$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa File: cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json) Hash identifier: wQeK2mBgtCKf44bRe76hVRrBZZuSe9Rmb8EXdgrNgfQ= Subject key identifier: 15:FB:06:7D:FF:7B:59:BD:D7:AA:7C:24:BA:D1:CE:F6:28:B7:8B:6A Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584A6DBB449CA5D7C89290DCA700 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 30144 IP address blocks: 2604:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:44:9c:a5:d7:c8:92:90:dc:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=89d342cb-2f9f-4d89-aaa2-92228311a1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:91:cd:11:54:04:3b:73:42:a6:f0:87:5e: c8:87:07:23:01:5c:5a:60:cb:f2:23:5d:af:e0:68: b4:11:51:50:05:cc:5b:0c:dc:9f:ad:be:1c:f5:97: ef:04:61:70:ab:21:ef:b4:fd:7d:39:06:62:c1:bc: 2e:15:ff:45:ba:c5:f6:3e:38:0c:b5:09:43:80:30: 16:f0:6e:7b:37:8f:b9:42:36:73:3a:b3:e7:97:f6: 57:94:6b:fd:9a:8c:55:15:6c:75:30:6f:43:7a:61: eb:59:db:e4:77:08:95:40:0b:54:cc:3d:66:bf:48: a7:e8:ce:af:12:9c:be:20:f2:72:bf:5b:27:95:74: 95:76:71:b3:3e:18:c9:ac:a6:14:be:01:5e:bf:45: e1:c6:30:31:de:2f:14:85:2d:d1:b6:8d:1f:11:0e: 8c:d5:70:6c:33:da:c5:d8:48:c0:ac:c4:9c:9c:f9: 76:30:af:a0:89:53:2c:6c:73:de:f4:77:ff:a3:9e: b5:f1:76:dd:33:b7:a6:bf:51:6b:00:23:e8:35:08: f4:32:aa:e8:12:63:b9:01:45:c1:e2:cd:96:db:44: 88:04:e7:52:a5:7d:29:a1:a0:67:41:61:0c:c7:1a: 31:74:cd:29:b0:08:50:d5:83:ba:d2:99:c3:69:44: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FB:06:7D:FF:7B:59:BD:D7:AA:7C:24:BA:D1:CE:F6:28:B7:8B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cd:e6:5c:86:11:d6:ef:03:b9:a2:82:29:e6:64:b7:a1:37: 7d:af:19:ef:09:20:40:c4:63:a0:08:35:d9:3b:fd:02:80:e4: 22:67:97:f4:5a:15:9e:62:61:17:bd:6f:af:80:76:03:f8:36: 9d:d9:9a:ed:e9:5a:5a:53:ee:25:f2:50:e3:b0:99:87:c3:38: 75:c9:27:34:46:88:00:ba:bf:d2:db:cc:76:03:5e:b1:c5:84: ac:ef:c1:fb:dc:97:52:81:bb:c5:10:06:81:43:22:38:c8:b3: 23:ec:21:96:b7:44:57:dd:c9:1a:a9:e9:f3:c1:fb:06:e6:ed: c2:93:61:19:56:11:bc:9c:f6:19:b7:9c:33:68:02:8f:12:b1: 8a:18:a9:a4:6f:ac:f7:b8:d4:fb:4d:27:8b:9a:d3:2a:a1:42: 65:41:7a:b3:48:d7:81:be:16:a7:f4:83:56:39:f5:28:75:57: 0b:12:b6:d2:73:73:c7:cc:f0:68:ff:70:e4:48:a4:3f:9b:a2: 50:b5:77:62:86:44:fb:19:a2:e3:4c:7d:2a:ca:92:de:e4:91: 36:95:ec:49:c1:3d:25:7b:ca:22:29:e2:67:6a:80:bb:09:d6: e2:86:b9:55:d2:f7:00:30:6d:2d:97:92:44:71:7d:3a:09:f7: b0:bc:a2:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEptu0ScpdfIkpDcpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ODlkMzQyY2ItMmY5Zi00ZDg5LWFhYTItOTIyMjgzMTFhMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5GRzRFUBDtzQqbwh17IhwcjAVxaYMvyI12v 4Gi0EVFQBcxbDNyfrb4c9ZfvBGFwqyHvtP19OQZiwbwuFf9FusX2PjgMtQlDgDAW 8G57N4+5QjZzOrPnl/ZXlGv9moxVFWx1MG9DemHrWdvkdwiVQAtUzD1mv0in6M6v Epy+IPJyv1snlXSVdnGzPhjJrKYUvgFev0XhxjAx3i8UhS3Rto0fEQ6M1XBsM9rF 2EjArMScnPl2MK+giVMsbHPe9Hf/o5618XbdM7emv1FrACPoNQj0MqroEmO5AUXB 4s2W20SIBOdSpX0poaBnQWEMxxoxdM0psAhQ1YO60pnDaUT5cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBX7Bn3/e1m916p8JLrRzvYot4tqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvY2Q2M2E0NWUtMjc1MS0z MDc0LTgzNmEtY2I2ZjA1YzAwZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4zeZchhHW7wO5ooIp5mS3oTd9rxnvCSBAxGOgCDXZO/0CgOQiZ5f0 WhWeYmEXvW+vgHYD+Dad2Zrt6VpaU+4l8lDjsJmHwzh1ySc0RogAur/S28x2A16x xYSs78H73JdSgbvFEAaBQyI4yLMj7CGWt0RX3ckaqenzwfsG5u3Ck2EZVhG8nPYZ t5wzaAKPErGKGKmkb6z3uNT7TSeLmtMqoUJlQXqzSNeBvhan9INWOfUodVcLErbS c3PHzPBo/3DkSKQ/m6JQtXdihkT7GaLjTH0qypLe5JE2lexJwT0le8oiKeJnaoC7 CdbihrlV0vcAMG0tl5JEcX06CfewvKKe -----END CERTIFICATE-----Generated at Wed Jul 9 12:59:01 2025 by rpki-client