$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa File: a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json) Hash identifier: sP3ZDNqUvSvpBzLPiYuQUTCS6/rRGd3UfJCnbzBjTU4= Subject key identifier: 5D:74:FC:C7:E6:48:E3:2F:49:A3:39:74:91:4D:A4:09:BB:B1:9F:9B Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F4328584A9D30FC95BEEEEC9F59BC5A00 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36549 IP address blocks: 2604:1780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fc:95:be:ee:ec:9f:59:bc:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=f0413dd8-1d76-47ec-899a-c9333e54bea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:ac:6f:90:b3:1a:16:dd:46:08:db:d4:69: dd:5a:51:7d:0a:7c:de:3f:13:18:6f:fc:f7:a2:9d: 48:4e:35:19:d4:16:c0:d1:29:75:d8:ac:06:e7:e5: df:b8:f3:94:9b:83:3b:49:cb:0a:ae:83:b7:11:a9: 83:1d:37:60:bf:a2:cc:ec:6c:4d:29:a7:77:f0:86: d6:f7:38:23:36:fe:cc:e3:c9:0c:e1:fe:40:21:9f: 82:24:88:79:23:08:6b:ae:dd:99:62:b3:bb:a9:89: d6:94:e9:5f:61:ef:d1:00:8f:9a:58:aa:b3:a3:db: a4:de:98:54:00:e2:fe:16:0f:ef:af:48:99:b9:67: f5:c6:02:e2:c1:35:8a:df:76:86:d0:59:d0:28:e5: ca:c4:ad:9b:8c:67:f1:35:ba:7e:ea:41:06:21:18: fa:a2:89:69:6d:53:3a:a9:35:07:1f:ab:b6:07:9b: 56:9d:8a:72:bb:b4:7a:a1:02:b6:1d:de:4d:ba:4f: cd:f4:04:3b:40:26:61:e4:c3:c4:39:89:c2:da:53: 68:ed:e8:8a:b6:48:ff:63:77:34:60:e0:b6:d7:b1: bc:46:a5:7d:82:36:94:67:8b:03:8a:bb:5c:05:09: d4:08:0d:df:a8:39:51:c2:ea:af:b0:16:e2:71:ba: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:74:FC:C7:E6:48:E3:2F:49:A3:39:74:91:4D:A4:09:BB:B1:9F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv6: 2604:1780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5a:56:cf:46:33:a3:60:65:48:9e:d3:d8:96:7f:31:1b:58: 0f:5f:cf:08:21:0e:dc:62:59:d8:7a:65:d9:70:77:ca:68:d0: a0:dc:37:19:19:49:36:67:7d:97:27:9d:ee:7c:12:40:3d:0a: 25:0a:1e:08:55:67:b4:bb:14:70:43:b7:5e:d9:9e:78:a8:3c: 82:2f:7f:e9:b4:40:a3:b4:2c:e4:b4:b6:6d:ed:e5:b6:52:51: a4:9e:fc:48:d2:20:25:02:f7:b1:54:59:03:20:a6:0e:3e:81: c3:bf:27:ee:58:3e:9c:4b:0e:3a:bf:4d:b4:68:40:7a:0c:1b: 5d:1b:be:9a:cb:d1:bf:38:62:05:f2:20:69:4b:d9:22:7d:38: 94:d9:47:84:06:3e:e4:8b:a3:2a:e4:05:38:b5:33:4f:3f:07: d5:50:8d:66:ce:dc:ed:47:70:2c:ba:07:23:db:bb:0e:23:4d: df:b8:1e:fe:b6:cd:6f:94:ac:f0:92:f8:07:b2:ed:ff:d0:af: 53:a7:ed:2c:15:0d:fc:b0:c5:35:c0:a2:50:83:9f:d1:6f:fc: 65:4b:21:87:31:c1:14:c5:4f:e0:c2:3b:9b:02:ef:38:4c:36: 49:0a:75:d4:00:1b:43:9d:5e:c6:7b:d7:da:43:38:3e:9d:07: 4a:21:92:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqdMPyVvu7sn1m8WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZjA0MTNkZDgtMWQ3Ni00N2VjLTg5OWEtYzkzMzNlNTRiZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRysb5CzGhbdRgjb1GndWlF9CnzePxMYb/z3 op1ITjUZ1BbA0Sl12KwG5+XfuPOUm4M7ScsKroO3EamDHTdgv6LM7GxNKad38IbW 9zgjNv7M48kM4f5AIZ+CJIh5Iwhrrt2ZYrO7qYnWlOlfYe/RAI+aWKqzo9uk3phU AOL+Fg/vr0iZuWf1xgLiwTWK33aG0FnQKOXKxK2bjGfxNbp+6kEGIRj6oolpbVM6 qTUHH6u2B5tWnYpyu7R6oQK2Hd5Nuk/N9AQ7QCZh5MPEOYnC2lNo7eiKtkj/Y3c0 YOC217G8RqV9gjaUZ4sDirtcBQnUCA3fqDlRwuqvsBbicbqgWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF10/MfmSOMvSaM5dJFNpAm7sZ+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvYTNjNjg2NzUtYTk4Zi0z OWVjLWE4OWYtMmI3N2EzZGY0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjWlbPRjOjYGVIntPYln8xG1gPX88IIQ7cYlnYemXZcHfKaNCg3DcZ GUk2Z32XJ53ufBJAPQolCh4IVWe0uxRwQ7de2Z54qDyCL3/ptECjtCzktLZt7eW2 UlGknvxI0iAlAvexVFkDIKYOPoHDvyfuWD6cSw46v020aEB6DBtdG76ay9G/OGIF 8iBpS9kifTiU2UeEBj7ki6Mq5AU4tTNPPwfVUI1mztztR3Asugcj27sOI03fuB7+ ts1vlKzwkvgHsu3/0K9Tp+0sFQ38sMU1wKJQg5/Rb/xlSyGHMcEUxU/gwjubAu84 TDZJCnXUABtDnV7Ge9faQzg+nQdKIZJo -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:47 2025 by rpki-client