$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa File: a219f280-97e6-37c0-95e5-623b7251cdd5.roa (raw, json) Hash identifier: Pbq28ScaIHKYgswlVLljRFaXKePGs01VBAMIv/NM4ao= Subject key identifier: E0:A1:AE:22:25:46:A0:11:DD:7C:C6:BE:27:85:99:1F:00:79:7B:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD0D63F17F316F7B54C92CEC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2d81:280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:3f:17:f3:16:f7:b5:4c:92:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c42f1b95-5ee0-4ad0-b0c9-bfa6620411b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:04:f1:ee:37:8e:3a:84:3a:30:81:74:5e:4d: 60:ed:0e:8e:47:91:96:00:3b:82:4c:34:95:61:b9: 99:9f:09:07:75:b3:99:30:cf:01:28:02:2d:f4:03: 55:1a:55:88:e1:67:d2:88:a0:27:8c:88:9e:57:5f: ee:58:76:9a:49:75:84:75:a8:dc:36:cc:5f:8a:7a: 04:38:6e:46:dc:bb:59:f2:0f:d2:89:d2:fc:74:97: 23:73:6a:4d:ae:60:95:32:81:fb:2e:e9:7c:2c:a0: 96:d6:2b:22:bc:32:e2:37:1d:fb:f9:4f:83:ca:49: 3d:69:88:27:e4:01:ab:ce:ba:cb:bc:57:48:ae:a3: 3e:bd:dc:52:b9:95:6c:07:f3:98:a2:28:a9:6e:1b: 5b:0a:92:ac:33:39:7c:9a:08:17:13:d5:a8:a2:ae: 2e:3c:4c:cc:cc:b1:82:4c:2c:bb:ad:d0:8a:ca:86: a3:82:0c:86:3f:bd:95:c2:7b:31:c4:dc:a7:ab:66: 6e:93:85:c8:66:4a:6e:43:3a:f7:2f:bf:50:1e:a6: 38:e2:14:64:f2:47:cc:0b:90:bf:b3:27:7b:4e:98: 4c:8d:b0:36:f0:19:06:37:73:aa:5b:5e:ae:89:15: 49:a7:26:63:a0:3e:6e:62:99:76:90:f3:ae:78:e4: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:AE:22:25:46:A0:11:DD:7C:C6:BE:27:85:99:1F:00:79:7B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:56:96:14:82:46:46:5c:40:59:52:78:ce:c3:63:89:7e:cc: c7:63:89:e1:6e:b5:ec:ac:91:52:89:02:ba:0a:77:83:90:d8: 73:f2:ad:8b:76:6a:d2:94:9b:f5:c0:69:3d:ee:23:22:00:b5: bb:30:ae:b9:74:da:b6:08:87:bb:72:11:fd:f5:b1:89:89:6d: 5e:3b:2a:dd:0f:90:4f:42:d2:48:59:88:33:16:04:eb:a1:37: d5:f2:71:43:94:7d:80:54:98:e4:ed:fe:08:66:ff:cf:be:d2: d1:56:93:8a:1d:58:5e:9a:13:31:c1:82:65:cc:6f:fa:1f:81: c7:37:73:76:6e:e8:47:4e:17:07:fc:d6:51:b3:39:dc:c1:c8: 52:35:38:3e:10:90:48:52:89:b6:03:26:4b:04:15:08:98:72: 98:de:af:1d:0b:6b:4e:8a:2c:fe:c3:f0:52:ed:df:d5:8e:d4: cf:32:5b:e4:88:f2:79:ef:f1:31:4c:8c:dc:5e:e9:5a:56:76: 12:3f:3f:69:7e:cf:ff:5c:70:3c:c9:97:23:a9:26:d3:c2:6e: 7e:a2:07:c8:92:90:ed:80:b2:ae:52:cb:a9:1c:74:03:f6:31: 56:04:bd:00:80:ea:b7:28:5d:b4:53:e6:77:37:50:a0:88:73: ba:a1:76:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1j8X8xb3tUySzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzQyZjFiOTUtNWVlMC00YWQwLWIwYzktYmZhNjYyMDQxMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gTx7jeOOoQ6MIF0Xk1g7Q6OR5GWADuCTDSV YbmZnwkHdbOZMM8BKAIt9ANVGlWI4WfSiKAnjIieV1/uWHaaSXWEdajcNsxfinoE OG5G3LtZ8g/SidL8dJcjc2pNrmCVMoH7Lul8LKCW1isivDLiNx37+U+Dykk9aYgn 5AGrzrrLvFdIrqM+vdxSuZVsB/OYoiipbhtbCpKsMzl8mggXE9Wooq4uPEzMzLGC TCy7rdCKyoajggyGP72VwnsxxNynq2Zuk4XIZkpuQzr3L79QHqY44hRk8kfMC5C/ syd7TphMjbA28BkGN3OqW16uiRVJpyZjoD5uYpl2kPOueORgrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOChriIlRqAR3XzGvieFmR8AeXuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIxOWYyODAtOTdlNi0z N2MwLTk1ZTUtNjIzYjcyNTFjZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpWlhSCRkZcQFlSeM7DY4l+zMdjieFuteyskVKJAroKd4OQ2HPy rYt2atKUm/XAaT3uIyIAtbswrrl02rYIh7tyEf31sYmJbV47Kt0PkE9C0khZiDMW BOuhN9XycUOUfYBUmOTt/ghm/8++0tFWk4odWF6aEzHBgmXMb/ofgcc3c3Zu6EdO Fwf81lGzOdzByFI1OD4QkEhSibYDJksEFQiYcpjerx0La06KLP7D8FLt39WO1M8y W+SI8nnv8TFMjNxe6VpWdhI/P2l+z/9ccDzJlyOpJtPCbn6iB8iSkO2Asq5Sy6kc dAP2MVYEvQCA6rcoXbRT5nc3UKCIc7qhdsc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:00 2025 by rpki-client