$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa File: e89248d4-873b-37e4-be54-5eb1398e7abc.roa (raw, json) Hash identifier: i4yVNxQ4UeeMF+GA66dlXdja36y4cVY6dUG2YxWLgvo= Subject key identifier: C0:2A:00:90:84:59:5D:94:F5:DD:39:80:1C:9D:79:7D:1D:F3:92:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0B206484D31A1C1CCBB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 2604:2d80:da80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b2:06:48:4d:31:a1:c1:cc:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=7e264eec-858f-41e9-8354-5b9267400d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:4a:0e:10:ba:72:84:77:b3:9f:7a:37:3f: 16:ae:f2:98:e5:65:fb:7e:2d:6d:56:a7:59:54:67: 11:3e:30:1a:74:ba:0c:1e:e4:65:c1:8d:9d:41:34: b1:f5:cd:6c:3b:c4:ad:49:9b:1a:28:cd:89:ca:71: 9c:0c:f9:5e:72:a5:c7:d6:6e:92:42:df:db:fa:05: a8:98:08:40:19:f8:ca:dc:b1:86:ba:f9:dd:0a:be: 3e:96:40:7d:95:a5:1f:34:b8:7f:cb:23:d8:fa:da: 35:ba:3b:35:72:23:ea:1b:2c:33:a7:cb:8a:7e:94: f5:f4:bf:48:64:1f:77:10:1c:a5:b7:06:13:72:9f: 6f:6c:58:9a:fc:da:ad:d8:91:7c:a3:7a:2b:48:eb: 03:13:f8:21:f5:c4:2b:f5:e6:cd:2c:9c:73:2c:f0: 2e:99:0b:5d:d7:e1:c6:5d:98:bf:32:c5:34:8e:14: 71:cf:6b:c2:d9:68:15:bb:10:6d:f4:c9:4d:dc:df: a0:e3:47:91:6c:8a:d2:db:36:5a:64:d2:16:eb:ff: e2:d3:46:fe:41:b9:df:19:d3:4e:02:a7:d4:af:a4: aa:d0:ef:9e:93:72:0c:2a:d5:a6:be:3d:53:c3:c4: 49:22:31:fd:d9:26:ad:c8:f6:d5:f8:7d:2c:ac:01: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:00:90:84:59:5D:94:F5:DD:39:80:1C:9D:79:7D:1D:F3:92:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:da80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:16:7a:d2:f4:20:34:f2:a3:46:47:e1:6b:09:b4:5e:5f: 5a:a1:ba:41:69:24:80:2f:50:64:c1:4a:5e:b9:f5:57:3b:04: d3:ac:59:f6:ba:45:1c:f1:c8:25:cd:48:14:c4:1b:1e:5d:28: b7:d0:28:1d:21:4b:fa:83:2f:e6:b3:ad:19:30:ae:90:71:e2: c9:b5:60:18:59:24:48:63:81:03:e9:91:b3:83:20:05:5a:8b: e1:b2:0c:15:00:36:d4:f2:c8:26:a4:1e:b3:3d:4d:85:66:37: 46:d0:86:6f:23:a8:6f:9b:77:70:06:1f:1a:29:d9:ad:19:c6: fd:50:d7:73:be:f0:0f:37:57:99:51:61:6c:3b:1c:9a:96:b9: 41:70:c8:df:2e:d1:70:06:00:d5:5a:27:3b:94:69:8f:b1:b9: 26:0d:b4:df:dc:81:ba:20:d7:eb:6e:38:6a:91:5e:d6:19:43: f6:44:49:2a:2c:2d:0a:7e:e7:07:54:06:38:08:aa:f8:69:36: 42:d1:e9:f4:ae:13:56:5c:1b:8f:c8:ed:62:c8:59:25:21:74: cf:7b:b8:9c:ae:84:2a:b7:70:b4:b6:7d:3e:ee:a9:89:26:93: 7e:3b:4a:e1:34:bf:8a:0f:fa:8b:b0:7f:fc:11:19:75:38:d1: 4c:79:0c:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp7sLIGSE0xocHMu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk N2UyNjRlZWMtODU4Zi00MWU5LTgzNTQtNWI5MjY3NDAwZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIRKDhC6coR3s596Nz8WrvKY5WX7fi1tVqdZ VGcRPjAadLoMHuRlwY2dQTSx9c1sO8StSZsaKM2JynGcDPlecqXH1m6SQt/b+gWo mAhAGfjK3LGGuvndCr4+lkB9laUfNLh/yyPY+to1ujs1ciPqGywzp8uKfpT19L9I ZB93EByltwYTcp9vbFia/Nqt2JF8o3orSOsDE/gh9cQr9ebNLJxzLPAumQtd1+HG XZi/MsU0jhRxz2vC2WgVuxBt9MlN3N+g40eRbIrS2zZaZNIW6//i00b+QbnfGdNO AqfUr6Sq0O+ek3IMKtWmvj1Tw8RJIjH92SatyPbV+H0srAEoTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMAqAJCEWV2U9d05gBydeX0d85KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTg5MjQ4ZDQtODczYi0z N2U0LWJlNTQtNWViMTM5OGU3YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKoFnrS9CA08qNGR+FrCbReX1qhukFpJIAvUGTBSl659Vc7BNOs Wfa6RRzxyCXNSBTEGx5dKLfQKB0hS/qDL+azrRkwrpBx4sm1YBhZJEhjgQPpkbOD IAVai+GyDBUANtTyyCakHrM9TYVmN0bQhm8jqG+bd3AGHxop2a0Zxv1Q13O+8A83 V5lRYWw7HJqWuUFwyN8u0XAGANVaJzuUaY+xuSYNtN/cgbog1+tuOGqRXtYZQ/ZE SSosLQp+5wdUBjgIqvhpNkLR6fSuE1ZcG4/I7WLIWSUhdM97uJyuhCq3cLS2fT7u qYkmk347SuE0v4oP+ouwf/wRGXU40Ux5DD0= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:41 2025 by rpki-client