$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa File: e6cab730-cab7-3562-abf1-bde2a425fd0a.roa (raw, json) Hash identifier: pV4zcE65CpWafTsBx+LMKuQOz6m4ULLArPxjTqUCaIk= Subject key identifier: BB:13:21:E8:2E:7F:82:11:E1:5D:49:AF:33:7C:76:A3:63:6C:3D:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849DF4CB51C5EF249E25FBE4100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa Signing time: Fri 16 May 2025 12:33:39 +0000 ROA not before: Fri 16 May 2025 12:33:39 +0000 ROA not after: Thu 14 Aug 2025 12:33:39 +0000 asID: 30036 IP address blocks: 2604:2d81:1d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:4c:b5:1c:5e:f2:49:e2:5f:be:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 16 12:33:39 2025 GMT Not After : Aug 14 12:33:39 2025 GMT Subject: CN=fa165d55-5099-467b-804f-ac8d6e9258bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:7b:96:b6:e6:f5:36:88:70:28:f8:9a:0a: 5c:09:fc:8a:3c:0d:12:47:f0:1a:31:3d:7d:a1:64: f6:dd:c5:81:e2:a4:db:75:ee:d4:40:cb:c1:68:a1: c1:6d:99:7f:5c:a1:fc:5d:23:db:af:07:54:13:04: ac:53:96:9a:82:42:a9:c6:38:56:57:34:47:c7:9e: 87:bd:37:54:ec:e1:2c:5e:71:7e:86:ee:7d:8a:5c: 92:d2:2c:14:46:cc:65:00:d8:6b:a5:97:f4:f2:5d: ae:28:37:d2:fe:9a:1c:ad:a4:f1:40:da:ff:f9:e6: af:de:d7:0f:22:f4:58:f1:22:85:4d:5d:b5:b4:0a: 54:bc:77:4c:de:cb:7c:d9:11:5f:4c:ad:e1:00:1f: 08:04:f0:bb:d5:ef:2d:c5:f5:70:4b:28:b2:81:53: df:2c:13:71:d4:02:f7:28:8b:b7:56:f3:69:3a:09: 7f:a2:ac:b5:5a:1f:cc:bb:fc:5b:67:63:2d:30:ee: 1b:04:43:a2:97:5e:48:8a:59:ce:6c:93:bc:14:6c: 54:5c:42:b6:7e:cd:28:f7:0f:dc:8d:03:ce:fb:fb: 0d:de:d4:34:eb:7e:e7:74:b7:47:19:16:97:08:37: 27:27:cd:a6:1a:1a:26:fb:3c:74:c9:61:d6:37:6b: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:13:21:E8:2E:7F:82:11:E1:5D:49:AF:33:7C:76:A3:63:6C:3D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3c:21:c8:4f:01:b6:94:51:a4:74:6f:2a:a7:a0:5b:f8:95: 33:8d:d7:4b:ec:1e:94:4c:2f:28:13:63:84:cd:11:a1:6c:21: 51:fc:df:b8:d2:5e:04:a4:ae:04:8a:53:24:87:8e:95:2a:52: 05:4c:5a:e5:9d:73:8a:1f:0b:04:28:0b:7b:fd:28:10:72:55: c4:3e:c9:bb:ad:f1:b9:c7:2a:54:7e:49:6a:e8:1e:19:1a:07: 4a:78:3d:df:fd:49:80:57:ed:ea:b0:df:07:83:3e:61:34:57: ee:e8:98:49:b0:3e:27:44:a2:50:0b:ae:81:22:c1:42:f0:ca: b2:10:9d:e6:48:a1:32:01:c5:bf:75:86:73:bd:90:82:28:9d: 8e:65:16:61:72:78:8c:de:ee:7c:31:c4:87:63:19:07:02:43: 67:4e:2f:e5:8d:79:06:11:51:e5:a3:9a:a0:3f:4b:69:a2:68: 7d:44:bd:6b:5a:1f:7d:03:3f:10:88:92:35:70:0b:c6:a3:cf: 4b:42:0e:fc:a5:4e:21:5b:ac:f8:05:29:87:b9:ab:8f:05:62: 00:46:d9:0f:94:4e:9f:4b:f1:f3:9e:a5:a2:45:e3:9c:ec:fd: eb:e8:64:86:e5:f6:27:79:78:c3:9a:1d:52:d0:6c:1d:4b:60: 23:ec:be:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfTLUcXvJJ4l++QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNjEyMzMzOVoXDTI1MDgxNDEyMzMzOVowLzEtMCsGA1UEAxMk ZmExNjVkNTUtNTA5OS00NjdiLTgwNGYtYWM4ZDZlOTI1OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1J7lrbm9TaIcCj4mgpcCfyKPA0SR/AaMT19 oWT23cWB4qTbde7UQMvBaKHBbZl/XKH8XSPbrwdUEwSsU5aagkKpxjhWVzRHx56H vTdU7OEsXnF+hu59ilyS0iwURsxlANhrpZf08l2uKDfS/pocraTxQNr/+eav3tcP IvRY8SKFTV21tApUvHdM3st82RFfTK3hAB8IBPC71e8txfVwSyiygVPfLBNx1AL3 KIu3VvNpOgl/oqy1Wh/Mu/xbZ2MtMO4bBEOil15IilnObJO8FGxUXEK2fs0o9w/c jQPO+/sN3tQ0637ndLdHGRaXCDcnJ82mGhom+zx0yWHWN2u0bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsTIeguf4IR4V1JrzN8dqNjbD2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTZjYWI3MzAtY2FiNy0z NTYyLWFiZjEtYmRlMmE0MjVmZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEE8IchPAbaUUaR0byqnoFv4lTON10vsHpRMLygTY4TNEaFsIVH8 37jSXgSkrgSKUySHjpUqUgVMWuWdc4ofCwQoC3v9KBByVcQ+ybut8bnHKlR+SWro HhkaB0p4Pd/9SYBX7eqw3weDPmE0V+7omEmwPidEolALroEiwULwyrIQneZIoTIB xb91hnO9kIIonY5lFmFyeIze7nwxxIdjGQcCQ2dOL+WNeQYRUeWjmqA/S2miaH1E vWtaH30DPxCIkjVwC8ajz0tCDvylTiFbrPgFKYe5q48FYgBG2Q+UTp9L8fOepaJF 45zs/evoZIbl9id5eMOaHVLQbB1LYCPsvog= -----END CERTIFICATE-----Generated at Sun Jun 15 19:14:55 2025 by rpki-client