$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: SGh/KC1TqS0ggXN36hnqZOT/eI1uUQHjV5SwdOSxXG8= Subject key identifier: DB:68:0D:F2:19:3E:CE:8C:A4:7E:A8:AA:41:0B:AC:DD:01:57:0F:CA Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584A6290931B278F2F719C3DE7C0 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:93:1b:27:8f:2f:71:9c:3d:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0feb81c3-c9b1-4a44-b341-cf29e6c6c003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:c8:fb:7a:50:b5:21:eb:37:e8:78:36:2d: bc:2a:fd:00:9d:8f:ce:10:77:79:06:04:9e:1a:97: 07:a5:5b:f2:e6:16:b8:63:09:6c:ea:6b:15:c9:35: 1d:83:16:0e:59:e8:4a:8c:e3:d6:51:00:70:a7:46: 60:3c:09:29:c0:0c:2b:6f:ab:bc:ac:f4:6d:b8:0a: 68:3d:e7:17:ca:5e:8c:7b:92:83:c1:d9:1d:29:3d: 52:94:74:7c:fc:f9:ad:a9:f7:11:cf:59:65:bf:a6: e3:c0:bf:af:a4:5f:b9:e1:27:10:a4:6f:d3:55:9d: 60:6b:cf:ce:85:55:9d:05:50:2c:93:e8:bd:16:ad: 7a:40:f9:b2:c1:02:12:48:35:62:62:37:48:8a:00: 83:a0:48:62:fa:43:9d:c9:e4:a8:2b:ee:a6:5d:f6: 7b:90:84:7e:45:c3:0c:5b:78:0e:15:32:2e:89:00: cc:c1:e3:ed:bd:cc:4f:2c:86:d1:8b:57:24:53:05: 0f:ea:1b:cb:63:cd:cf:dd:a8:0d:17:3f:5d:f2:39: 5d:97:96:59:34:c5:88:ed:31:2e:12:86:4e:bb:84: d6:3b:3c:72:ab:b2:eb:b7:9c:af:96:53:0c:8f:97: db:61:8c:2c:3e:58:a7:01:d2:f6:1b:65:e7:2d:30: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:0D:F2:19:3E:CE:8C:A4:7E:A8:AA:41:0B:AC:DD:01:57:0F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a7:72:28:1a:12:97:7c:50:f9:f5:b1:9e:77:e9:42:bf:4d: 9d:19:c4:3c:88:ee:1e:82:93:82:31:0f:39:c3:d2:21:04:98: 46:84:9c:4d:03:e7:04:8d:fa:b5:07:4f:0d:48:c8:9a:0f:c2: 6b:1b:75:9a:58:cb:f1:85:cf:33:a0:9c:d8:e6:dc:94:a4:88: 6d:3b:fd:08:23:7a:73:eb:bc:31:49:bf:01:8d:d4:39:c0:3d: a7:d6:7c:97:5e:bd:28:5c:e7:d5:7a:28:03:e4:61:09:e3:d6: d0:1f:98:ae:17:92:01:3c:07:d1:c8:fc:92:ce:14:6b:ca:6f: f6:92:68:23:d5:7d:1d:2f:72:0e:34:02:75:c3:8d:c4:56:d3: 0c:e5:c4:3b:55:1c:dd:e4:6a:b0:c3:d2:89:86:c6:52:b4:c6: 66:6e:4d:09:fb:30:51:97:4d:6c:87:f9:a9:b7:13:ec:1a:e6: 1d:cc:12:70:84:45:ed:64:d8:b9:bb:8a:d5:cd:95:b4:4c:6e: 08:b5:6a:c4:9e:5a:16:c5:e1:e2:78:4b:f6:92:9b:1c:68:bb: 73:9b:24:a7:78:63:ca:c7:0c:23:c6:27:16:95:9f:70:d1:96: 6b:f3:71:5c:51:1d:8d:c2:76:31:c6:12:ec:b5:83:e4:52:19: 81:dd:43:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikJMbJ48vcZw958AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MGZlYjgxYzMtYzliMS00YTQ0LWIzNDEtY2YyOWU2YzZjMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPrI+3pQtSHrN+h4Ni28Kv0AnY/OEHd5BgSe GpcHpVvy5ha4Ywls6msVyTUdgxYOWehKjOPWUQBwp0ZgPAkpwAwrb6u8rPRtuApo PecXyl6Me5KDwdkdKT1SlHR8/PmtqfcRz1llv6bjwL+vpF+54ScQpG/TVZ1ga8/O hVWdBVAsk+i9Fq16QPmywQISSDViYjdIigCDoEhi+kOdyeSoK+6mXfZ7kIR+RcMM W3gOFTIuiQDMwePtvcxPLIbRi1ckUwUP6hvLY83P3agNFz9d8jldl5ZZNMWI7TEu EoZOu4TWOzxyq7Lrt5yvllMMj5fbYYwsPlinAdL2G2XnLTBloQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNtoDfIZPs6MpH6oqkELrN0BVw/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsp3IoGhKXfFD59bGed+lCv02dGcQ8iO4egpOCMQ85w9IhBJhGhJxN A+cEjfq1B08NSMiaD8JrG3WaWMvxhc8zoJzY5tyUpIhtO/0II3pz67wxSb8BjdQ5 wD2n1nyXXr0oXOfVeigD5GEJ49bQH5iuF5IBPAfRyPySzhRrym/2kmgj1X0dL3IO NAJ1w43EVtMM5cQ7VRzd5Gqww9KJhsZStMZmbk0J+zBRl01sh/mptxPsGuYdzBJw hEXtZNi5u4rVzZW0TG4ItWrEnloWxeHieEv2kpscaLtzmySneGPKxwwjxicWlZ9w 0ZZr83FcUR2NwnYxxhLstYPkUhmB3UNC -----END CERTIFICATE-----Generated at Wed Jul 23 11:58:19 2025 by rpki-client