$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa File: c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa (raw, json) Hash identifier: NS9LIkKH3uNqEVvdnxY2US2CfGhQfiGKoresMEx4tDQ= Subject key identifier: 85:03:A3:31:DE:EE:C8:17:05:DD:BB:4D:F1:8E:E1:23:DF:E1:EB:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5EFE479B52CBB41DBA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:5100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:5e:fe:47:9b:52:cb:b4:1d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=5b6aa541-4394-4517-a1f2-9737e6130e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:73:49:8d:9f:90:ee:b8:8f:1c:15:85:68: 43:3d:50:ea:b8:4a:ac:e3:ba:50:1f:10:9e:92:f1: b7:16:4a:16:5e:b2:43:ab:b5:35:ea:65:2d:31:36: 97:4d:7f:0c:26:0d:45:61:8b:25:6c:0f:c7:e3:e7: 0e:03:10:22:92:48:c1:9b:20:08:fd:fb:38:9b:ef: 4b:93:37:b6:87:f8:ee:a3:d9:a8:2c:26:c9:37:54: f2:26:e5:7d:96:38:45:22:60:1f:8a:36:e7:a5:1e: 60:59:6d:65:e9:d0:fb:97:70:35:c1:73:c8:3c:23: 7f:8c:3e:85:9e:82:52:e4:2a:0a:f3:22:4b:61:70: ba:03:b2:6e:8a:b3:94:a0:94:f1:0f:61:53:30:fb: 6a:d0:7d:2d:3f:bc:4a:c6:21:40:20:5a:d4:66:6b: 23:2b:42:e7:62:6f:f5:b0:cd:07:d5:4e:09:f0:ff: 24:d9:c6:19:1c:17:98:70:08:fe:b0:f8:8f:d6:68: c8:13:82:28:07:b0:b9:73:01:16:43:43:1b:bd:3b: 6f:c9:98:43:df:3e:07:a2:ae:91:57:51:62:f0:24: 69:c3:f0:5b:59:51:8d:7b:a8:60:8d:b8:72:28:5f: 9b:a4:4a:06:28:77:70:41:bc:a7:da:6c:cd:b8:bd: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:03:A3:31:DE:EE:C8:17:05:DD:BB:4D:F1:8E:E1:23:DF:E1:EB:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f0:ef:05:18:b3:03:8b:f6:87:f8:99:d0:9f:d2:3c:c0:77: 35:f0:92:5b:ec:68:d2:00:5a:6a:fa:44:ec:52:b5:48:5e:48: 05:f6:6c:e6:7c:45:7d:93:e1:51:91:9c:0d:eb:be:59:60:62: 10:b9:e0:df:6d:42:39:2c:69:ca:7e:b1:94:02:d2:f7:5d:ab: a0:d4:20:75:ed:f8:1d:0a:ac:ed:b8:ee:b0:83:55:10:6b:53: d6:4b:b1:f2:88:94:bc:92:73:d6:32:71:7e:5b:8a:ad:ac:08: e6:5d:be:36:bf:47:74:1f:8f:34:29:be:bc:84:d5:37:30:c9: 1b:1c:59:a2:b6:9e:5c:55:46:fb:ef:95:61:50:df:39:2f:64: e5:a9:25:2a:d9:82:ff:45:0a:fb:53:b1:55:d4:c9:de:c3:46: 61:99:ac:43:8f:8f:7e:79:5d:22:1e:05:f9:2e:99:c4:cd:6e: c3:c6:e1:55:32:10:be:78:84:13:e4:b8:6a:2a:a6:a7:78:9d: b3:d2:f1:e5:40:aa:55:cf:0f:4a:bc:6c:93:f3:9b:9d:3e:8a: ce:8a:17:63:42:fa:44:49:cb:11:cd:32:d0:95:14:ab:aa:a2: 73:a4:3d:89:a5:f5:5b:36:95:e4:aa:f8:4b:f5:7e:78:bb:eb: d6:e4:8d:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G17+R5tSy7QdugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NWI2YWE1NDEtNDM5NC00NTE3LWExZjItOTczN2U2MTMwZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3lzSY2fkO64jxwVhWhDPVDquEqs47pQHxCe kvG3FkoWXrJDq7U16mUtMTaXTX8MJg1FYYslbA/H4+cOAxAikkjBmyAI/fs4m+9L kze2h/juo9moLCbJN1TyJuV9ljhFImAfijbnpR5gWW1l6dD7l3A1wXPIPCN/jD6F noJS5CoK8yJLYXC6A7JuirOUoJTxD2FTMPtq0H0tP7xKxiFAIFrUZmsjK0LnYm/1 sM0H1U4J8P8k2cYZHBeYcAj+sPiP1mjIE4IoB7C5cwEWQ0MbvTtvyZhD3z4Hoq6R V1Fi8CRpw/BbWVGNe6hgjbhyKF+bpEoGKHdwQbyn2mzNuL2z4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUDozHe7sgXBd27TfGO4SPf4eseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQ5ZGIxYWYtZjZiZi0z ZWZmLTljNWYtYTRkMjhiZTIyNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXw7wUYswOL9of4mdCf0jzAdzXwklvsaNIAWmr6ROxStUheSAX2 bOZ8RX2T4VGRnA3rvllgYhC54N9tQjksacp+sZQC0vddq6DUIHXt+B0KrO247rCD VRBrU9ZLsfKIlLySc9YycX5biq2sCOZdvja/R3QfjzQpvryE1TcwyRscWaK2nlxV RvvvlWFQ3zkvZOWpJSrZgv9FCvtTsVXUyd7DRmGZrEOPj355XSIeBfkumcTNbsPG 4VUyEL54hBPkuGoqpqd4nbPS8eVAqlXPD0q8bJPzm50+is6KF2NC+kRJyxHNMtCV FKuqonOkPYml9Vs2leSq+Ev1fni769bkjWc= -----END CERTIFICATE-----Generated at Thu Jul 10 02:10:26 2025 by rpki-client