$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9804d927-f0af-3812-b098-8e8d36850489.roa File: 9804d927-f0af-3812-b098-8e8d36850489.roa (raw, json) Hash identifier: 4GcnpglS8wS5ACG08E2nTITX72z4PPddJZjBH0jonYI= Subject key identifier: A0:84:86:ED:1E:E2:5A:D7:39:F1:E5:5F:60:6C:76:3F:F5:61:B8:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A2C200ACCC2C44259238304E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9804d927-f0af-3812-b098-8e8d36850489.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 30036 IP address blocks: 2604:2d80:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0a:cc:c2:c4:42:59:23:83:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=f9692b55-b350-4493-b52f-11eb7e0d3671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:f9:ed:8f:17:a5:47:c2:47:fd:bf:f5:46: 6b:bb:1e:2b:53:2c:d6:7f:6f:de:93:09:78:62:ef: 59:6a:a4:de:c0:c4:c4:6f:22:df:c5:b8:8c:fd:8c: a6:c7:42:52:83:33:7c:80:21:68:d1:53:55:3f:59: da:75:9f:f8:f0:16:46:ee:9c:89:c0:4d:a4:e9:c5: 3c:d0:4c:81:cc:24:f1:bd:54:d6:a4:01:d8:16:1d: 0f:6f:bb:61:0a:11:82:d1:06:c3:8e:6b:b3:bd:db: 42:49:72:87:1d:78:89:56:e9:3c:cc:e7:87:7d:0b: a1:61:a9:87:85:c9:59:e1:5c:4d:b1:a3:e4:63:16: 9e:c8:e3:05:71:e7:0c:39:98:36:73:e4:23:ad:75: 12:8d:40:07:ea:e7:1c:d4:ff:f4:a0:3f:4e:bc:76: dc:70:4e:6a:21:f6:91:75:20:d1:f8:af:1b:95:31: 45:7c:c5:53:a5:0b:ab:0c:8e:f6:39:16:bb:68:49: c0:ab:cb:91:71:d7:06:b1:91:19:ee:fd:54:fd:87: 34:74:aa:ca:70:7a:a3:85:1c:50:83:99:ca:d0:cd: 02:75:82:9d:c0:22:71:e9:c6:37:27:cd:a3:f9:1e: b6:8f:24:31:24:07:4c:cb:e1:db:64:7a:97:56:a7: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:86:ED:1E:E2:5A:D7:39:F1:E5:5F:60:6C:76:3F:F5:61:B8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9804d927-f0af-3812-b098-8e8d36850489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:95:a2:af:97:05:1d:80:57:89:19:c6:27:3a:0a:c5:c4:d5: 7e:99:ca:7e:04:16:25:0f:ef:f2:c8:54:cc:b9:b3:64:0c:c6: c7:84:e2:19:fd:0d:cd:12:2d:8e:93:ef:62:85:d9:b8:7c:a6: cb:a4:7a:5e:b8:73:f6:3a:db:44:ef:44:46:f7:bf:22:c7:ed: 77:aa:1a:1d:10:b9:de:63:34:6a:64:22:0f:c1:e1:e2:b8:de: 78:f6:95:9f:77:42:c1:b2:20:50:90:9a:50:05:e7:0b:fe:08: 03:4f:46:b4:50:b2:67:b5:9b:66:c7:77:1b:7a:47:12:3f:ad: bb:18:94:b6:e3:b9:6e:46:4e:ef:34:c6:d1:f0:06:52:92:10: 48:55:c6:55:6f:e8:a3:64:39:b7:ce:2f:b2:66:61:ff:7d:3e: 2c:ef:1a:26:33:23:2b:2c:d6:bf:29:8a:9b:17:2d:e1:57:31: 0a:0d:fb:5f:bf:ac:05:0a:17:67:3f:43:79:f9:75:2f:6b:6d: 7a:fa:c1:ae:b1:c9:1f:0f:fd:1f:16:eb:d2:6f:87:8d:9e:3b: ba:97:b8:47:74:f4:78:7a:1a:3e:c7:a5:57:2a:2d:c9:d0:4a: 8b:c7:e9:34:0e:6c:8f:16:0f:fa:26:7a:db:36:bd:b8:fa:92: fc:ea:53:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEosIArMwsRCWSODBOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Zjk2OTJiNTUtYjM1MC00NDkzLWI1MmYtMTFlYjdlMGQzNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI757Y8XpUfCR/2/9UZrux4rUyzWf2/ekwl4 Yu9ZaqTewMTEbyLfxbiM/Yymx0JSgzN8gCFo0VNVP1nadZ/48BZG7pyJwE2k6cU8 0EyBzCTxvVTWpAHYFh0Pb7thChGC0QbDjmuzvdtCSXKHHXiJVuk8zOeHfQuhYamH hclZ4VxNsaPkYxaeyOMFcecMOZg2c+QjrXUSjUAH6ucc1P/0oD9OvHbccE5qIfaR dSDR+K8blTFFfMVTpQurDI72ORa7aEnAq8uRcdcGsZEZ7v1U/Yc0dKrKcHqjhRxQ g5nK0M0CdYKdwCJx6cY3J82j+R62jyQxJAdMy+HbZHqXVqdPHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKCEhu0e4lrXOfHlX2Bsdj/1YbigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTgwNGQ5MjctZjBhZi0z ODEyLWIwOTgtOGU4ZDM2ODUwNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgOQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOZWir5cFHYBXiRnGJzoKxcTVfpnKfgQWJQ/v8shUzLmzZAzGx4Ti Gf0NzRItjpPvYoXZuHymy6R6Xrhz9jrbRO9ERve/Isftd6oaHRC53mM0amQiD8Hh 4rjeePaVn3dCwbIgUJCaUAXnC/4IA09GtFCyZ7WbZsd3G3pHEj+tuxiUtuO5bkZO 7zTG0fAGUpIQSFXGVW/oo2Q5t84vsmZh/30+LO8aJjMjKyzWvymKmxct4VcxCg37 X7+sBQoXZz9Defl1L2ttevrBrrHJHw/9Hxbr0m+HjZ47upe4R3T0eHoaPselVyot ydBKi8fpNA5sjxYP+iZ62za9uPqS/OpTeQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:00:47 2025 by rpki-client