7c:d6:0c:51:36: 9c:3e:79:71:05:46:fc:4a:03:e1:1e:ba:33:12:03: c5:fd:9a:e2:f2:2b:db:e3:ad:8a:a2:6c:83:be:f9: c9:68:11:91:00:e7:f7:44:03:eb:2d:45:ac:b9:de: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:30:A2:7C:A2:85:61:0A:EC:E4:66:D8:0C:AB:AE:C5:47:E3:D8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6b80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b3:7b:88:ae:96:94:47:96:e6:34:98:2e:3c:96:7e:23:ef: fd:00:2d:c0:34:bf:4c:8b:40:4b:d0:f3:da:87:82:a7:ab:85: b9:92:74:52:22:0b:3f:d9:1d:f1:dc:28:e6:52:16:9a:06:ad: 46:2a:89:e0:9d:eb:bb:13:93:90:b4:46:85:25:40:4c:19:e0: 7b:d3:ba:8f:c8:b0:53:1b:d6:29:a9:33:c6:ac:a5:f4:c3:42: 5d:0e:22:6d:42:65:7b:63:09:5f:5c:c4:86:e8:9d:c3:44:6d: eb:37:d9:39:5d:7f:44:9a:a2:4c:a6:74:7a:67:f8:14:eb:41: e0:7d:20:22:c8:c9:07:e3:b0:d1:63:39:16:6b:74:1f:5b:ae: f2:4d:ad:04:3e:44:0a:88:00:3b:16:a5:40:53:83:e8:87:0c: ad:c8:78:97:46:8a:4b:0c:37:d7:a6:f8:74:fa:1e:fa:1b:d0: 62:6b:5f:a8:e2:70:9f:16:3e:6b:c3:ea:08:14:67:b1:cc:c0: a8:d0:17:19:ad:26:39:01:d1:9c:6d:d6:de:ae:2a:5b:e1:4f: 2c:a0:39:0a:9a:52:de:1b:3c:a6:28:4d:43:f5:22:44:eb:b0: 0a:c3:3f:75:4f:52:ca:93:ea:71:1a:cb:0d:69:89:24:0c:e3: 19:2d:14:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEk1dCT7MKGsvAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODhmYzhjY2QtZDU3YS00YjAxLTk4ZWItYmY2NWQ3ZTY4Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnffdeFnuo5uv/CIAAEPgay7qxaMij1vJwOP5 3DzNj/S3Jc7NMlBIf1f4DYvWeCDmg6zmrp820fiEQXeKqgUnINXnTGAIDaXKAc+/ M8a+MNuAjDKWTfWOemNOzSA62Y+WPA6uXTDfJXpRww85sXNtYj5jYR8snP7qrTvx nyx5NOTRxVNeO83JaNNrw1YG4FPorxHZ38d3r83Kha2DhvhaG7/ryfOZ/GA8YM+0 R6meM9hqxMerlUYXlUglCWeoJCVDlYwZrOBRlTfEdAyPfNYMUTacPnlxBUb8SgPh HrozEgPF/Zri8ivb462KomyDvvnJaBGRAOf3RAPrLUWsud5lHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMIwonyihWEK7ORm2AyrrsVH49i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM5ZjU5NjEtZDM3MC0z NzQzLWIzZmMtYmQxM2NiZjc3NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyze4iulpRHluY0mC48ln4j7/0ALcA0v0yLQEvQ89qHgqerhbmS dFIiCz/ZHfHcKOZSFpoGrUYqieCd67sTk5C0RoUlQEwZ4HvTuo/IsFMb1impM8as pfTDQl0OIm1CZXtjCV9cxIboncNEbes32Tldf0SaokymdHpn+BTrQeB9ICLIyQfj sNFjORZrdB9brvJNrQQ+RAqIADsWpUBTg+iHDK3IeJdGiksMN9em+HT6Hvob0GJr X6jicJ8WPmvD6ggUZ7HMwKjQFxmtJjkB0Zxt1t6uKlvhTyygOQqaUt4bPKYoTUP1 IkTrsArDP3VPUsqT6nEayw1piSQM4xktFFw= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:44 2025 by rpki-client