$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa File: 3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa (raw, json) Hash identifier: lZ4XQ0ID6ThKwxKBTMp+K/x/FOlMcxyiVY/+j8a48fw= Subject key identifier: 32:2A:87:74:0E:0C:FB:55:DD:8C:1C:07:C3:86:DC:16:75:95:58:1B Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7 Certificate serial: 010D0C9F4328584AECC14FF9FB110A20D811EDC0 Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33234 IP address blocks: 2604:f100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4f:f9:fb:11:0a:20:d8:11:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=681c3fae-44aa-439b-814f-c50df4c11fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:09:17:17:69:7f:38:01:e7:51:d0:2c:f4: 20:34:b3:38:aa:7c:ac:73:26:fd:34:97:96:69:42: 67:a4:4d:d9:94:ed:c6:a5:9f:4b:eb:02:c1:0d:de: e0:83:3b:41:f3:9a:87:dc:0e:1f:7d:d5:cb:70:78: 74:88:ce:0c:c2:45:db:10:fc:1e:50:f4:6a:14:ca: 38:12:8f:22:7e:98:84:f3:76:4c:06:11:a1:7b:80: c6:89:6c:e7:75:18:24:f5:e4:f8:01:c1:4f:04:4b: be:05:06:7c:9f:fe:66:b0:18:9f:3f:8c:6c:fc:db: bf:b3:87:44:3c:0c:d6:8a:41:26:2e:35:15:6f:26: 78:4d:b4:b3:7e:69:3f:00:8b:09:37:d4:e3:5c:54: c1:96:44:15:28:3f:c9:1a:d2:7f:e6:4e:1f:10:d4: 3b:9e:3d:db:a6:31:30:19:85:ba:d3:b6:3d:ed:13: 70:7f:53:76:a5:9b:df:f6:89:43:d1:89:b4:26:1c: 1b:6f:39:4b:8d:91:74:7a:a1:51:11:31:ab:ad:5f: ef:87:71:90:1e:2e:2f:a9:95:d2:b6:a4:e0:db:41: 97:87:d9:6d:57:7b:36:f6:b7:0a:0d:9a:d6:1f:84: c0:f9:59:58:44:6a:20:f1:22:d7:77:2d:97:3f:06: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:87:74:0E:0C:FB:55:DD:8C:1C:07:C3:86:DC:16:75:95:58:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl X509v3 Authority Key Identifier: keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer sbgp-ipAddrBlock: critical IPv6: 2604:f100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0d:3b:d0:6b:39:bc:34:72:ff:04:e5:dd:d1:a7:45:4f:42: b3:32:8f:6b:ce:3f:a7:38:a9:5f:02:a9:b8:72:f5:07:04:82: 87:80:17:93:cd:e4:ed:42:1d:f0:9d:e9:0b:7f:78:ac:85:7d: 74:4f:6f:a0:55:e7:5b:83:3e:3c:db:be:06:fc:77:6b:9f:4d: 6e:c6:7a:d2:d1:3a:99:1c:a5:d6:c5:de:c7:c3:a8:95:c1:d5: 16:17:63:0a:32:7e:7d:6c:24:3e:5f:b9:76:d2:f2:4b:23:e0: 86:db:71:11:9d:01:35:cf:33:1b:c6:dc:61:f1:14:c9:92:a8: db:bc:c3:05:db:e7:70:2c:21:7c:91:11:ab:2b:14:d3:ff:08: 03:17:42:af:67:38:b9:12:50:c6:9b:dd:dc:24:00:61:e2:c6: c2:9f:79:bc:6b:e0:d5:40:de:15:7f:26:fe:f5:d2:07:2e:cb: 4b:ca:0e:0b:aa:4f:6e:6d:d9:fb:7f:79:34:07:33:25:68:7d: 3e:cd:10:85:b1:5e:67:54:14:7c:48:bc:b5:a0:f6:18:72:64: 4c:7d:10:ff:6e:d8:83:35:89:92:f8:e3:3f:33:0f:8b:f6:6e: ab:49:87:3b:38:c2:0f:86:c8:3a:0b:a2:e0:eb:a8:a6:78:76: 33:b1:6d:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswU/5+xEKINgR7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAzMWYyODgtYWExMC00YzZkLWI2NDAtNjc0OWYyMTJj NmI3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjgxYzNmYWUtNDRhYS00MzliLTgxNGYtYzUwZGY0YzExZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox8JFxdpfzgB51HQLPQgNLM4qnyscyb9NJeW aUJnpE3ZlO3GpZ9L6wLBDd7ggztB85qH3A4ffdXLcHh0iM4MwkXbEPweUPRqFMo4 Eo8ifpiE83ZMBhGhe4DGiWzndRgk9eT4AcFPBEu+BQZ8n/5msBifP4xs/Nu/s4dE PAzWikEmLjUVbyZ4TbSzfmk/AIsJN9TjXFTBlkQVKD/JGtJ/5k4fENQ7nj3bpjEw GYW607Y97RNwf1N2pZvf9olD0Ym0JhwbbzlLjZF0eqFRETGrrV/vh3GQHi4vqZXS tqTg20GXh9ltV3s29rcKDZrWH4TA+VlYRGog8SLXdy2XPwYCKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIqh3QODPtV3YwcB8OG3BZ1lVgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMDMx ZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5ZjIxMmM2YjcvM2QxZDAyYjMtNWRjZC0z MGRkLTg0NWEtM2MwYjU5N2Y5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjAzMWYyODgtYWExMC00YzZkLWI2 NDAtNjc0OWYyMTJjNmI3L2IwMzFmMjg4LWFhMTAtNGM2ZC1iNjQwLTY3NDlmMjEy YzZiNy5jcmwwHwYDVR0jBBgwFoAUpyjee9vTdDuXx9kIaBKDfKcx5w0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMDMxZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5 ZjIxMmM2YjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqDTvQazm8NHL/BOXd0adFT0KzMo9rzj+nOKlfAqm4cvUHBIKHgBeT zeTtQh3wnekLf3ishX10T2+gVedbgz48274G/Hdrn01uxnrS0TqZHKXWxd7Hw6iV wdUWF2MKMn59bCQ+X7l20vJLI+CG23ERnQE1zzMbxtxh8RTJkqjbvMMF2+dwLCF8 kRGrKxTT/wgDF0KvZzi5ElDGm93cJABh4sbCn3m8a+DVQN4Vfyb+9dIHLstLyg4L qk9ubdn7f3k0BzMlaH0+zRCFsV5nVBR8SLy1oPYYcmRMfRD/btiDNYmS+OM/Mw+L 9m6rSYc7OMIPhsg6C6Lg66imeHYzsW1U -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:40 2025 by rpki-client