$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa File: 3a40369b-9e90-3db3-b866-f8235d484158.roa (raw, json) Hash identifier: j9KjgyuPYISQlueBlFiJxwABGxDC2RqzYDtcqJ+VEoU= Subject key identifier: 0A:D4:72:69:7F:4F:61:5F:1F:B8:73:D5:06:81:E0:F6:D0:49:11:EC Certificate issuer: /CN=1d65e3c3-96e5-425b-b926-48d278136d48 Certificate serial: 010D0C9F4328584AA42B8A1BC701C42B25040280 Authority key identifier: B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 10821 IP address blocks: 2604:7040::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8a:1b:c7:01:c4:2b:25:04:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65e3c3-96e5-425b-b926-48d278136d48 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=0103d26a-593f-41a3-9aac-20296032b5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:5d:93:19:ec:b4:c0:f9:b7:cc:55:c6:5b: 59:0f:2b:ba:2c:31:04:83:fb:4d:8d:95:12:79:72: d4:fb:2e:4d:34:5f:f6:42:ff:21:09:b1:e5:90:24: 51:31:37:33:89:6a:73:a6:b8:35:fc:f3:15:06:e9: a2:b2:b7:fb:1b:fd:50:e1:c9:6c:12:9c:65:e1:4e: a8:79:f7:a1:86:7b:32:78:54:2c:50:46:a1:89:af: 4e:96:96:58:44:23:4d:97:3a:ce:3d:d9:6b:d6:d7: 49:49:90:b7:79:1e:91:ed:09:f4:8e:c1:cb:91:1e: 3f:ee:f9:73:72:65:cd:a0:a4:ed:30:ef:28:4e:70: a3:6e:8b:bd:15:e1:41:95:91:dc:be:9c:fe:90:8c: 4a:2a:96:99:1d:e2:e0:c1:9c:96:ee:31:8a:2e:28: 7e:d7:30:1d:89:49:de:a3:cc:43:ef:e6:81:f3:29: 0c:ee:09:56:4c:46:52:2c:7c:36:fc:1b:29:82:ae: 65:3f:78:89:c4:74:f6:ba:df:0e:7a:91:72:b5:52: 12:a7:49:45:37:22:77:54:4c:10:c7:47:1b:2e:02: 2e:e9:b0:02:ea:55:9b:4d:d5:fb:9a:55:c2:a8:a1: b6:0a:87:41:17:67:a0:dc:fe:9c:90:d4:0f:17:c6: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:72:69:7F:4F:61:5F:1F:B8:73:D5:06:81:E0:F6:D0:49:11:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl X509v3 Authority Key Identifier: keyid:B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer sbgp-ipAddrBlock: critical IPv6: 2604:7040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:51:41:7a:37:ce:63:fa:ff:09:e4:bb:7c:7e:c5:3f:3c:49: ca:64:d1:6c:56:ba:53:61:d8:d7:2b:fc:76:0f:73:89:43:c1: 53:f8:9a:8c:e4:b9:62:9b:da:5a:16:7c:4e:b0:9a:2e:0d:30: 81:a0:96:26:4d:56:f2:3e:69:dc:09:84:78:72:ca:a3:fa:9c: d1:26:9f:f6:a8:1b:94:9f:35:b2:72:b5:52:01:18:d6:1f:ee: fe:56:a0:d6:ff:13:7a:fe:df:94:27:e9:6b:a7:35:fe:20:5d: 5b:5a:9c:7b:09:45:5c:28:b6:70:34:08:29:d0:2e:06:67:c6: 13:65:cf:30:2e:33:fb:c3:b8:18:26:9f:70:b8:9a:a4:a3:83: 01:95:71:02:a2:cb:6b:82:eb:d4:ec:2d:d3:4b:64:48:61:ca: e4:62:21:23:a1:b1:e8:96:32:8a:fa:4b:1e:1d:69:ba:4d:1a: 12:60:f2:5d:79:a9:37:db:b0:48:49:ff:e6:f0:88:0d:9c:98: 9c:4e:39:ce:9d:b5:ee:91:44:c2:de:82:c7:3b:c5:d4:d3:c7: d6:02:d5:5e:c8:73:17:79:fa:d8:36:2b:ba:9b:8c:76:42:ef: 8d:e8:f0:d2:3f:b0:47:63:8e:c2:20:4b:a5:97:e9:c3:06:00: e3:fe:b1:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqkK4obxwHEKyUEAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2NWUzYzMtOTZlNS00MjViLWI5MjYtNDhkMjc4MTM2 ZDQ4MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MDEwM2QyNmEtNTkzZi00MWEzLTlhYWMtMjAyOTYwMzJiNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuJdkxnstMD5t8xVxltZDyu6LDEEg/tNjZUS eXLU+y5NNF/2Qv8hCbHlkCRRMTcziWpzprg1/PMVBumisrf7G/1Q4clsEpxl4U6o efehhnsyeFQsUEahia9OlpZYRCNNlzrOPdlr1tdJSZC3eR6R7Qn0jsHLkR4/7vlz cmXNoKTtMO8oTnCjbou9FeFBlZHcvpz+kIxKKpaZHeLgwZyW7jGKLih+1zAdiUne o8xD7+aB8ykM7glWTEZSLHw2/Bspgq5lP3iJxHT2ut8OepFytVISp0lFNyJ3VEwQ x0cbLgIu6bAC6lWbTdX7mlXCqKG2CodBF2eg3P6ckNQPF8ZM6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFArUcml/T2FfH7hz1QaB4PbQSRHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZDY1 ZTNjMy05NmU1LTQyNWItYjkyNi00OGQyNzgxMzZkNDgvM2E0MDM2OWItOWU5MC0z ZGIzLWI4NjYtZjgyMzVkNDg0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWQ2NWUzYzMtOTZlNS00MjViLWI5 MjYtNDhkMjc4MTM2ZDQ4LzFkNjVlM2MzLTk2ZTUtNDI1Yi1iOTI2LTQ4ZDI3ODEz NmQ0OC5jcmwwHwYDVR0jBBgwFoAUtikShy6FplBuJkeFNV2oZFnMgXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZDY1ZTNjMy05NmU1LTQyNWItYjkyNi00OGQy NzgxMzZkNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8UUF6N85j+v8J5Lt8fsU/PEnKZNFsVrpTYdjXK/x2D3OJQ8FT+JqM 5Llim9paFnxOsJouDTCBoJYmTVbyPmncCYR4csqj+pzRJp/2qBuUnzWycrVSARjW H+7+VqDW/xN6/t+UJ+lrpzX+IF1bWpx7CUVcKLZwNAgp0C4GZ8YTZc8wLjP7w7gY Jp9wuJqko4MBlXECostrguvU7C3TS2RIYcrkYiEjobHoljKK+kseHWm6TRoSYPJd eak327BISf/m8IgNnJicTjnOnbXukUTC3oLHO8XU08fWAtVeyHMXefrYNiu6m4x2 Qu+N6PDSP7BHY47CIEull+nDBgDj/rGr -----END CERTIFICATE-----Generated at Sat Aug 2 05:25:04 2025 by rpki-client