$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: wrHLqFjzPxaWLUM09CIorXSXiDQ1Wg1CB2HSRVf2vOo= Subject key identifier: A8:03:B7:3C:D7:49:93:2F:75:FE:24:65:B2:E1:5B:77:C7:39:35:3D Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584AA9C0DE47ED5842BF0D338680 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:de:47:ed:58:42:bf:0d:33:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=235b85fe-1614-4760-b206-69a024abdce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:bb:8a:52:6e:52:32:79:f2:eb:4f:ab:94: 3b:9a:7f:1c:69:4a:ac:a0:c2:cc:68:f8:c9:39:e8: e2:56:63:92:ec:13:c5:3c:4c:a2:09:66:57:79:2f: f7:47:b6:49:66:97:0f:a2:56:93:49:d4:d7:8a:65: 2c:ca:d9:88:a8:09:0d:eb:bb:68:72:db:d6:ba:2d: 7d:2c:78:d9:bb:7a:50:67:2b:13:77:4b:83:7e:cf: ac:20:72:65:71:11:5a:48:78:9c:fe:b6:65:f3:c1: 47:fe:0d:d5:46:6b:56:3e:b7:19:b4:2b:28:58:e3: e8:32:ce:1a:05:0d:2e:83:70:f0:47:d4:93:c6:f0: 38:1f:e9:25:42:57:94:f1:4e:92:22:f4:47:37:cb: 9e:74:fb:af:b4:c2:3b:98:99:42:ec:6d:7b:05:09: 3d:5f:3e:db:7e:7e:d2:14:09:42:58:3e:8f:4a:c5: 02:d1:ba:28:85:ee:05:e5:b4:1d:d4:50:46:47:9f: 1c:48:82:24:44:f4:9c:53:fb:0c:d6:be:48:ab:60: 8b:9e:fe:56:4d:c8:8e:ed:46:4d:54:ef:8a:e2:91: c8:ab:28:0f:30:0e:31:67:81:3d:14:cf:65:5c:c0: c4:5f:d9:76:3e:14:6a:77:02:b6:7c:a2:63:94:d5: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:03:B7:3C:D7:49:93:2F:75:FE:24:65:B2:E1:5B:77:C7:39:35:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ad:f9:9e:5e:0f:a6:76:ed:09:a7:f8:ec:02:5c:e9:9a:aa: 72:0d:c3:0d:65:5f:cf:18:52:95:19:9a:82:ea:02:67:53:57: 82:7b:6c:53:60:4e:d6:2a:c7:40:dc:74:67:2d:68:11:6b:14: 47:11:29:6a:65:78:18:f0:0c:92:b5:ed:c1:20:db:9d:80:48: f2:fb:71:70:1f:bd:6d:14:6e:74:63:3e:ef:a8:14:d5:83:87: ad:d3:85:f4:44:ad:fa:cb:ec:0c:0d:43:56:56:c5:44:4a:b1: a9:db:4f:72:69:23:75:17:b7:0a:75:ad:ff:2a:16:5a:28:c5: c4:53:49:3d:52:82:c3:3e:7e:e0:66:11:a1:c4:89:3b:0f:e2: f8:b1:9e:16:44:7a:d9:3f:f8:46:c7:65:aa:bb:2d:98:d3:80: be:b5:05:3f:94:6f:56:40:79:8c:af:47:c4:d8:04:65:bb:0c: de:19:c2:7d:9b:fa:66:b4:23:10:1e:17:12:ab:f1:fb:96:13: 36:d6:9e:2e:52:ba:dd:5a:72:67:01:a8:46:00:79:af:53:47: 40:f4:80:1b:22:46:4b:de:4e:d0:68:55:28:5c:69:b9:1b:72: a9:40:25:96:af:b6:d5:b0:a5:95:04:77:a8:95:0b:bf:cf:c2: 4b:1c:07:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqpwN5H7VhCvw0zhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk MjM1Yjg1ZmUtMTYxNC00NzYwLWIyMDYtNjlhMDI0YWJkY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD27ilJuUjJ58utPq5Q7mn8caUqsoMLMaPjJ OejiVmOS7BPFPEyiCWZXeS/3R7ZJZpcPolaTSdTXimUsytmIqAkN67toctvWui19 LHjZu3pQZysTd0uDfs+sIHJlcRFaSHic/rZl88FH/g3VRmtWPrcZtCsoWOPoMs4a BQ0ug3DwR9STxvA4H+klQleU8U6SIvRHN8uedPuvtMI7mJlC7G17BQk9Xz7bfn7S FAlCWD6PSsUC0boohe4F5bQd1FBGR58cSIIkRPScU/sM1r5Iq2CLnv5WTciO7UZN VO+K4pHIqygPMA4xZ4E9FM9lXMDEX9l2PhRqdwK2fKJjlNWoRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgDtzzXSZMvdf4kZbLhW3fHOTU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCerfmeXg+mdu0Jp/jsAlzpmqpyDcMNZV/PGFKVGZqC6gJnU1eCe2xT YE7WKsdA3HRnLWgRaxRHESlqZXgY8AySte3BINudgEjy+3FwH71tFG50Yz7vqBTV g4et04X0RK36y+wMDUNWVsVESrGp209yaSN1F7cKda3/KhZaKMXEU0k9UoLDPn7g ZhGhxIk7D+L4sZ4WRHrZP/hGx2Wquy2Y04C+tQU/lG9WQHmMr0fE2ARluwzeGcJ9 m/pmtCMQHhcSq/H7lhM21p4uUrrdWnJnAahGAHmvU0dA9IAbIkZL3k7QaFUoXGm5 G3KpQCWWr7bVsKWVBHeolQu/z8JLHAfr -----END CERTIFICATE-----Generated at Wed Aug 6 09:40:21 2025 by rpki-client