$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa File: db659dcb-53ca-380c-8090-293e02fbc7ce.roa (raw, json) Hash identifier: KNAfqayjjcC7IOVCZAy8egE1lhnotM+7L4PzsdBeRjM= Subject key identifier: AC:34:D9:9C:C9:BA:9F:8F:28:19:80:D6:8B:0F:7B:02:58:59:F8:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AB91C0646346B33C1C97046C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2d81:1d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:06:46:34:6b:33:c1:c9:70:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1b54e82a-62bd-431e-85ed-9139bd54d781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:4f:ca:1e:af:53:9e:2f:d1:c2:d0:b7:cb: 38:52:33:77:0d:9a:6e:31:48:d0:5e:41:b5:94:d7: d8:6f:31:9a:cd:18:16:b9:2c:f9:f5:80:6a:34:17: b3:83:37:a1:32:f1:de:4c:43:91:d1:bb:81:16:ee: 31:37:79:40:f6:45:46:ba:35:68:e5:78:42:03:46: d1:14:77:37:17:a4:b3:91:20:7a:75:44:3b:04:98: b1:1e:f0:d3:9d:aa:c2:cd:4f:9f:cd:f2:8d:88:2a: f9:c5:6e:69:4f:5b:27:60:ca:b3:f6:e6:5f:41:c4: b7:89:39:b6:b4:6d:82:0c:ab:19:af:58:2d:8d:73: fd:4b:89:8f:c0:ca:7e:ba:6a:9c:88:4d:d2:8e:bc: 58:d3:f3:a7:e8:ba:a3:6f:49:da:7d:52:b3:89:7a: cd:0f:e1:b3:ef:0d:c5:db:09:33:dd:6f:fb:3f:9a: 63:ab:88:9c:ef:a4:c3:e6:8c:64:95:4f:15:5d:ba: b8:89:45:b0:6a:3c:51:21:40:fb:63:7e:b8:41:04: 59:ee:55:e0:10:07:f2:8d:7c:b5:95:02:81:58:01: 75:ae:db:91:24:b4:4f:ec:cf:cd:51:6e:a3:d6:41: 17:90:03:25:f7:ce:dc:72:aa:d7:a6:1a:5d:9b:eb: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:D9:9C:C9:BA:9F:8F:28:19:80:D6:8B:0F:7B:02:58:59:F8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:89:aa:fe:42:3c:e0:48:ac:c1:b5:d4:24:82:fc:8d:9b:2f: 50:6f:78:bb:ea:b3:93:f9:9f:df:cf:57:6c:d2:a3:fc:eb:a3: e4:fc:71:ae:28:fa:97:c2:06:a6:91:fd:00:a6:5c:62:eb:df: 28:f7:c9:fe:c4:2f:79:c9:55:c5:12:39:1e:a9:89:1f:0f:92: de:cd:17:a8:14:d3:a9:b2:37:2a:bc:f0:15:cc:0e:23:f0:33: 38:24:1b:9c:26:8f:91:ae:48:08:16:a4:22:4d:0c:2f:37:11: 05:57:15:fa:40:42:73:c4:ea:21:5a:5c:5f:96:26:4a:34:f6: 06:ca:e5:05:5f:c8:10:4b:ce:9d:35:22:3f:1a:d1:a5:c2:8d: f0:76:5e:c4:67:68:8c:d6:ac:2f:35:41:ec:61:55:89:a7:bc: 44:d1:0a:f5:f9:89:49:04:ee:01:1c:e1:43:e5:e4:4b:18:66: 4e:1b:7b:6c:a1:5c:8d:1c:fc:90:44:da:14:a3:75:47:35:60: f5:67:70:63:26:de:48:70:ce:a1:13:5f:f7:0f:ea:a2:03:2c: 5b:5f:70:41:20:06:7b:a8:b3:e5:b2:a1:36:83:65:4d:e4:6f: 54:ec:d1:57:ab:3f:97:a6:ef:ec:3c:9f:5f:f6:2c:70:74:59: 26:bc:ce:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAZGNGszwclwRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWI1NGU4MmEtNjJiZC00MzFlLTg1ZWQtOTEzOWJkNTRkNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5VPyh6vU54v0cLQt8s4UjN3DZpuMUjQXkG1 lNfYbzGazRgWuSz59YBqNBezgzehMvHeTEOR0buBFu4xN3lA9kVGujVo5XhCA0bR FHc3F6SzkSB6dUQ7BJixHvDTnarCzU+fzfKNiCr5xW5pT1snYMqz9uZfQcS3iTm2 tG2CDKsZr1gtjXP9S4mPwMp+umqciE3SjrxY0/On6Lqjb0nafVKziXrND+Gz7w3F 2wkz3W/7P5pjq4ic76TD5oxklU8VXbq4iUWwajxRIUD7Y364QQRZ7lXgEAfyjXy1 lQKBWAF1rtuRJLRP7M/NUW6j1kEXkAMl987ccqrXphpdm+vHAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKw02ZzJup+PKBmA1osPewJYWfhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI2NTlkY2ItNTNjYS0z ODBjLTgwOTAtMjkzZTAyZmJjN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCJqv5CPOBIrMG11CSC/I2bL1BveLvqs5P5n9/PV2zSo/zro+T8 ca4o+pfCBqaR/QCmXGLr3yj3yf7EL3nJVcUSOR6piR8Pkt7NF6gU06myNyq88BXM DiPwMzgkG5wmj5GuSAgWpCJNDC83EQVXFfpAQnPE6iFaXF+WJko09gbK5QVfyBBL zp01Ij8a0aXCjfB2XsRnaIzWrC81QexhVYmnvETRCvX5iUkE7gEc4UPl5EsYZk4b e2yhXI0c/JBE2hSjdUc1YPVncGMm3khwzqETX/cP6qIDLFtfcEEgBnuos+WyoTaD ZU3kb1Ts0VerP5em7+w8n1/2LHB0WSa8zhU= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:38 2025 by rpki-client