$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa File: f970cde3-30bd-3207-884d-ac39710dcedf.roa (raw, json) Hash identifier: ezhs8BOqebY46R/6yJqEF97Um1L5ZE7D9LQvvrEM8Gk= Subject key identifier: 28:7E:A6:77:53:7D:F1:5B:5D:23:7F:F4:F3:62:5B:53:8C:86:22:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B156DBD6B2CD43632764FF230 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa Signing time: Thu 04 Sep 2025 14:40:47 +0000 ROA not before: Thu 04 Sep 2025 14:40:47 +0000 ROA not after: Wed 03 Dec 2025 15:40:47 +0000 asID: 19905 IP address blocks: 2604:2d81:2b80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:6d:bd:6b:2c:d4:36:32:76:4f:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 4 14:40:47 2025 GMT Not After : Dec 3 15:40:47 2025 GMT Subject: CN=1ff6c6e2-4f6e-44e8-acc1-9703041b670a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:cd:bd:b9:eb:8c:08:68:f8:14:c0:5a:b8: 1c:78:0e:9a:d4:dd:bc:4e:7b:c5:82:c1:8d:66:99: b6:96:56:45:e2:d3:ec:3e:90:da:4e:6e:24:18:23: f7:ac:5c:f4:02:65:ca:ac:ef:c5:00:bb:3f:17:96: 35:d5:10:49:7b:d2:2b:95:6d:dc:e8:68:15:3b:39: 14:6e:e6:e2:7b:82:5b:80:fc:4d:1f:29:53:28:a8: aa:71:1f:91:9a:88:d2:a4:40:6b:f3:2a:36:4b:14: 24:73:74:c7:a2:77:a3:98:5d:75:c8:95:a8:56:24: 74:a4:a1:ee:32:23:b9:ec:bc:48:8c:8e:89:77:4d: c1:d7:e5:5f:4e:09:b0:bb:a3:d4:92:0b:7c:3d:92: 9f:a0:ac:95:d2:5b:05:0f:33:31:ee:b3:32:e4:d8: 70:d7:d8:01:08:23:6b:a4:50:61:33:f6:58:0f:e2: 6f:34:cd:be:5c:2c:28:d4:8e:5e:3c:43:4b:08:ab: 2b:ae:99:6d:72:87:67:75:71:06:31:6e:0d:5f:5d: 33:8a:a5:77:df:34:cc:61:ac:31:c2:e3:98:a4:c4: 91:2c:61:d5:3d:48:6d:ec:09:61:b8:41:7f:0b:48: e7:9a:79:43:85:ea:ea:d9:e5:02:94:b6:b7:3c:ef: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7E:A6:77:53:7D:F1:5B:5D:23:7F:F4:F3:62:5B:53:8C:86:22:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2b80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ac:12:f7:d5:40:4b:43:f0:25:6c:a9:4a:e0:57:d5:05:50: 1a:4e:1b:88:8a:16:00:e0:48:20:0d:f2:89:be:f0:f9:e2:36: e7:b8:97:27:b2:70:fe:10:4d:45:03:d5:33:60:d7:9e:4f:4f: c0:18:da:45:c2:f0:4f:24:33:df:fd:0e:2e:27:50:da:b5:97: 85:0e:91:a0:d0:c4:a5:63:1c:dc:cc:83:eb:e5:af:f6:56:f6: f9:8e:fb:bc:27:73:ef:18:24:1e:2c:9d:5e:e1:e2:6a:1d:1a: 8e:db:aa:e3:a1:10:c6:a8:4c:6b:40:5e:3c:70:b2:8b:a7:5a: 8c:0c:a9:41:98:94:f9:bb:37:4c:5b:8d:bc:26:1d:0b:6e:d6: 7d:2d:d6:e6:66:ad:b7:3f:af:f6:73:cf:6c:20:60:fa:81:84: d4:a8:3d:2a:7b:40:7f:b4:93:c7:88:c4:6e:18:91:97:a8:ce: a4:ef:54:51:65:75:54:a0:da:2b:ec:80:cf:f0:e3:c2:85:8d: 9e:0e:a8:30:c8:2c:0a:3d:85:66:34:80:2e:18:1e:37:09:74: df:4a:a3:5e:29:d1:a9:2d:f9:e9:d4:a9:5e:7a:94:da:97:d1: ba:84:83:60:35:34:2a:99:15:17:96:6e:b8:2f:63:ee:69:cb: 47:30:5b:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsVbb1rLNQ2MnZP8jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwNDE0NDA0N1oXDTI1MTIwMzE1NDA0N1owLzEtMCsGA1UEAxMk MWZmNmM2ZTItNGY2ZS00NGU4LWFjYzEtOTcwMzA0MWI2NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPPNvbnrjAho+BTAWrgceA6a1N28TnvFgsGN Zpm2llZF4tPsPpDaTm4kGCP3rFz0AmXKrO/FALs/F5Y11RBJe9IrlW3c6GgVOzkU bubie4JbgPxNHylTKKiqcR+RmojSpEBr8yo2SxQkc3THonejmF11yJWoViR0pKHu MiO57LxIjI6Jd03B1+VfTgmwu6PUkgt8PZKfoKyV0lsFDzMx7rMy5Nhw19gBCCNr pFBhM/ZYD+JvNM2+XCwo1I5ePENLCKsrrpltcodndXEGMW4NX10ziqV33zTMYawx wuOYpMSRLGHVPUht7AlhuEF/C0jnmnlDherq2eUClLa3PO/h/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCh+pndTffFbXSN/9PNiW1OMhiKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk3MGNkZTMtMzBiZC0z MjA3LTg4NGQtYWMzOTcxMGRjZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFysEvfVQEtD8CVsqUrgV9UFUBpOG4iKFgDgSCAN8om+8PniNue4 lyeycP4QTUUD1TNg155PT8AY2kXC8E8kM9/9Di4nUNq1l4UOkaDQxKVjHNzMg+vl r/ZW9vmO+7wnc+8YJB4snV7h4modGo7bquOhEMaoTGtAXjxwsounWowMqUGYlPm7 N0xbjbwmHQtu1n0t1uZmrbc/r/Zzz2wgYPqBhNSoPSp7QH+0k8eIxG4YkZeozqTv VFFldVSg2ivsgM/w48KFjZ4OqDDILAo9hWY0gC4YHjcJdN9Ko14p0akt+enUqV56 lNqX0bqEg2A1NCqZFReWbrgvY+5py0cwW6M= -----END CERTIFICATE-----Generated at Sat Sep 6 10:00:10 2025 by rpki-client