$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa File: cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa (raw, json) Hash identifier: vN6yWt65+xX08zaJensvfASAsmBadZIRdnHZpJO9gmI= Subject key identifier: 86:91:14:C7:02:B9:5B:2A:6C:D6:02:81:07:C9:F7:37:B9:25:99:3D Certificate issuer: /CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Certificate serial: 010D0C9F4328584A629090E41B08C144D247B810 Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 394102 IP address blocks: 2606:3f80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:90:e4:1b:08:c1:44:d2:47:b8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=f26f8b5c-552a-49a2-9a43-ac5fa0abebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:09:76:35:1d:3e:55:9c:9b:6e:5a:a7:02: 09:0a:ba:4e:aa:34:e3:a7:9e:f1:1a:b3:8d:bc:ec: 15:e3:5d:7f:cd:d0:df:c2:ae:cb:5c:96:1a:62:3b: 1f:6f:ed:5f:9a:5d:d8:86:b2:fc:2e:f1:15:d2:3b: f4:6f:81:6a:ae:c0:8f:58:3b:48:34:20:d0:de:4a: 90:54:85:8c:ba:dd:fc:fc:ee:5e:fb:82:c6:20:b5: a7:33:ee:e6:44:b8:80:f8:07:9e:58:22:d5:e2:e1: af:0e:57:62:3d:e3:7c:64:e4:a2:f8:05:1a:3b:90: 3a:4e:81:d4:83:7d:c3:90:ec:76:aa:af:95:33:c3: a2:5f:4a:fe:73:40:61:df:32:8e:cc:6b:8b:8c:9a: ec:96:37:e1:ae:2f:84:34:07:34:05:45:9f:9d:56: cd:8f:2a:a5:48:93:0d:9a:e1:34:ab:47:79:30:26: 82:73:a9:c9:85:35:e7:20:d9:28:67:39:fb:88:7e: 6e:bd:42:bc:55:e0:a0:26:19:1b:8d:1e:fc:21:e5: 4c:30:d4:7b:f7:b5:f6:7c:60:e1:f3:89:95:cf:78: b0:79:ab:07:d5:60:98:ec:0c:8f:32:9c:e5:1e:c7: 6d:1a:be:68:3d:de:52:94:09:99:04:1c:3e:00:0f: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:91:14:C7:02:B9:5B:2A:6C:D6:02:81:07:C9:F7:37:B9:25:99:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl X509v3 Authority Key Identifier: keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer sbgp-ipAddrBlock: critical IPv6: 2606:3f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:61:1f:ee:29:55:1b:a0:9e:14:70:17:6a:cf:40:47:1b:d0: 39:df:25:49:3e:94:fe:6e:d9:bf:eb:02:28:93:ec:45:dd:eb: 70:29:ae:ea:d5:9b:8a:1c:a7:56:43:40:bd:17:0f:b5:6e:02: 03:db:5f:27:a9:b9:cc:43:fd:95:a2:81:3e:a6:c4:9b:4c:49: d9:df:33:0b:a7:c2:91:4f:81:1c:c1:68:85:51:2f:33:6e:59: c6:27:45:98:ee:4b:c0:db:e6:56:f6:45:c5:41:ae:c1:6a:7a: 8d:7d:2c:06:bb:dc:2b:d2:68:5a:6d:6d:31:fb:c7:e2:7d:da: 31:84:2b:42:ce:91:a0:76:8b:4a:53:9f:76:56:94:37:7d:58: 47:ad:d7:e1:83:c3:d8:c6:f1:1d:aa:42:e7:9a:01:30:b4:a8: b0:72:b9:2c:b3:6e:f0:ca:15:ad:6f:59:b3:78:01:ed:15:d5: 25:51:79:b3:a2:62:78:a9:77:93:91:07:d8:3f:97:ba:35:ef: 7c:ae:6d:bf:d7:6b:81:5a:a4:7b:5c:47:4c:6d:b8:d7:5e:62: 9f:9c:41:eb:cb:39:84:5a:e8:26:bd:93:4b:90:61:a7:78:17: 1a:a4:c1:6f:dc:89:d7:27:17:20:0b:d7:29:44:d2:65:b5:6d: 49:bf:8b:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikJDkGwjBRNJHuBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhN2E4ZDMtMjZmYS00OTE1LWJhY2YtMjg0OGY5NzU0 NzU4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjI2ZjhiNWMtNTUyYS00OWEyLTlhNDMtYWM1ZmEwYWJlYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQJdjUdPlWcm25apwIJCrpOqjTjp57xGrON vOwV411/zdDfwq7LXJYaYjsfb+1fml3YhrL8LvEV0jv0b4FqrsCPWDtINCDQ3kqQ VIWMut38/O5e+4LGILWnM+7mRLiA+AeeWCLV4uGvDldiPeN8ZOSi+AUaO5A6ToHU g33DkOx2qq+VM8OiX0r+c0Bh3zKOzGuLjJrsljfhri+ENAc0BUWfnVbNjyqlSJMN muE0q0d5MCaCc6nJhTXnINkoZzn7iH5uvUK8VeCgJhkbjR78IeVMMNR797X2fGDh 84mVz3iweasH1WCY7AyPMpzlHsdtGr5oPd5SlAmZBBw+AA8tIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaRFMcCuVsqbNYCgQfJ9ze5JZk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3 YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4Zjk3NTQ3NTgvY2RhNzY3ZmQtNjg5ZS0z ZGNmLWEyYzYtNmVkNmIxYTdiNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDNhN2E4ZDMtMjZmYS00OTE1LWJh Y2YtMjg0OGY5NzU0NzU4LzAzYTdhOGQzLTI2ZmEtNDkxNS1iYWNmLTI4NDhmOTc1 NDc1OC5jcmwwHwYDVR0jBBgwFoAUU5mKEgEyZU39tSYr1fgovObve08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4 Zjk3NTQ3NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY/gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBYR/uKVUboJ4UcBdqz0BHG9A53yVJPpT+btm/6wIok+xF3etwKa7q 1ZuKHKdWQ0C9Fw+1bgID218nqbnMQ/2VooE+psSbTEnZ3zMLp8KRT4EcwWiFUS8z blnGJ0WY7kvA2+ZW9kXFQa7BanqNfSwGu9wr0mhabW0x+8fifdoxhCtCzpGgdotK U592VpQ3fVhHrdfhg8PYxvEdqkLnmgEwtKiwcrkss27wyhWtb1mzeAHtFdUlUXmz omJ4qXeTkQfYP5e6Ne98rm2/12uBWqR7XEdMbbjXXmKfnEHryzmEWugmvZNLkGGn eBcapMFv3InXJxcgC9cpRNJltW1Jv4sU -----END CERTIFICATE-----Generated at Wed Jul 9 15:02:04 2025 by rpki-client