$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa File: b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa (raw, json) Hash identifier: /Ymw0buugL8FfNqxlKLteamXDKh6rgxioXH/IKPE+O0= Subject key identifier: FD:05:C5:52:1D:05:58:4D:2E:95:7E:13:14:EA:9F:FF:71:08:88:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AF2A35FE3A38B5F96CAF4BA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa Signing time: Sat 23 Aug 2025 03:35:34 +0000 ROA not before: Sat 23 Aug 2025 03:35:34 +0000 ROA not after: Fri 21 Nov 2025 04:35:34 +0000 asID: 30036 IP address blocks: 2604:2d81:2300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:a3:5f:e3:a3:8b:5f:96:ca:f4:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 23 03:35:34 2025 GMT Not After : Nov 21 04:35:34 2025 GMT Subject: CN=d2a694e7-4c1f-4f75-9e3f-a376f399bbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:0b:f1:1e:78:66:7a:84:b1:cf:93:df:21: 6b:a0:23:1f:6a:cd:d9:84:e5:fc:25:8d:6e:59:b1: c9:29:6e:ff:71:4d:9e:b1:61:72:f8:09:1b:9f:99: 5e:71:bb:76:ab:16:91:80:fe:07:e5:98:fa:6b:03: aa:c4:ed:aa:e1:6a:98:b2:2a:ea:58:f0:c3:cc:d0: 59:d2:9f:fe:1b:28:e4:8f:b1:2a:3b:c4:1b:7d:03: f3:0a:78:cd:22:65:e2:3b:fd:e8:01:b0:c3:43:ed: 33:f3:f5:b6:7b:eb:ef:d5:3b:d9:4c:62:23:12:03: 48:9b:62:cc:ae:c8:13:1f:b7:71:50:5b:ed:b5:ed: 4e:f6:df:d4:3f:b0:7d:2d:f3:ae:42:6a:c2:5a:a8: ce:35:c7:c0:11:6b:76:1d:1a:30:3b:1f:48:fa:91: 5b:77:8a:29:87:ee:e9:14:8b:b0:46:d6:c8:cc:dc: 77:5f:a3:17:5b:eb:55:d3:fc:f8:09:fb:27:9e:d5: ea:c5:69:34:ce:0d:b6:69:9b:40:3a:d5:1d:58:f6: 0e:a9:a1:56:3b:d1:77:d9:21:e7:5c:1b:dc:a4:17: 4d:eb:54:65:ff:02:b1:1e:2e:cb:cf:0d:3f:d1:8f: ed:02:5d:5e:04:6f:42:3c:6e:66:3d:05:f3:5a:28: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:C5:52:1D:05:58:4D:2E:95:7E:13:14:EA:9F:FF:71:08:88:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3f9b645-f5f2-333b-ab1b-1ae1841b2e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:61:a5:70:88:dd:6a:d8:a6:55:dd:74:0b:9f:81:14:92:45: c4:e8:f6:c0:96:9e:e5:b6:1a:46:98:dc:c3:a8:3d:3e:35:e1: 7f:a0:f9:fc:dd:27:d6:e8:98:4a:32:c6:a7:95:36:9d:c1:72: ed:0c:3d:e1:e8:4c:ca:53:78:28:70:8a:cc:12:3d:cf:52:6f: c4:9b:5a:c0:9d:55:c2:6c:13:bf:62:cd:7f:b9:25:80:63:d2: db:3e:3c:72:71:5f:c4:f1:a3:10:f6:7f:20:61:e1:00:12:83: 90:ed:78:b0:43:9b:49:7c:b0:52:af:0e:d7:50:a2:04:03:78: 47:58:3b:a5:42:9b:83:24:6c:0f:61:82:ed:aa:e5:a1:1d:55: ce:bf:6c:06:67:bb:8b:7a:90:f0:54:20:d0:e7:fb:db:e0:2f: 49:57:8c:c2:3d:63:40:f1:1f:34:fb:07:32:83:dc:71:db:04: 61:58:7e:80:c6:be:62:e7:59:cb:9c:c7:3a:f9:92:4c:0c:db: cf:17:42:2e:e2:28:1f:5e:fc:d5:6d:93:dc:62:b5:88:17:dc: 00:fb:5b:88:ad:15:66:b1:7b:67:1d:6d:6c:54:9e:14:99:94: a9:4b:e7:75:91:1f:15:45:a5:50:07:d7:eb:cb:58:0c:1e:a8: d4:0e:f9:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryo1/jo4tflsr0uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMzAzMzUzNFoXDTI1MTEyMTA0MzUzNFowLzEtMCsGA1UEAxMk ZDJhNjk0ZTctNGMxZi00Zjc1LTllM2YtYTM3NmYzOTliYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkQL8R54ZnqEsc+T3yFroCMfas3ZhOX8JY1u WbHJKW7/cU2esWFy+Akbn5lecbt2qxaRgP4H5Zj6awOqxO2q4WqYsirqWPDDzNBZ 0p/+Gyjkj7EqO8QbfQPzCnjNImXiO/3oAbDDQ+0z8/W2e+vv1TvZTGIjEgNIm2LM rsgTH7dxUFvtte1O9t/UP7B9LfOuQmrCWqjONcfAEWt2HRowOx9I+pFbd4oph+7p FIuwRtbIzNx3X6MXW+tV0/z4CfsnntXqxWk0zg22aZtAOtUdWPYOqaFWO9F32SHn XBvcpBdN61Rl/wKxHi7Lzw0/0Y/tAl1eBG9CPG5mPQXzWigWnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0FxVIdBVhNLpV+ExTqn/9xCIhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjNmOWI2NDUtZjVmMi0z MzNiLWFiMWItMWFlMTg0MWIyZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5hpXCI3WrYplXddAufgRSSRcTo9sCWnuW2GkaY3MOoPT414X+g +fzdJ9bomEoyxqeVNp3Bcu0MPeHoTMpTeChwiswSPc9Sb8SbWsCdVcJsE79izX+5 JYBj0ts+PHJxX8TxoxD2fyBh4QASg5DteLBDm0l8sFKvDtdQogQDeEdYO6VCm4Mk bA9hgu2q5aEdVc6/bAZnu4t6kPBUINDn+9vgL0lXjMI9Y0DxHzT7BzKD3HHbBGFY foDGvmLnWcucxzr5kkwM288XQi7iKB9e/NVtk9xitYgX3AD7W4itFWaxe2cdbWxU nhSZlKlL53WRHxVFpVAH1+vLWAweqNQO+co= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:34 2025 by rpki-client