$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa File: 4a7147cb-4042-328d-af42-f8145758455b.roa (raw, json) Hash identifier: jXdw0Mrw/jl3xtMzNu6RvxpuHC5N6NpsmeXZYlr7y+0= Subject key identifier: CA:B6:13:B4:FF:48:BA:A8:3E:AD:D8:BD:6B:D6:BF:6D:86:2D:08:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A5B95ABB999F38F2F85729760 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 30036 IP address blocks: 2604:2d80:3380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:ab:b9:99:f3:8f:2f:85:72:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=4fa22200-7d49-4e34-a963-d38d4b1bfb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:5c:2f:bf:aa:02:cf:79:db:bb:0c:e2:3d: 29:51:a3:ef:67:ce:d2:d1:7c:ef:8e:17:53:ec:9d: b9:d1:82:4d:07:f8:ec:e6:a4:2f:10:1f:01:a6:7f: ac:86:6c:79:9e:7f:81:37:84:17:09:69:e4:19:6c: 6b:39:46:5b:e1:8c:09:b6:d5:15:4c:f7:6d:5b:1c: b8:8d:85:eb:04:b3:b7:c1:a5:80:ae:5e:4c:5d:f1: a0:cc:7b:b0:8e:67:e9:03:f9:49:d6:b0:06:cc:c2: 81:98:b4:ab:45:dd:1e:35:d3:60:3a:0f:b0:f7:30: cd:ba:b4:ed:ce:4b:28:32:c3:e0:56:2d:17:05:27: 09:4b:69:0e:06:71:4e:1e:23:d3:b6:cd:63:55:28: b0:0e:51:05:6f:6a:d3:0e:98:fc:96:c7:68:53:92: 56:5b:d2:18:80:d1:35:8e:b2:bc:08:93:92:83:cc: 7a:f9:59:f0:ac:ad:19:16:25:bb:7e:86:bb:f3:fe: bf:18:62:c8:a4:d6:ef:03:f9:54:11:24:ca:b8:40: ec:04:2e:c5:82:88:62:ba:3b:b9:aa:9e:b3:78:cd: 2a:03:8e:7d:11:11:20:32:a4:16:2d:d0:25:e5:47: 18:ad:8f:ce:78:e8:c3:68:8c:3f:01:4f:4f:30:5e: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B6:13:B4:FF:48:BA:A8:3E:AD:D8:BD:6B:D6:BF:6D:86:2D:08:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4f:94:44:e3:8c:08:fc:75:8a:93:89:c4:f8:6e:8f:4f:ed: 36:57:e6:8e:e1:74:57:29:c4:c7:9c:a7:7b:3c:04:d8:17:ee: 21:db:89:4b:4c:44:ad:81:cb:6f:54:9c:00:a8:ae:0b:4c:92: d7:6e:4b:99:96:f4:26:8f:cb:30:30:b6:20:16:29:d9:51:4d: 8f:43:94:05:94:1e:8e:86:30:4b:18:a4:1b:e9:b6:10:25:d1: 29:e8:0a:88:03:77:e2:2a:0b:82:7e:d4:46:cb:eb:9c:34:42: 73:f9:e0:3b:89:b3:84:93:24:7d:32:70:55:0d:1b:6b:00:18: 02:c2:54:7a:76:4f:83:fb:d1:58:87:42:5f:94:c2:55:0e:15: 73:32:07:92:47:c3:98:bd:45:93:a0:26:31:6f:2f:53:f5:db: 22:6b:f6:36:64:bd:2a:eb:5e:74:71:0a:08:1a:96:50:d0:ff: c5:19:bd:4c:3b:6d:c5:b9:17:48:81:44:f4:c6:ec:8c:f5:13: 07:a2:0c:a3:33:46:7d:a8:f9:fb:38:da:70:dd:b5:9d:69:5e: 90:74:cc:3d:f6:77:30:1a:bc:2e:86:56:f0:d9:c0:37:f1:dd: e4:13:b8:04:91:a7:e6:b7:ec:92:29:3c:46:7d:98:4b:79:4d: 37:19:a7:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpblau5mfOPL4Vyl2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk NGZhMjIyMDAtN2Q0OS00ZTM0LWE5NjMtZDM4ZDRiMWJmYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpcL7+qAs9527sM4j0pUaPvZ87S0XzvjhdT 7J250YJNB/js5qQvEB8Bpn+shmx5nn+BN4QXCWnkGWxrOUZb4YwJttUVTPdtWxy4 jYXrBLO3waWArl5MXfGgzHuwjmfpA/lJ1rAGzMKBmLSrRd0eNdNgOg+w9zDNurTt zksoMsPgVi0XBScJS2kOBnFOHiPTts1jVSiwDlEFb2rTDpj8lsdoU5JWW9IYgNE1 jrK8CJOSg8x6+VnwrK0ZFiW7foa78/6/GGLIpNbvA/lUESTKuEDsBC7Fgohiuju5 qp6zeM0qA459EREgMqQWLdAl5UcYrY/OeOjDaIw/AU9PMF5cSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMq2E7T/SLqoPq3YvWvWv22GLQiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE3MTQ3Y2ItNDA0Mi0z MjhkLWFmNDItZjgxNDU3NTg0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBPlETjjAj8dYqTicT4bo9P7TZX5o7hdFcpxMecp3s8BNgX7iHb iUtMRK2By29UnACorgtMktduS5mW9CaPyzAwtiAWKdlRTY9DlAWUHo6GMEsYpBvp thAl0SnoCogDd+IqC4J+1EbL65w0QnP54DuJs4STJH0ycFUNG2sAGALCVHp2T4P7 0ViHQl+UwlUOFXMyB5JHw5i9RZOgJjFvL1P12yJr9jZkvSrrXnRxCggallDQ/8UZ vUw7bcW5F0iBRPTG7Iz1EweiDKMzRn2o+fs42nDdtZ1pXpB0zD32dzAavC6GVvDZ wDfx3eQTuASRp+a37JIpPEZ9mEt5TTcZp2o= -----END CERTIFICATE-----Generated at Mon Jun 30 09:36:52 2025 by rpki-client