$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa File: 3c43b276-fc41-37ea-b4d5-c88fba282149.roa (raw, json) Hash identifier: 3swhjP8PJ5BtU0V1LCcNBPM1J126g6LsjR3fHTBC1uw= Subject key identifier: 68:E9:22:65:AA:0F:BA:ED:A1:21:85:CB:EA:3B:D4:22:B9:DA:3F:25 Certificate issuer: /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Certificate serial: 010D0C9F4328584A9FFBABCFBE2333A3EB4C5FD0 Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 40706 IP address blocks: 2620:57:a000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ab:cf:be:23:33:a3:eb:4c:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=cbde6877-2da2-4bd6-b5c5-cf9ee7112283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:33:a8:5a:3a:3e:b2:f6:ae:1a:88:ed:a0: f4:31:5b:20:a7:6e:0e:7a:7d:68:77:54:2c:45:d7: 2a:3a:c2:17:35:b7:5d:53:39:9b:c3:70:38:0c:20: 66:a3:bf:6d:22:01:7a:af:c5:d4:8d:8f:84:6c:a0: 0f:72:44:b4:18:ee:d2:12:6d:6e:ee:4b:1e:53:24: c8:22:af:87:59:d1:90:6d:db:5b:68:fe:73:f0:6e: b3:cb:26:7c:02:87:fa:0e:9e:de:52:e4:88:31:3e: f3:d0:31:e8:d0:2e:03:1b:22:cb:eb:99:55:90:12: b2:e4:02:6a:23:90:3d:f8:f0:4a:81:31:5f:ef:63: 99:92:51:d5:d8:9c:ab:51:09:f3:2b:29:0b:f0:a2: 4e:e7:ab:0f:8e:02:85:58:64:80:5f:27:2a:76:a6: dc:ac:42:23:91:f5:f1:50:ca:3e:f9:20:55:55:ac: 53:93:43:21:86:1e:4b:bd:7a:2e:3b:fd:b4:3f:38: 11:e0:68:88:f3:b5:f7:6d:f1:65:63:46:7d:63:59: 6d:c7:04:55:4e:52:9c:6b:7f:62:b2:f8:99:8b:ef: 74:41:03:26:a8:a4:97:5c:1a:7b:d4:40:82:16:c9: 74:f7:67:bb:ce:7d:48:85:33:88:6a:0a:3a:a0:00: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:22:65:AA:0F:BA:ED:A1:21:85:CB:EA:3B:D4:22:B9:DA:3F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl X509v3 Authority Key Identifier: keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer sbgp-ipAddrBlock: critical IPv6: 2620:57:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5b:9b:ef:a6:a2:9b:43:7d:b7:fb:20:0e:17:30:ff:39:3e: 20:a0:fb:da:20:f7:fd:64:bb:c0:1b:e4:a7:67:37:17:44:9a: 37:f8:36:cb:f5:f9:c2:0f:d0:6f:3e:73:39:e1:ce:58:f9:a0: b2:e5:19:06:7d:f1:da:a7:2c:36:24:30:01:b3:d1:ac:ea:50: 68:b7:b0:7b:96:a4:82:b6:a8:dd:90:6f:14:74:e6:df:79:6f: 1b:eb:88:e4:d4:55:4e:9d:f3:21:ee:b0:61:b8:22:d1:da:df: 8e:d8:fa:bb:a6:2e:33:bb:7a:1e:1d:4a:86:f5:13:3d:0f:9c: b2:cb:2d:d0:f8:e4:96:c5:c3:87:6e:c8:8f:1e:dd:b6:e3:07: 70:e0:9d:25:46:58:2c:d4:36:46:a1:a9:8a:60:f8:00:13:22: 42:03:5f:2b:1e:91:21:a9:25:c6:69:e6:8b:b8:2b:a1:60:7a: 0e:11:23:63:f1:3f:ed:57:0b:6e:02:94:43:d4:76:8a:f7:de: 55:99:bc:b8:f4:ba:7d:4a:2f:ea:70:3d:70:93:8b:25:f0:af: 94:3c:13:b9:92:01:d9:ae:8c:ff:6a:dc:b6:ce:3c:27:77:e4: c8:10:a8:31:56:a1:fd:0d:41:da:fe:49:d1:1a:91:3a:fc:0f: 42:be:a8:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+6vPviMzo+tMX9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmYzFkNTItYzAwOC00ZmRjLWFjZDEtNzNhYjZjNzFi MTUzMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk Y2JkZTY4NzctMmRhMi00YmQ2LWI1YzUtY2Y5ZWU3MTEyMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kUzqFo6PrL2rhqI7aD0MVsgp24Oen1od1Qs RdcqOsIXNbddUzmbw3A4DCBmo79tIgF6r8XUjY+EbKAPckS0GO7SEm1u7kseUyTI Iq+HWdGQbdtbaP5z8G6zyyZ8Aof6Dp7eUuSIMT7z0DHo0C4DGyLL65lVkBKy5AJq I5A9+PBKgTFf72OZklHV2JyrUQnzKykL8KJO56sPjgKFWGSAXycqdqbcrEIjkfXx UMo++SBVVaxTk0Mhhh5LvXouO/20PzgR4GiI87X3bfFlY0Z9Y1ltxwRVTlKca39i sviZi+90QQMmqKSXXBp71ECCFsl092e7zn1IhTOIago6oABRcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGjpImWqD7rtoSGFy+o71CK52j8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZj MWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2FiNmM3MWIxNTMvM2M0M2IyNzYtZmM0MS0z N2VhLWI0ZDUtYzg4ZmJhMjgyMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzlmYzFkNTItYzAwOC00ZmRjLWFj ZDEtNzNhYjZjNzFiMTUzL2M5ZmMxZDUyLWMwMDgtNGZkYy1hY2QxLTczYWI2Yzcx YjE1My5jcmwwHwYDVR0jBBgwFoAUzxswEXB1OE9yPumwzQkqt1oIxu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZjMWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2Fi NmM3MWIxNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAV6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABbm++moptDfbf7IA4XMP85PiCg+9og9/1ku8Ab5KdnNxdEmjf4 Nsv1+cIP0G8+cznhzlj5oLLlGQZ98dqnLDYkMAGz0azqUGi3sHuWpIK2qN2QbxR0 5t95bxvriOTUVU6d8yHusGG4ItHa347Y+rumLjO7eh4dSob1Ez0PnLLLLdD45JbF w4duyI8e3bbjB3DgnSVGWCzUNkahqYpg+AATIkIDXysekSGpJcZp5ou4K6Fgeg4R I2PxP+1XC24ClEPUdor33lWZvLj0un1KL+pwPXCTiyXwr5Q8E7mSAdmujP9q3LbO PCd35MgQqDFWof0NQdr+SdEakTr8D0K+qBo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:14:14 2025 by rpki-client