$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa File: cd123836-0bbd-3210-a824-88d6c91c31da.roa (raw, json) Hash identifier: pGcJnQUikrB6f2b5XCqocFcMJnWyDxBtAvZ/0xDq9Ok= Subject key identifier: 7B:F8:7A:D6:07:0D:BD:88:1E:30:30:64:AA:2F:18:9E:35:AD:66:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A74B5DB3A757050F6D1A45B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 2604:2d80:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:db:3a:75:70:50:f6:d1:a4:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=e9d23867-1720-4239-8aa2-fa019e7bd045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:88:3c:6b:88:38:e5:9e:d7:c1:ec:c3:60: b5:ac:4e:1f:c8:4b:ba:b3:99:b4:da:9c:e3:2a:50: 3f:62:ae:a3:47:7f:1d:80:0e:16:43:00:02:66:1c: 61:9c:73:ef:ab:46:e4:bb:0e:8a:f7:65:b6:71:aa: 6f:83:f4:9b:2c:18:cc:18:26:83:d8:43:73:5b:32: d8:4a:2e:3b:91:f4:07:23:cc:71:fa:31:0d:c1:82: 46:80:dc:58:b1:2a:6c:59:85:2d:ec:fc:0a:25:b6: 5f:f7:e7:38:a2:0c:07:e4:65:4c:8a:07:88:ab:6c: 2d:07:a3:95:8e:8b:d5:04:55:19:9c:1a:cd:57:50: 42:18:a2:05:81:9b:d3:0f:3b:34:b3:8d:65:be:09: dd:52:da:f9:23:a2:07:87:54:69:d9:56:69:af:53: aa:39:86:a9:af:4b:80:ef:6e:31:a5:4b:cc:83:8e: 97:fe:59:11:ab:a3:74:17:72:12:04:b2:13:63:35: 6f:94:40:da:73:f4:f6:ba:25:5b:2f:da:70:8a:61: 1e:f3:4c:27:29:f4:4f:23:38:f8:e9:66:ec:ff:0c: 4e:a4:2c:ba:83:6e:a5:d8:d2:0d:11:09:77:a4:ea: 49:53:0a:dd:d0:bf:49:0e:20:a6:57:8a:a1:60:62: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:7A:D6:07:0D:BD:88:1E:30:30:64:AA:2F:18:9E:35:AD:66:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:81:40:a7:bd:84:b5:94:fc:70:02:9a:ed:33:f9:63:60:08: ae:c5:50:3e:8f:77:67:84:20:3b:a2:a4:92:76:e9:35:58:64: ef:7e:42:1e:99:68:80:62:c7:9d:00:ba:ef:71:42:e9:31:4b: ed:0b:37:42:aa:a5:4e:50:c7:a7:9d:3b:36:5b:e8:2c:fa:47: fa:51:54:83:51:a5:b9:10:da:82:ad:5f:65:b4:2c:7a:1a:bd: be:50:ca:e7:a5:3c:fd:94:d7:ec:54:06:5f:8c:8b:13:6b:7b: 71:71:5c:3f:7a:eb:60:81:2e:60:b9:76:55:6c:03:8e:c4:ac: 90:56:ce:6f:f3:65:7e:f7:8d:b9:2f:5e:43:24:04:13:d8:f3: bf:51:73:b4:eb:ee:69:d9:38:d6:9e:ae:af:37:ff:03:ff:b9: bb:cc:4a:fa:b9:0c:6c:78:9b:9b:82:64:09:af:74:ef:0e:7b: da:53:e7:13:87:04:52:f7:93:1e:84:1c:37:6b:c1:24:fb:57: 80:ae:2a:1c:ab:a9:b6:ac:05:e5:ff:60:f9:34:cd:66:a2:c6: 87:7a:8f:ce:81:7c:49:01:d3:38:1c:18:e8:a5:50:71:6c:e1: ef:7a:a8:c9:77:bf:65:c9:a2:5f:b3:6b:20:5b:39:63:d3:c9: 3f:51:0a:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp0tds6dXBQ9tGkW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTlkMjM4NjctMTcyMC00MjM5LThhYTItZmEwMTllN2JkMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFqIPGuIOOWe18Hsw2C1rE4fyEu6s5m02pzj KlA/Yq6jR38dgA4WQwACZhxhnHPvq0bkuw6K92W2capvg/SbLBjMGCaD2ENzWzLY Si47kfQHI8xx+jENwYJGgNxYsSpsWYUt7PwKJbZf9+c4ogwH5GVMigeIq2wtB6OV jovVBFUZnBrNV1BCGKIFgZvTDzs0s41lvgndUtr5I6IHh1Rp2VZpr1OqOYapr0uA 724xpUvMg46X/lkRq6N0F3ISBLITYzVvlEDac/T2uiVbL9pwimEe80wnKfRPIzj4 6Wbs/wxOpCy6g26l2NINEQl3pOpJUwrd0L9JDiCmV4qhYGIzGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHv4etYHDb2IHjAwZKovGJ41rWbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2QxMjM4MzYtMGJiZC0z MjEwLWE4MjQtODhkNmM5MWMzMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIoFAp72EtZT8cAKa7TP5Y2AIrsVQPo93Z4QgO6KkknbpNVhk735C HplogGLHnQC673FC6TFL7Qs3QqqlTlDHp507NlvoLPpH+lFUg1GluRDagq1fZbQs ehq9vlDK56U8/ZTX7FQGX4yLE2t7cXFcP3rrYIEuYLl2VWwDjsSskFbOb/NlfveN uS9eQyQEE9jzv1FztOvuadk41p6urzf/A/+5u8xK+rkMbHibm4JkCa907w572lPn E4cEUveTHoQcN2vBJPtXgK4qHKuptqwF5f9g+TTNZqLGh3qPzoF8SQHTOBwY6KVQ cWzh73qoyXe/ZcmiX7NrIFs5Y9PJP1EK+Q== -----END CERTIFICATE-----Generated at Thu Jul 10 02:15:43 2025 by rpki-client