$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa File: cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa (raw, json) Hash identifier: Qijs3y316Mhr8Agg49BD7QwulnbIY1S//52GqNjEoDs= Subject key identifier: 98:BF:F6:F9:0B:6B:70:EB:56:B5:C9:21:34:FE:65:A2:C4:DC:98:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410C5CE31C9E7B95AEAF740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:ec80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c5:ce:31:c9:e7:b9:5a:ea:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=784181dd-00d6-4353-86ee-f60107056f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:5d:94:a3:5a:d7:bb:34:04:47:2a:79:96: 4f:1c:b0:70:b5:f2:61:7a:21:7e:bc:07:9b:d3:56: 89:b1:90:98:42:83:a0:bf:ad:61:b8:91:56:4b:ec: 79:38:6b:b8:7d:ca:54:39:20:ab:e2:dd:1e:06:bf: 0f:d4:f6:8e:63:6d:0f:af:bd:8b:db:82:a5:08:00: 03:0d:70:13:1a:14:4b:c4:a0:a2:6a:d3:de:ca:e1: 8c:09:e2:87:25:52:04:16:47:5d:6f:ee:af:41:91: ba:47:44:24:90:90:19:f3:fd:89:7a:86:76:b0:cb: 1b:09:96:0d:51:a0:a6:bb:c2:ac:3a:21:c8:9e:44: 15:2a:90:36:fc:c5:75:94:d4:1f:b0:da:04:ae:cb: e0:da:35:b3:73:3c:8e:36:00:21:a5:67:b3:4a:1f: 76:2c:4c:03:a2:29:de:64:09:0f:c0:28:7a:f6:a4: 43:f4:82:21:1c:39:88:48:92:47:e5:fc:a8:54:c4: 84:08:21:04:cc:35:35:a2:84:5e:e1:9c:ad:51:fc: 69:58:dc:79:32:cd:fb:55:83:8f:f7:51:7e:04:64: 13:ea:c5:e2:e0:32:4b:47:5b:77:6e:cb:08:75:f0: b3:60:cb:d8:92:a1:e6:7c:7f:ab:ed:81:b3:ce:24: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:F6:F9:0B:6B:70:EB:56:B5:C9:21:34:FE:65:A2:C4:DC:98:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ec80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:80:22:80:18:61:17:d0:13:fa:f7:13:2a:52:53:68:88:32: 1f:6f:1b:89:95:09:46:f4:55:09:13:e4:a2:15:ff:f3:40:96: ef:05:53:52:8f:fc:9d:3a:26:54:3b:11:50:12:6a:52:98:c8: c3:4d:93:46:1e:c4:e6:c2:73:0e:a4:41:17:92:00:fa:df:5f: 8f:e0:db:b3:b9:81:9f:75:c9:8e:e6:f6:99:fa:09:de:89:33: 70:76:4d:2f:97:c9:82:7a:73:2b:a0:eb:4e:7e:c0:89:ed:cd: af:48:06:d6:3d:9b:e1:d7:10:8e:97:fd:d0:88:9c:14:92:98: 3c:e2:37:0f:b1:2f:31:b8:57:aa:35:2c:c5:78:5d:d5:66:29: 27:aa:cc:24:05:64:84:ba:46:02:1e:88:52:3a:bc:cb:3f:35: 18:73:56:d7:ec:0d:f5:5b:b9:26:98:14:55:3e:2c:57:83:11: a9:8d:e0:06:9d:83:7d:ba:a2:77:80:af:df:a7:2b:93:b2:5b: e2:1d:8b:b2:19:a9:aa:bc:a4:5a:e6:7d:be:0a:20:6c:25:98: 3a:94:2c:58:a2:5e:49:b2:53:06:16:3f:dd:68:7d:32:85:bf: 28:8d:0d:ab:ae:34:ba:15:39:d1:0b:fc:23:10:af:7c:f0:90: 0b:d6:7a:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMXOMcnnuVrq90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Nzg0MTgxZGQtMDBkNi00MzUzLTg2ZWUtZjYwMTA3MDU2ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKldlKNa17s0BEcqeZZPHLBwtfJheiF+vAeb 01aJsZCYQoOgv61huJFWS+x5OGu4fcpUOSCr4t0eBr8P1PaOY20Pr72L24KlCAAD DXATGhRLxKCiatPeyuGMCeKHJVIEFkddb+6vQZG6R0QkkJAZ8/2JeoZ2sMsbCZYN UaCmu8KsOiHInkQVKpA2/MV1lNQfsNoErsvg2jWzczyONgAhpWezSh92LEwDoine ZAkPwCh69qRD9IIhHDmISJJH5fyoVMSECCEEzDU1ooRe4ZytUfxpWNx5Ms37VYOP 91F+BGQT6sXi4DJLR1t3bssIdfCzYMvYkqHmfH+r7YGzziQUtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJi/9vkLa3DrVrXJITT+ZaLE3Jg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2QyOTBmNWEtNTczZC0z Y2IyLWExYmMtNmYzNWExM2UyNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuAIoAYYRfQE/r3EypSU2iIMh9vG4mVCUb0VQkT5KIV//NAlu8F U1KP/J06JlQ7EVASalKYyMNNk0YexObCcw6kQReSAPrfX4/g27O5gZ91yY7m9pn6 Cd6JM3B2TS+XyYJ6cyug605+wIntza9IBtY9m+HXEI6X/dCInBSSmDziNw+xLzG4 V6o1LMV4XdVmKSeqzCQFZIS6RgIeiFI6vMs/NRhzVtfsDfVbuSaYFFU+LFeDEamN 4Aadg326oneAr9+nK5OyW+Idi7IZqaq8pFrmfb4KIGwlmDqULFiiXkmyUwYWP91o fTKFvyiNDauuNLoVOdEL/CMQr3zwkAvWegE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:46 2025 by rpki-client