$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa File: cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa (raw, json) Hash identifier: mFnM9QBH7TrsyyHZzHwyx6QALFZMTyQh4gtbxoBSCJc= Subject key identifier: 5B:E5:65:56:13:0D:67:C9:AC:26:8E:11:23:FA:DE:4D:7C:34:F2:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A0FA729AC00787CB1A902A0D8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa Signing time: Mon 02 Jun 2025 20:14:42 +0000 ROA not before: Mon 02 Jun 2025 20:14:42 +0000 ROA not after: Sun 31 Aug 2025 20:14:42 +0000 asID: 30036 IP address blocks: 2604:2d81:2000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:a7:29:ac:00:78:7c:b1:a9:02:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 20:14:42 2025 GMT Not After : Aug 31 20:14:42 2025 GMT Subject: CN=67f916e2-c7a7-44f2-8c25-08719d4d04a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:75:fc:c9:dc:73:4a:be:98:11:08:3c:a4: 39:e0:05:42:3e:13:2e:58:e9:4f:57:ea:bd:96:41: b0:81:e2:66:34:aa:7d:9f:eb:d7:97:ec:e0:06:c5: c7:d9:89:2e:2b:e8:9f:3f:0b:c6:f4:55:e3:0f:06: ee:45:4a:83:37:1c:90:41:00:39:9d:38:d8:1b:97: 66:c6:a4:79:4c:58:fc:a5:a5:1c:d0:3d:a6:88:1f: 97:5b:f4:88:cd:22:53:e6:be:13:87:78:59:f8:7c: 35:c5:dc:c2:3b:44:98:b0:d9:f2:c3:dd:46:00:a3: ab:3e:08:62:32:49:46:2f:4d:cd:78:4f:bf:1c:dd: c8:6b:6b:ba:a6:35:07:8e:6a:e6:81:c9:87:2f:4e: 68:b5:16:f2:19:a9:2d:79:06:f5:71:26:e2:b1:4d: b0:e7:7e:f3:7c:67:1d:d5:fe:ff:68:07:7a:91:55: e4:6f:91:fe:b3:48:f1:e0:2c:a3:44:3c:3e:e6:f6: 6d:39:d8:8b:3d:64:47:f7:71:d0:60:42:43:0a:c0: 3d:66:af:8a:ec:c9:68:b6:95:4c:22:fd:53:20:95: e6:b8:f9:fd:67:6c:dc:76:a2:4c:71:b0:3a:3d:b4: f6:97:24:0e:a8:13:60:4a:34:41:aa:6d:5e:bf:3a: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E5:65:56:13:0D:67:C9:AC:26:8E:11:23:FA:DE:4D:7C:34:F2:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e0:ef:b4:5e:73:2d:06:6c:b6:a4:92:a1:c2:b2:00:d4:37: 1b:85:5f:ec:71:3a:ca:a1:d1:25:af:b0:29:16:fd:db:14:ab: 85:0b:4f:06:bd:2b:7f:d5:4a:cd:e8:e1:2a:7c:5f:d9:09:5f: b7:9f:25:86:d3:e8:ef:8c:7c:1f:aa:ac:bc:3e:52:0f:75:e6: 54:48:c2:aa:3c:fd:d2:71:35:e6:a6:a0:47:51:b3:18:bc:cd: 60:a4:35:80:72:07:9f:ad:f5:7f:bb:4d:8e:36:8c:aa:d9:73: 66:ec:1b:1c:c9:47:37:92:c8:67:e2:91:1f:a8:7b:06:3b:d2: 69:84:cb:3f:b4:41:8b:a7:10:d7:76:7d:f7:4c:ef:d5:22:05: a1:da:e0:db:3b:41:63:d3:61:86:4d:5e:7d:7e:05:fb:b4:51: 26:62:16:30:71:52:73:6a:d3:a3:16:6e:8e:fd:c2:1c:fa:57: 55:d5:2a:7b:fd:30:f6:4d:a1:49:55:f2:c0:76:36:3e:4a:97: 3b:e4:2d:b6:22:b9:f3:f9:6a:15:4c:33:fd:e3:04:30:82:c3: bb:f5:c2:89:a7:3b:3a:81:8f:37:37:45:08:60:76:94:81:8c: a0:90:c0:e2:b4:6e:01:ad:dd:08:9f:54:50:2b:ab:a8:32:26: 15:fe:ad:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoPpymsAHh8sakCoNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYwMjIwMTQ0MloXDTI1MDgzMTIwMTQ0MlowLzEtMCsGA1UEAxMk NjdmOTE2ZTItYzdhNy00NGYyLThjMjUtMDg3MTlkNGQwNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCR1/Mncc0q+mBEIPKQ54AVCPhMuWOlPV+q9 lkGwgeJmNKp9n+vXl+zgBsXH2YkuK+ifPwvG9FXjDwbuRUqDNxyQQQA5nTjYG5dm xqR5TFj8paUc0D2miB+XW/SIzSJT5r4Th3hZ+Hw1xdzCO0SYsNnyw91GAKOrPghi MklGL03NeE+/HN3Ia2u6pjUHjmrmgcmHL05otRbyGakteQb1cSbisU2w537zfGcd 1f7/aAd6kVXkb5H+s0jx4CyjRDw+5vZtOdiLPWRH93HQYEJDCsA9Zq+K7MlotpVM Iv1TIJXmuPn9Z2zcdqJMcbA6PbT2lyQOqBNgSjRBqm1evzqySQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvlZVYTDWfJrCaOESP63k18NPJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2NlMWFjZWMtOWVlZS0z YjdkLTllZDQtZTVhOTA3M2I3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELg77Recy0GbLakkqHCsgDUNxuFX+xxOsqh0SWvsCkW/dsUq4UL Twa9K3/VSs3o4Sp8X9kJX7efJYbT6O+MfB+qrLw+Ug915lRIwqo8/dJxNeamoEdR sxi8zWCkNYByB5+t9X+7TY42jKrZc2bsGxzJRzeSyGfikR+oewY70mmEyz+0QYun ENd2ffdM79UiBaHa4Ns7QWPTYYZNXn1+Bfu0USZiFjBxUnNq06MWbo79whz6V1XV Knv9MPZNoUlV8sB2Nj5KlzvkLbYiufP5ahVMM/3jBDCCw7v1womnOzqBjzc3RQhg dpSBjKCQwOK0bgGt3QifVFArq6gyJhX+reI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:24:44 2025 by rpki-client