$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa File: dc3469f6-adec-3719-b049-257d25b1aec8.roa (raw, json) Hash identifier: c9YHJ4XrQbkw9WXyTToOPouZ+TVwMiNW/iuFHJdbK1g= Subject key identifier: 38:30:C9:13:4B:8B:60:93:90:93:F8:CC:D1:D2:15:90:3A:AD:8F:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575EE5259EC930FC59B1F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 2604:2d80:de80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ee:52:59:ec:93:0f:c5:9b:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=4f0cbdea-a09a-4a52-a6a4-b386a6484783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b5:a4:98:57:c3:2e:77:6f:fd:dc:c1:4f:66: 2b:e0:e2:ac:b7:2c:05:0b:3b:af:9f:5a:1e:c3:5a: 63:5b:bd:81:d7:92:a0:c8:65:86:c5:3b:e2:7f:05: 6a:b8:bf:19:d9:d8:79:8a:f7:20:48:30:72:3e:dc: 3f:cd:f8:9b:3c:eb:70:26:16:d3:14:10:99:38:cc: ed:34:d5:71:e0:88:19:17:b4:b1:9a:2c:d3:71:e1: a4:c6:df:e0:c9:58:ed:87:6e:df:0b:41:c0:0d:1e: b8:81:bd:22:bb:5f:ac:d7:36:04:be:5f:c1:cf:4f: 73:73:39:9f:6f:99:f0:3a:32:12:df:f9:b4:10:f0: a0:44:73:48:89:e6:bc:bc:86:e9:cd:c5:3d:32:62: ba:b9:db:b1:9f:f0:ad:74:ee:c9:0d:90:b7:20:c4: 64:52:9a:25:08:b2:30:53:86:ba:c8:0d:26:c2:da: f3:65:98:61:36:d6:4a:04:66:9d:5e:88:df:1d:e6: 3d:6a:3f:24:28:71:28:44:3f:2f:47:db:65:45:d5: 6d:da:b8:48:18:1f:43:64:4c:8a:00:1a:51:0d:14: 44:c3:1c:4d:68:0b:c4:f6:24:e1:f1:19:cb:ca:26: 43:5a:eb:fb:7c:50:ce:2c:e5:c5:e3:ba:5f:e9:ee: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:30:C9:13:4B:8B:60:93:90:93:F8:CC:D1:D2:15:90:3A:AD:8F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:de80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8b:95:84:e9:47:0b:d9:91:54:18:3f:8b:26:c3:47:9a:4a: 3a:61:9b:9a:63:bc:87:83:52:d4:3f:82:6e:04:c0:f0:5c:f7: aa:c6:3a:e0:43:20:bb:de:20:6e:52:8a:7e:01:f5:68:13:a1: 2f:bd:bf:83:68:8e:29:16:b1:89:56:33:49:13:16:43:73:a6: 97:24:bb:5b:1f:46:1c:b5:27:53:61:f9:f4:ee:ac:86:83:04: c3:c4:70:fe:66:0f:c9:64:cb:54:51:12:55:59:83:0f:22:82: 40:28:20:f7:91:57:fa:e2:79:f5:4c:6b:2f:af:53:88:26:11: ae:6c:6c:30:10:88:c6:75:45:c1:f3:85:5a:14:23:33:1a:20: 6b:20:69:8d:f3:2e:e1:ba:ad:c4:5a:f3:bf:e9:dc:1c:a6:16: d8:bc:5b:5a:75:ad:af:5a:84:f7:a8:f9:fb:6a:70:d3:d8:fa: d6:97:10:8d:7f:fa:ab:c5:9d:67:11:c1:40:0a:a7:51:d4:e6: 3d:db:c8:f7:d9:3c:35:08:11:7e:77:58:49:da:c4:50:53:b4: 07:e0:da:08:bc:5a:9e:c6:c9:21:35:59:02:88:4a:48:d1:bb: ff:62:93:da:e6:c6:3a:db:d7:f0:ad:9b:c2:75:3f:e8:52:0e: 0e:f9:a5:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFde5SWeyTD8WbH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NGYwY2JkZWEtYTA5YS00YTUyLWE2YTQtYjM4NmE2NDg0NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLWkmFfDLndv/dzBT2Yr4OKstywFCzuvn1oe w1pjW72B15KgyGWGxTvifwVquL8Z2dh5ivcgSDByPtw/zfibPOtwJhbTFBCZOMzt NNVx4IgZF7SxmizTceGkxt/gyVjth27fC0HADR64gb0iu1+s1zYEvl/Bz09zczmf b5nwOjIS3/m0EPCgRHNIiea8vIbpzcU9MmK6uduxn/CtdO7JDZC3IMRkUpolCLIw U4a6yA0mwtrzZZhhNtZKBGadXojfHeY9aj8kKHEoRD8vR9tlRdVt2rhIGB9DZEyK ABpRDRREwxxNaAvE9iTh8RnLyiZDWuv7fFDOLOXF47pf6e6qlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgwyRNLi2CTkJP4zNHSFZA6rY/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGMzNDY5ZjYtYWRlYy0z NzE5LWIwNDktMjU3ZDI1YjFhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgN6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeLlYTpRwvZkVQYP4smw0eaSjphm5pjvIeDUtQ/gm4EwPBc96rG OuBDILveIG5Sin4B9WgToS+9v4NojikWsYlWM0kTFkNzppcku1sfRhy1J1Nh+fTu rIaDBMPEcP5mD8lky1RRElVZgw8igkAoIPeRV/riefVMay+vU4gmEa5sbDAQiMZ1 RcHzhVoUIzMaIGsgaY3zLuG6rcRa87/p3BymFti8W1p1ra9ahPeo+ftqcNPY+taX EI1/+qvFnWcRwUAKp1HU5j3byPfZPDUIEX53WEnaxFBTtAfg2gi8Wp7GySE1WQKI SkjRu/9ik9rmxjrb1/Ctm8J1P+hSDg75pY8= -----END CERTIFICATE-----Generated at Wed Aug 6 07:59:19 2025 by rpki-client