$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa File: 379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa (raw, json) Hash identifier: sFjEf5tBVjbXDETDPYG0GqSjntoKbltnGCivHZYYh7U= Subject key identifier: F0:F5:80:FC:39:EB:05:08:0B:28:81:1F:E3:B6:CC:EB:DB:6C:0A:E7 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584AAB2671304F263B1436A42D30 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2604:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:71:30:4f:26:3b:14:36:a4:2d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=5c2e6351-a64f-46ca-bcb0-6acce07ab6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:9f:5b:19:41:d9:88:7b:fe:b8:3b:6b:f6: 28:4f:c8:af:11:5d:da:6a:ae:b3:48:ba:ff:13:e7: c0:3f:57:97:8c:7b:04:9d:c0:6c:52:25:55:0e:2a: 97:91:68:12:ce:48:a0:03:f8:4d:e3:21:bf:6b:dc: f6:24:85:05:9e:fe:3c:b2:7a:ac:60:7c:7d:82:ab: 84:52:99:91:48:40:56:ca:77:1d:0a:ab:e7:c6:d2: bc:3a:ce:9c:f4:c2:a5:f8:17:34:e1:4d:7e:3f:a9: 97:a0:2d:03:61:06:7d:03:94:46:e5:dc:1f:9e:eb: da:a4:06:f9:92:37:f4:ee:e9:7c:b1:ec:58:4a:af: 21:2c:f9:cc:39:67:10:e1:52:bb:c7:89:28:1f:1a: be:0f:1f:4b:ae:45:0e:7d:dc:e8:06:37:df:bb:e9: db:34:86:98:26:0e:c0:0f:6a:7b:a2:64:11:d6:08: 65:c9:e8:c5:10:13:d3:8c:21:ce:a1:f7:29:81:9d: ee:ab:ae:3c:27:e3:33:92:0a:3f:30:fd:75:97:1b: 28:f7:b2:e6:8c:f7:e2:57:69:60:fb:ab:6a:a4:1d: 74:f9:de:38:79:98:56:ef:db:84:6b:bb:89:1d:43: 02:d2:da:31:45:cc:fd:12:3d:db:d0:59:ca:db:52: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F5:80:FC:39:EB:05:08:0B:28:81:1F:E3:B6:CC:EB:DB:6C:0A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ab:bb:fc:10:57:6a:fb:9b:c0:bd:95:77:90:08:17:55:44: 12:54:60:0a:c7:f4:84:65:8f:7f:af:b2:ee:02:8a:7c:bc:98: 89:04:e5:3c:90:3d:b4:6f:2f:e5:8c:21:bb:a2:da:9d:08:f2: c6:7f:99:b2:09:d8:a9:44:f4:c2:f8:44:85:e7:b3:70:8c:9b: 4a:92:0d:b4:b4:cd:71:d3:a1:c0:44:0f:e8:0d:d4:da:eb:ee: 40:31:38:5c:44:7b:c1:8c:7e:0a:8d:cb:f1:55:fa:c3:84:42: 7b:ca:7a:e4:e5:88:48:d3:9e:ca:5d:33:4a:87:43:6a:be:16: 9b:3b:6c:ed:66:6b:ac:24:c8:02:af:47:6c:30:d3:df:09:06: 44:be:ef:28:1c:b2:a0:95:99:59:d5:2b:1e:07:1f:24:f9:06: b9:64:49:2e:ba:bc:94:e6:be:bb:d2:70:83:42:3c:04:8f:d3: 1c:ee:af:8c:61:7e:3c:20:37:a7:3b:65:39:c6:91:52:c2:16: e7:18:60:1d:ca:bd:e1:74:52:55:52:e6:ea:0a:b4:12:ff:d9: 1d:c6:f1:2f:da:a5:f8:1e:f3:b3:02:6a:75:de:92:d2:1e:02: 40:aa:76:ea:51:93:67:6e:10:49:8d:ba:92:99:e4:41:ef:e4: 49:c3:44:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqrJnEwTyY7FDakLTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NWMyZTYzNTEtYTY0Zi00NmNhLWJjYjAtNmFjY2UwN2FiNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMSfWxlB2Yh7/rg7a/YoT8ivEV3aaq6zSLr/ E+fAP1eXjHsEncBsUiVVDiqXkWgSzkigA/hN4yG/a9z2JIUFnv48snqsYHx9gquE UpmRSEBWyncdCqvnxtK8Os6c9MKl+Bc04U1+P6mXoC0DYQZ9A5RG5dwfnuvapAb5 kjf07ul8sexYSq8hLPnMOWcQ4VK7x4koHxq+Dx9LrkUOfdzoBjffu+nbNIaYJg7A D2p7omQR1ghlyejFEBPTjCHOofcpgZ3uq648J+Mzkgo/MP11lxso97LmjPfiV2lg +6tqpB10+d44eZhW79uEa7uJHUMC0toxRcz9Ej3b0FnK21KvkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPD1gPw56wUICyiBH+O2zOvbbArnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMzc5YTJhOTItNWIyOC0z NWM4LTlkOGQtMDJkMGY0ZTFkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6ru/wQV2r7m8C9lXeQCBdVRBJUYArH9IRlj3+vsu4Ciny8mIkE 5TyQPbRvL+WMIbui2p0I8sZ/mbIJ2KlE9ML4RIXns3CMm0qSDbS0zXHTocBED+gN 1Nrr7kAxOFxEe8GMfgqNy/FV+sOEQnvKeuTliEjTnspdM0qHQ2q+Fps7bO1ma6wk yAKvR2ww098JBkS+7ygcsqCVmVnVKx4HHyT5BrlkSS66vJTmvrvScINCPASP0xzu r4xhfjwgN6c7ZTnGkVLCFucYYB3KveF0UlVS5uoKtBL/2R3G8S/apfge87MCanXe ktIeAkCqdupRk2duEEmNupKZ5EHv5EnDROY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:20 2025 by rpki-client