$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa File: 97e8e694-630f-3435-bbfc-604e8b2ce496.roa (raw, json) Hash identifier: KSMkE0rCGvM9UulrADd8xLryVUoNR/P8xcaxqHC4414= Subject key identifier: 66:11:23:3F:85:B2:F8:EE:B5:59:FC:8D:E8:16:0D:A9:55:14:47:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5584F39BCD11B3AA2C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:6f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:55:84:f3:9b:cd:11:b3:aa:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=2d9a4960-2ac6-41a3-acc1-62b3e3c6f337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:0f:2b:25:74:00:a7:b5:70:7d:64:ca:8e: 75:73:72:74:4f:d8:4b:cc:10:cf:27:c3:23:b1:3b: 63:03:0f:45:8a:6c:86:9c:6e:58:24:13:1b:24:de: 00:b9:af:e0:4a:ea:30:94:8e:a0:a6:73:d8:67:cc: e5:92:ab:64:8e:f3:c4:e1:e4:25:98:13:7a:f4:ce: ef:72:cb:8e:da:8c:ac:40:15:6b:31:4f:e9:3b:65: 10:49:02:e9:e5:59:89:d7:3e:34:68:8e:f4:48:a2: ef:63:2d:35:ef:35:5b:7c:cc:39:06:f2:4d:f1:37: 15:4a:50:82:2b:ad:12:f5:ce:1e:d1:92:97:83:62: 52:c4:ff:d5:70:0a:70:8f:3f:a6:22:14:79:a2:4f: 54:6f:c9:39:3e:d7:5a:1b:04:b5:10:6d:fd:13:b8: cb:7d:2f:5d:4e:64:3c:e2:a2:3d:a3:15:01:be:5b: 87:7b:9c:e0:cc:3b:05:f2:09:60:73:dc:dc:ea:50: 6a:24:ac:d6:68:4d:45:b0:c6:53:28:4e:26:ca:67: 8e:f4:31:29:b8:04:c6:4e:df:10:14:54:b1:b4:5d: 3e:f8:fe:07:92:c2:e8:88:04:09:b2:ed:d5:c0:2d: 0a:f1:56:57:5b:2f:0d:7b:bb:39:6b:5b:81:8d:86: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:11:23:3F:85:B2:F8:EE:B5:59:FC:8D:E8:16:0D:A9:55:14:47:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c7:56:0c:93:ab:41:0b:cf:e4:fa:18:77:ad:13:8f:b5:d8: db:ad:8e:5c:07:45:18:a5:93:2a:ea:8a:92:85:d7:e9:0f:0b: 52:c7:41:f7:49:46:80:82:e4:48:c3:c4:6e:14:1b:e4:5c:b9: 27:27:e5:84:a7:75:fa:04:32:68:7a:4a:9f:75:e0:b3:2c:df: 8f:28:ba:11:e2:37:be:2a:06:2f:0f:65:ce:fd:93:b8:e7:f2: f3:01:4c:30:b9:11:8e:f7:08:6c:3f:a2:52:da:e6:3e:a0:cb: 3e:e8:7c:00:87:2c:c0:8a:61:1b:cf:68:e6:35:8d:e5:a2:95: e4:4d:f6:20:e8:2f:ad:19:2a:42:f6:79:ad:c4:71:2e:2e:02: 38:35:83:9b:5f:72:90:e4:d6:6d:61:eb:66:e1:88:5e:59:57: 79:62:8a:05:25:34:0f:20:69:7a:40:9a:ed:c3:d3:33:17:53: 73:22:e8:ef:1d:d6:e7:f9:7e:ba:88:48:8e:0b:c1:f4:c1:a0: 3a:3d:6a:ea:45:87:a9:e4:8f:d4:20:08:e9:7c:2c:08:76:d6: 94:1e:0f:61:7d:48:57:0c:39:c7:a3:c2:26:26:81:8d:44:13: 97:31:58:bf:80:2c:4f:e0:16:29:98:48:c7:98:b7:0a:bd:ed: 68:8a:7d:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G1WE85vNEbOqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MmQ5YTQ5NjAtMmFjNi00MWEzLWFjYzEtNjJiM2UzYzZmMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmgPKyV0AKe1cH1kyo51c3J0T9hLzBDPJ8Mj sTtjAw9FimyGnG5YJBMbJN4Aua/gSuowlI6gpnPYZ8zlkqtkjvPE4eQlmBN69M7v csuO2oysQBVrMU/pO2UQSQLp5VmJ1z40aI70SKLvYy017zVbfMw5BvJN8TcVSlCC K60S9c4e0ZKXg2JSxP/VcApwjz+mIhR5ok9Ub8k5PtdaGwS1EG39E7jLfS9dTmQ8 4qI9oxUBvluHe5zgzDsF8glgc9zc6lBqJKzWaE1FsMZTKE4mymeO9DEpuATGTt8Q FFSxtF0++P4HksLoiAQJsu3VwC0K8VZXWy8Ne7s5a1uBjYYcEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYRIz+FsvjutVn8jegWDalVFEfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTdlOGU2OTQtNjMwZi0z NDM1LWJiZmMtNjA0ZThiMmNlNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgG+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnHVgyTq0ELz+T6GHetE4+12NutjlwHRRilkyrqipKF1+kPC1LH QfdJRoCC5EjDxG4UG+RcuScn5YSndfoEMmh6Sp914LMs348ouhHiN74qBi8PZc79 k7jn8vMBTDC5EY73CGw/olLa5j6gyz7ofACHLMCKYRvPaOY1jeWileRN9iDoL60Z KkL2ea3EcS4uAjg1g5tfcpDk1m1h62bhiF5ZV3liigUlNA8gaXpAmu3D0zMXU3Mi 6O8d1uf5frqISI4LwfTBoDo9aupFh6nkj9QgCOl8LAh21pQeD2F9SFcMOcejwiYm gY1EE5cxWL+ALE/gFimYSMeYtwq97WiKfRw= -----END CERTIFICATE-----Generated at Thu Jul 10 03:25:59 2025 by rpki-client