$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa File: c3612ddb-d94b-3760-b29f-8208b6011a68.roa (raw, json) Hash identifier: Ex8ekiGB/ExHdVf2G9eNzExs4U3g5sogtBDNIVsmRfI= Subject key identifier: EA:23:6B:8A:02:4A:B2:E0:FE:18:A2:9B:DC:76:A0:EA:50:9F:8B:25 Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F4328584AC710F4FD633CE2D3678FDAE0 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 17103 IP address blocks: 2620:1b::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:f4:fd:63:3c:e2:d3:67:8f:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=367065f1-2061-4175-ba02-09a5be283408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:87:35:37:a0:6b:a8:05:ed:b8:b9:b0:01: 6e:11:b3:0b:82:08:ac:d2:6e:fd:31:5f:74:8b:4f: 64:38:d2:1b:97:21:4a:94:68:f9:0c:0c:6a:6d:b6: 7e:26:75:4d:a8:dc:2f:94:bb:59:fe:fd:e8:14:ac: e9:5c:10:76:44:96:80:59:8e:6a:b6:3d:09:e7:cc: 3d:0b:35:31:9d:0f:1c:c0:3b:4d:11:9e:74:d5:e1: 33:f2:1b:3d:0e:c5:24:0d:f3:7f:0b:c2:2b:a4:6b: 50:43:1b:af:5f:37:82:1b:41:7e:e4:65:59:29:6a: f3:e3:bd:8f:e7:e4:6a:0e:04:26:f7:42:f4:9f:7b: ea:61:ae:f0:80:cd:bb:cd:5f:b9:0b:91:46:4e:cf: fd:fd:8b:e2:21:58:f0:e2:bd:8a:9c:79:a7:4f:a7: 12:58:66:ce:ee:79:2f:f0:c4:e7:29:ae:21:ac:31: 65:06:62:1b:e9:56:99:46:7a:39:12:83:8c:32:8b: 34:7f:2d:2e:ca:d3:31:39:25:b8:c3:d4:31:01:66: e0:29:76:db:ec:63:8c:bf:7e:9e:0c:fe:1c:74:84: 9d:03:c1:99:f7:75:4d:80:8b:70:5e:ae:f8:53:79: 68:0e:a3:cf:cb:29:36:7c:bd:ac:18:f5:a4:a9:a7: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:6B:8A:02:4A:B2:E0:FE:18:A2:9B:DC:76:A0:EA:50:9F:8B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f2:b8:84:8b:8c:5a:d8:fe:1f:09:08:d2:f1:b7:d8:cb:97: bc:9e:9b:bb:e2:ac:8a:7b:b5:18:23:47:eb:a1:54:03:e2:b7: 7b:e0:66:2f:4e:6b:ee:d9:45:aa:e4:12:94:66:8b:6e:f1:46: 47:de:e9:aa:81:3a:14:17:d7:e7:c3:7a:c8:d5:99:1f:9d:77: 6b:61:18:92:11:bd:cd:7b:e4:1c:ae:b3:86:04:ff:a1:ba:4e: 57:7d:a6:cc:ea:d2:23:af:f2:5a:9f:a0:d7:70:4f:ee:f9:c7: 19:0e:4c:af:ef:d3:33:78:18:22:37:4e:f8:fb:81:81:1c:d7: c7:da:46:de:6d:ac:b4:58:fb:32:b2:ae:40:1c:3c:ad:f1:b5: 1c:76:55:64:a0:13:ba:fb:81:8f:84:5f:99:57:82:9b:22:fc: 03:cf:94:68:73:c0:4e:ac:31:b4:1e:5c:4a:b5:3b:a0:60:ba: 83:4d:86:3c:44:77:0f:fa:32:0e:ca:6a:f2:c9:4e:bb:ed:b1: cc:2e:55:58:05:5c:7c:af:ce:60:b9:ba:c0:a7:78:e3:a4:6c: e5:7a:e7:68:df:6e:21:2f:00:e7:8d:70:f5:da:1b:35:4f:b4: 79:1a:45:15:b0:b7:64:b8:73:6a:74:4b:dd:18:bc:f3:98:fd: 46:74:d7:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErHEPT9Yzzi02eP2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MzY3MDY1ZjEtMjA2MS00MTc1LWJhMDItMDlhNWJlMjgzNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W+HNTega6gF7bi5sAFuEbMLggis0m79MV90 i09kONIblyFKlGj5DAxqbbZ+JnVNqNwvlLtZ/v3oFKzpXBB2RJaAWY5qtj0J58w9 CzUxnQ8cwDtNEZ501eEz8hs9DsUkDfN/C8IrpGtQQxuvXzeCG0F+5GVZKWrz472P 5+RqDgQm90L0n3vqYa7wgM27zV+5C5FGTs/9/YviIVjw4r2KnHmnT6cSWGbO7nkv 8MTnKa4hrDFlBmIb6VaZRno5EoOMMos0fy0uytMxOSW4w9QxAWbgKXbb7GOMv36e DP4cdISdA8GZ93VNgItwXq74U3loDqPPyyk2fL2sGPWkqaeIowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoja4oCSrLg/hiim9x2oOpQn4slMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvYzM2MTJkZGItZDk0Yi0z NzYwLWIyOWYtODIwOGI2MDExYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAGwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjyuISLjFrY/h8JCNLxt9jLl7yem7virIp7tRgjR+uhVAPit3vg Zi9Oa+7ZRarkEpRmi27xRkfe6aqBOhQX1+fDesjVmR+dd2thGJIRvc175Byus4YE /6G6Tld9pszq0iOv8lqfoNdwT+75xxkOTK/v0zN4GCI3Tvj7gYEc18faRt5trLRY +zKyrkAcPK3xtRx2VWSgE7r7gY+EX5lXgpsi/APPlGhzwE6sMbQeXEq1O6BguoNN hjxEdw/6Mg7KavLJTrvtscwuVVgFXHyvzmC5usCneOOkbOV652jfbiEvAOeNcPXa GzVPtHkaRRWwt2S4c2p0S90YvPOY/UZ01/E= -----END CERTIFICATE-----Generated at Thu Aug 21 11:04:33 2025 by rpki-client