$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa File: fece7d57-ff56-3db1-9e3b-3c77477b1772.roa (raw, json) Hash identifier: DS9s6OQBs82SnLLT1d4E/KSHHVXoH6lzkjZbJE6rzNc= Subject key identifier: 84:CD:90:DA:59:BA:8A:F9:EC:70:EA:7E:28:95:1B:80:8A:FD:A9:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5E5278CCC656FD102300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2d80:4980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:5e:52:78:cc:c6:56:fd:10:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=9c6a15ba-c42b-4ac3-b4b8-3b9a790e137e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:74:f2:16:fd:42:32:56:a7:76:13:88:24: 32:5a:a1:03:01:fa:e4:fe:b6:aa:13:12:20:a5:d1: 57:ab:8c:b7:48:d7:e0:36:b2:d8:a5:b9:19:9c:73: aa:e9:7c:4a:83:8c:03:87:2f:7e:6a:c2:7b:61:be: b3:40:ba:b9:54:c4:fe:a7:f6:53:ef:1d:80:6c:dc: aa:e6:37:4f:90:fe:28:57:08:e0:87:8d:52:f8:99: 84:6b:42:17:b0:d4:15:0d:42:1d:45:26:04:74:e0: 52:28:04:a7:53:f3:c8:7f:39:af:90:fc:6a:e6:43: 2b:3c:63:2c:5f:cb:06:cc:38:93:28:e7:09:ad:3d: 5e:40:4a:a9:44:0f:19:a6:48:fc:6e:5c:1b:18:ca: 44:fd:da:53:c3:09:a6:bb:49:87:2e:e9:40:f3:2d: 32:0a:a8:c3:4b:bd:c5:7d:51:0b:96:57:61:e0:d3: 7f:53:be:51:96:6b:bf:aa:02:1f:5b:84:1b:70:a5: 60:ef:de:d2:5e:1f:6a:6f:a3:7b:03:b2:f7:5a:d3: d6:8a:27:ab:82:00:d5:93:76:9c:8d:75:e0:f8:01: e7:e9:98:88:f7:8f:de:83:2a:a2:1c:c8:50:34:d7: bc:d7:d1:e1:35:30:5c:37:40:e1:d6:2c:21:71:1a: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CD:90:DA:59:BA:8A:F9:EC:70:EA:7E:28:95:1B:80:8A:FD:A9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:34:d7:25:e6:60:4c:4f:83:e6:ad:0c:ca:1f:a9:ca:81:c0: f3:63:7a:17:b4:10:83:f1:16:97:82:55:a9:df:ca:52:ea:a3: 5f:29:d5:e9:05:43:38:b0:3b:6d:b4:de:16:ec:ed:eb:3e:d7: c3:5f:aa:74:ea:97:e9:89:a6:5e:4e:70:a2:67:e0:0d:a9:f4: 85:6b:16:9f:79:9b:52:c8:66:96:87:cc:66:a9:6f:c3:e6:94: d6:6b:31:57:a2:28:3e:e3:24:8b:0b:60:b6:a6:98:62:56:cc: fb:69:94:66:7f:b2:c0:ed:71:76:7c:3f:bd:ee:8e:40:0b:9a: ce:9a:47:30:10:fa:ec:df:0c:f8:34:53:33:38:48:29:8c:5b: 44:d1:db:c9:65:74:01:b2:25:26:f0:3c:43:af:a7:54:35:d6: ed:80:ef:55:9f:65:9e:14:3b:d9:05:d6:d9:48:f1:39:a6:58: 6c:cd:3b:f0:47:ca:3b:7b:e1:9f:97:8c:c8:21:33:12:bc:53: 32:cc:96:65:08:a5:1a:4d:f7:db:10:78:56:d0:70:04:02:80: 3e:56:33:ef:f6:fc:36:ac:45:c8:66:63:44:95:d2:4b:d5:5e: 37:c4:2e:e3:4d:ad:df:10:96:7e:b9:23:62:b8:5b:05:a0:7a: b3:3d:f9:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G15SeMzGVv0QIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk OWM2YTE1YmEtYzQyYi00YWMzLWI0YjgtM2I5YTc5MGUxMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFx08hb9QjJWp3YTiCQyWqEDAfrk/raqExIg pdFXq4y3SNfgNrLYpbkZnHOq6XxKg4wDhy9+asJ7Yb6zQLq5VMT+p/ZT7x2AbNyq 5jdPkP4oVwjgh41S+JmEa0IXsNQVDUIdRSYEdOBSKASnU/PIfzmvkPxq5kMrPGMs X8sGzDiTKOcJrT1eQEqpRA8Zpkj8blwbGMpE/dpTwwmmu0mHLulA8y0yCqjDS73F fVELlldh4NN/U75Rlmu/qgIfW4QbcKVg797SXh9qb6N7A7L3WtPWiierggDVk3ac jXXg+AHn6ZiI94/egyqiHMhQNNe819HhNTBcN0Dh1iwhcRqjTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFITNkNpZuor57HDqfiiVG4CK/akSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmVjZTdkNTctZmY1Ni0z ZGIxLTllM2ItM2M3NzQ3N2IxNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH001yXmYExPg+atDMofqcqBwPNjehe0EIPxFpeCVanfylLqo18p 1ekFQziwO2203hbs7es+18NfqnTql+mJpl5OcKJn4A2p9IVrFp95m1LIZpaHzGap b8PmlNZrMVeiKD7jJIsLYLammGJWzPtplGZ/ssDtcXZ8P73ujkALms6aRzAQ+uzf DPg0UzM4SCmMW0TR28lldAGyJSbwPEOvp1Q11u2A71WfZZ4UO9kF1tlI8TmmWGzN O/BHyjt74Z+XjMghMxK8UzLMlmUIpRpN99sQeFbQcAQCgD5WM+/2/DasRchmY0SV 0kvVXjfELuNNrd8Qln65I2K4WwWgerM9+TE= -----END CERTIFICATE-----Generated at Thu Jul 10 08:49:05 2025 by rpki-client