$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa File: f598f20c-69c9-3772-916d-a8890b5243c8.roa (raw, json) Hash identifier: sOSkb1afEgwCSG4/5ihLl4kieSEr0rHl9LnO/hnZsnI= Subject key identifier: 53:CA:EB:D5:3E:18:D1:54:BE:8E:08:B6:53:B4:05:31:7A:CD:A5:3A Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F4328584A295564E6AF336228D0088400 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 1007 IP address blocks: 2602:fb4a::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:64:e6:af:33:62:28:d0:08:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=1621ff5a-c34c-4ff1-b726-64e7bdf50a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:df:cf:51:54:fe:e1:fe:1f:7b:47:27:9e: 02:05:42:8b:c5:e0:36:dc:aa:3f:d7:c9:52:95:b3: 36:74:44:2b:be:63:e4:33:43:7e:c6:72:e3:16:53: 36:72:9c:f8:ce:ae:7c:e0:c0:53:f6:72:96:d3:58: 40:e7:a8:fa:bb:3b:85:b4:18:08:e7:a3:63:1e:73: a5:d6:8a:5e:12:5e:e2:3c:4e:dd:a6:5e:a9:97:87: f2:ba:09:0e:a0:90:10:8b:3f:7b:03:37:1d:1b:15: 73:03:e4:a2:9a:76:5b:36:4f:c7:26:42:ab:75:d7: 91:45:b2:56:ee:b0:6c:aa:5a:23:70:83:e6:70:2f: 1c:0c:82:10:65:e1:75:06:77:e8:03:6b:08:c5:ab: 11:f7:a3:4d:ee:40:68:b7:36:51:cb:ae:b7:0e:6b: 0a:91:9a:58:73:3c:3e:63:b6:d4:6b:b2:a8:f3:a7: 46:92:55:71:c2:f4:6b:df:71:2a:1c:ab:c9:b8:c6: cf:4c:50:82:0c:51:45:05:3f:15:11:17:7a:e0:ab: 51:dd:a3:ec:9f:d9:3c:b7:97:43:21:8d:92:3a:c3: 9d:39:5b:b2:82:5f:97:46:d4:86:58:23:a3:5c:05: 22:d8:93:08:1f:16:58:ea:59:d9:01:95:38:1a:b8: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CA:EB:D5:3E:18:D1:54:BE:8E:08:B6:53:B4:05:31:7A:CD:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb4a::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:66:64:c6:8c:b8:08:0e:c6:e1:db:f0:87:5c:8e:25:1d:21: 32:47:91:0e:d2:5e:65:61:80:ac:0d:2a:cb:38:eb:02:43:1d: 48:c7:63:fb:fa:2e:a5:9c:34:49:1a:4f:29:c8:8e:9c:f1:eb: 48:71:a2:d9:4a:ee:9f:11:ff:63:c4:d8:9a:04:db:57:93:23: 99:6f:c7:f5:ed:34:95:76:e8:56:cb:d7:c8:bb:79:96:a5:d8: a0:01:91:4e:89:42:c6:b1:8e:a9:db:66:07:1a:5f:e6:f7:14: cc:a9:d7:9d:ec:c9:f9:cd:79:c1:b7:0a:41:48:62:6c:5a:4b: b0:52:d4:76:18:f0:94:12:bd:5a:d3:9a:b0:20:13:9e:e4:8a: f2:fe:16:67:34:30:3b:09:a4:77:a2:02:33:5f:a4:d4:69:39: 33:9f:9b:8a:de:34:fa:80:75:81:71:03:00:74:c6:43:f4:ba: 94:76:97:83:e1:91:72:14:a3:c5:ac:7b:44:a6:31:7e:81:9a: ff:08:c5:68:13:54:2c:02:c8:0c:7c:5f:4b:0a:04:7d:b1:ae: 47:64:9b:81:12:38:49:97:c2:ec:18:68:91:97:6f:77:8d:a7: 4d:45:0a:22:2a:b7:f9:f7:4b:bf:24:eb:1d:4e:a9:40:10:c9: ae:68:57:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVWTmrzNiKNAIhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk MTYyMWZmNWEtYzM0Yy00ZmYxLWI3MjYtNjRlN2JkZjUwYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F3fz1FU/uH+H3tHJ54CBUKLxeA23Ko/18lS lbM2dEQrvmPkM0N+xnLjFlM2cpz4zq584MBT9nKW01hA56j6uzuFtBgI56NjHnOl 1opeEl7iPE7dpl6pl4fyugkOoJAQiz97AzcdGxVzA+SimnZbNk/HJkKrddeRRbJW 7rBsqlojcIPmcC8cDIIQZeF1BnfoA2sIxasR96NN7kBotzZRy663DmsKkZpYczw+ Y7bUa7Ko86dGklVxwvRr33EqHKvJuMbPTFCCDFFFBT8VERd64KtR3aPsn9k8t5dD IY2SOsOdOVuygl+XRtSGWCOjXAUi2JMIHxZY6lnZAZU4Grh8TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPK69U+GNFUvo4ItlO0BTF6zaU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvZjU5OGYyMGMtNjljOS0z NzcyLTkxNmQtYTg4OTBiNTI0M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7SgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARmZMaMuAgOxuHb8IdcjiUdITJHkQ7SXmVhgKwNKss46wJDHUjH Y/v6LqWcNEkaTynIjpzx60hxotlK7p8R/2PE2JoE21eTI5lvx/XtNJV26FbL18i7 eZal2KABkU6JQsaxjqnbZgcaX+b3FMyp153syfnNecG3CkFIYmxaS7BS1HYY8JQS vVrTmrAgE57kivL+Fmc0MDsJpHeiAjNfpNRpOTOfm4reNPqAdYFxAwB0xkP0upR2 l4PhkXIUo8Wse0SmMX6Bmv8IxWgTVCwCyAx8X0sKBH2xrkdkm4ESOEmXwuwYaJGX b3eNp01FCiIqt/n3S78k6x1OqUAQya5oV9Y= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:44 2025 by rpki-client