$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ededf1da-d1c4-399d-a568-bce7f1f31a18.roa File: ededf1da-d1c4-399d-a568-bce7f1f31a18.roa (raw, json) Hash identifier: 8pvbCJ/v7JMJtkcHO54AWhCEasLo5bbGBUXGxc91qYI= Subject key identifier: 16:04:20:0C:39:60:59:FF:18:E6:09:B5:6D:78:9D:53:B0:AD:9B:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AC50A43F0109EBC470DBACD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ededf1da-d1c4-399d-a568-bce7f1f31a18.roa Signing time: Wed 06 Aug 2025 19:35:41 +0000 ROA not before: Wed 06 Aug 2025 19:35:41 +0000 ROA not after: Tue 04 Nov 2025 20:35:41 +0000 asID: 19905 IP address blocks: 2604:2d81:1a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:0a:43:f0:10:9e:bc:47:0d:ba:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 6 19:35:41 2025 GMT Not After : Nov 4 20:35:41 2025 GMT Subject: CN=20bd7aa1-ec55-4fa3-9f47-fa9d9eb33c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:d0:e5:59:a6:4b:57:aa:29:e2:f9:ca:9a: e7:86:bb:c9:7b:24:49:79:d5:df:ce:ec:0d:3b:31: b3:ad:8a:e6:22:f2:ed:ca:87:ce:5e:11:18:11:47: 83:71:ea:f8:28:f2:01:44:98:f2:6f:44:fd:48:df: c6:d3:47:32:98:4d:2c:56:6e:a4:ad:d4:0f:59:fc: da:97:81:02:8d:12:bd:ad:8b:9c:43:ac:e7:8d:09: 92:3f:41:ba:ca:52:6e:5b:17:39:31:bb:7f:e8:20: 2a:15:16:25:97:15:e2:11:47:b3:56:bd:ab:cb:c5: 8f:2b:c2:f3:61:40:6f:bf:9f:b8:5e:81:7f:ef:38: 6a:94:ff:56:8a:6e:63:14:6a:17:04:b9:00:cc:16: 6b:81:67:5f:b3:f4:60:68:5b:e1:bd:82:5c:dc:91: 08:3c:47:7d:81:d1:42:80:4a:75:8d:2c:05:30:ca: e7:bb:d5:ff:96:c8:73:cb:2f:e6:a7:d8:44:0e:a1: b4:75:ee:b5:c3:9d:53:ad:03:c5:22:38:4b:d0:1c: 90:01:ae:27:df:0e:02:ea:d9:ec:e8:6a:e2:de:6d: 71:1e:bd:34:3f:23:c3:54:0d:57:d5:e8:2d:47:3a: 25:59:5b:97:62:c2:cf:56:8c:a3:25:94:68:88:79: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:04:20:0C:39:60:59:FF:18:E6:09:B5:6D:78:9D:53:B0:AD:9B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ededf1da-d1c4-399d-a568-bce7f1f31a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1a00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:95:eb:bf:59:0b:7a:36:88:de:ca:82:a5:75:07:8b:e8:42: e4:41:d0:67:b2:d2:e2:23:73:99:b4:3e:fe:05:36:74:21:37: 38:d1:eb:78:0b:99:73:7a:1b:7c:93:db:ed:e8:ec:39:60:0f: a8:d9:63:09:0f:ec:71:de:d0:87:f7:d2:fa:a3:e5:92:7c:b2: 0a:02:33:9c:9c:6c:e3:fa:eb:e9:49:31:d3:6f:82:71:cf:26: 1b:23:6a:97:5a:c6:7e:cf:26:a7:06:b7:4a:95:79:93:57:4d: 66:ae:a5:3f:43:f0:24:49:38:39:10:95:96:14:76:b3:b0:81: bc:1f:a8:0a:c0:10:11:af:5f:e3:e8:33:b8:f0:a2:83:d0:99: 8c:2c:77:95:80:b7:81:82:a8:3d:7e:f7:58:95:37:32:9d:ad: 97:f7:28:0e:4b:40:cd:84:97:5f:0b:a5:67:40:19:e6:aa:68: 3f:0c:e3:f4:6b:b1:ea:f1:7a:16:95:37:8d:a8:81:8b:d8:c1: 5d:62:34:14:7c:70:fa:a4:75:83:97:93:ef:34:69:51:90:63: 86:37:51:46:fa:1d:35:c1:06:98:2e:04:aa:21:cf:e7:14:a3: da:40:70:4c:11:9d:2e:5d:ec:5e:14:82:3a:20:1e:0e:fa:8e: 60:04:4a:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFCkPwEJ68Rw26zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNjE5MzU0MVoXDTI1MTEwNDIwMzU0MVowLzEtMCsGA1UEAxMk MjBiZDdhYTEtZWM1NS00ZmEzLTlmNDctZmE5ZDllYjMzYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTQ5VmmS1eqKeL5yprnhrvJeyRJedXfzuwN OzGzrYrmIvLtyofOXhEYEUeDcer4KPIBRJjyb0T9SN/G00cymE0sVm6krdQPWfza l4ECjRK9rYucQ6znjQmSP0G6ylJuWxc5Mbt/6CAqFRYllxXiEUezVr2ry8WPK8Lz YUBvv5+4XoF/7zhqlP9Wim5jFGoXBLkAzBZrgWdfs/RgaFvhvYJc3JEIPEd9gdFC gEp1jSwFMMrnu9X/lshzyy/mp9hEDqG0de61w51TrQPFIjhL0ByQAa4n3w4C6tns 6Gri3m1xHr00PyPDVA1X1egtRzolWVuXYsLPVoyjJZRoiHnGfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYEIAw5YFn/GOYJtW14nVOwrZtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWRlZGYxZGEtZDFjNC0z OTlkLWE1NjgtYmNlN2YxZjMxYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSV679ZC3o2iN7KgqV1B4voQuRB0Gey0uIjc5m0Pv4FNnQhNzjR 63gLmXN6G3yT2+3o7DlgD6jZYwkP7HHe0If30vqj5ZJ8sgoCM5ycbOP66+lJMdNv gnHPJhsjapdaxn7PJqcGt0qVeZNXTWaupT9D8CRJODkQlZYUdrOwgbwfqArAEBGv X+PoM7jwooPQmYwsd5WAt4GCqD1+91iVNzKdrZf3KA5LQM2El18LpWdAGeaqaD8M 4/RrserxehaVN42ogYvYwV1iNBR8cPqkdYOXk+80aVGQY4Y3UUb6HTXBBpguBKoh z+cUo9pAcEwRnS5d7F4UgjogHg76jmAESiE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:53 2025 by rpki-client