$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec8dd331-6825-31fa-8296-042367820e1d.roa File: ec8dd331-6825-31fa-8296-042367820e1d.roa (raw, json) Hash identifier: JX+GLM0g9B/5ABgiLrFvZ3sV2kIeNGBAf+eeSMZ4uCs= Subject key identifier: 3E:61:E2:B5:B5:3A:03:DA:B6:D6:1C:9E:DE:D4:08:41:30:5B:A0:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F87AA0C17DF85A2830682C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec8dd331-6825-31fa-8296-042367820e1d.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 2604:2d80:5000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:a0:c1:7d:f8:5a:28:30:68:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=485c7b1f-da49-4a28-9a4c-b2a99891850d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:ca:84:8e:db:f9:e6:14:d0:c2:a7:15:2a: 32:3b:8c:4e:c5:1f:a7:0e:c0:ad:3f:11:c5:2f:f7: 7a:b1:ce:1e:29:41:ad:5c:b7:aa:d6:49:90:90:93: 5a:de:b0:d5:a9:80:3d:bd:31:24:fb:60:8f:a3:8e: 3e:40:e2:0e:75:0d:93:75:8a:e8:aa:65:43:c3:91: 65:c9:ad:90:18:f0:77:f9:6e:2b:6e:6f:0b:aa:f3: 4c:b2:bb:24:96:ee:52:45:ab:29:ed:b4:41:b9:86: ce:e8:0d:10:e4:e9:7b:6b:6e:85:d0:0d:18:26:66: f6:47:c2:dd:c7:56:20:a6:9a:79:45:c6:f1:30:b3: 40:ae:62:cb:28:a9:19:3c:b2:56:5e:8c:ba:03:50: 87:26:16:8f:0a:28:31:d5:e2:33:de:de:6e:01:ba: cd:bd:c4:a7:e0:14:71:bf:0d:09:a2:12:c6:2d:ff: d6:b0:71:77:e6:36:87:c7:84:0b:84:ff:cc:fb:b2: 78:ad:af:51:ac:50:2b:a6:21:35:26:e3:c7:d8:ba: 20:9d:e8:15:00:b7:36:85:2e:b1:05:54:9c:d8:61: fa:d2:bd:b9:12:7e:b1:ae:1b:63:06:e5:eb:58:28: c1:28:77:d1:08:bd:e3:c4:a7:57:aa:96:b6:b9:f8: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:61:E2:B5:B5:3A:03:DA:B6:D6:1C:9E:DE:D4:08:41:30:5B:A0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec8dd331-6825-31fa-8296-042367820e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f0:b6:20:57:38:56:61:e1:08:f5:ff:88:52:a1:db:13:c9: 1e:fe:60:17:74:c8:69:5e:14:92:13:0c:6e:6d:4c:f4:c3:26: 25:7e:49:c0:6f:c2:50:11:ad:84:d2:af:6a:c5:c5:2b:8c:f8: e6:32:eb:81:18:b7:9e:57:fc:fe:f3:27:89:83:6b:99:a7:13: 1f:e2:3d:e0:b9:68:43:3a:a5:2a:d6:f6:b9:4f:d5:fa:1e:41: df:aa:eb:95:91:43:44:78:15:2e:a9:24:78:21:ff:5c:18:1f: 66:1d:b0:5c:ab:13:f6:ef:05:a3:59:3b:c9:bb:7a:c3:01:63: 31:ad:92:d6:59:64:ea:89:02:12:9d:53:46:2d:17:53:9d:00: 9d:db:56:71:0f:28:50:7b:7f:95:dd:ef:5f:f2:2f:26:e6:a9: ce:f9:92:58:94:14:7d:c8:9b:d8:46:81:1f:4f:17:fc:8e:53: 5a:a5:2a:1d:b0:1c:f1:9d:67:59:f8:34:3c:bd:15:c9:df:30: a3:f0:44:b0:25:63:40:a4:de:63:56:7d:33:92:6c:02:0e:ff: ab:95:46:c4:fa:f8:0e:77:56:ec:2f:ec:74:31:c2:63:93:48: 0f:b6:1d:22:bd:d6:5f:22:99:33:09:17:78:7c:68:e7:70:75: e6:3b:0f:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4eqDBffhaKDBoLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDg1YzdiMWYtZGE0OS00YTI4LTlhNGMtYjJhOTk4OTE4NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDKhI7b+eYU0MKnFSoyO4xOxR+nDsCtPxHF L/d6sc4eKUGtXLeq1kmQkJNa3rDVqYA9vTEk+2CPo44+QOIOdQ2TdYroqmVDw5Fl ya2QGPB3+W4rbm8LqvNMsrsklu5SRasp7bRBuYbO6A0Q5Ol7a26F0A0YJmb2R8Ld x1Ygppp5RcbxMLNArmLLKKkZPLJWXoy6A1CHJhaPCigx1eIz3t5uAbrNvcSn4BRx vw0JohLGLf/WsHF35jaHx4QLhP/M+7J4ra9RrFArpiE1JuPH2LognegVALc2hS6x BVSc2GH60r25En6xrhtjBuXrWCjBKHfRCL3jxKdXqpa2ufjnTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5h4rW1OgPattYcnt7UCEEwW6CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWM4ZGQzMzEtNjgyNS0z MWZhLTgyOTYtMDQyMzY3ODIwZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfwtiBXOFZh4Qj1/4hSodsTyR7+YBd0yGleFJITDG5tTPTDJiV+ ScBvwlARrYTSr2rFxSuM+OYy64EYt55X/P7zJ4mDa5mnEx/iPeC5aEM6pSrW9rlP 1foeQd+q65WRQ0R4FS6pJHgh/1wYH2YdsFyrE/bvBaNZO8m7esMBYzGtktZZZOqJ AhKdU0YtF1OdAJ3bVnEPKFB7f5Xd71/yLybmqc75kliUFH3Im9hGgR9PF/yOU1ql Kh2wHPGdZ1n4NDy9FcnfMKPwRLAlY0Ck3mNWfTOSbAIO/6uVRsT6+A53Vuwv7HQx wmOTSA+2HSK91l8imTMJF3h8aOdwdeY7D/A= -----END CERTIFICATE-----Generated at Mon Jun 30 15:56:33 2025 by rpki-client