$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa File: d8869c11-4c33-337d-a702-d11da6d17e67.roa (raw, json) Hash identifier: cZ1Jk+ZVTtCdIiA1K++0apF3kGFsZNF7WBmkMLY2j9s= Subject key identifier: 24:3A:B8:9A:B1:9C:A6:B6:A9:A8:5B:23:1B:52:96:CB:B2:FE:E5:FB Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584A1E2AA24AA5CF851601C48180 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 16509 IP address blocks: 2602:80f:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a2:4a:a5:cf:85:16:01:c4:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=4fa0f4a4-620a-424b-a34c-72fdf39840bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:17:e5:a7:a7:cb:05:d4:27:b5:e8:d1:4b: 2d:81:fe:73:a5:5d:0f:66:6a:ab:ea:ff:a4:f7:2d: ee:3c:b7:2b:17:83:4e:cc:fd:20:29:45:b2:03:f0: 7a:fb:43:89:86:5b:5f:d0:f5:dc:6b:55:e0:40:b7: f1:df:53:13:39:32:e1:73:06:57:f8:76:56:c6:a6: f5:73:14:e6:09:ba:57:a7:eb:9f:6e:ee:97:3d:9f: be:fc:6d:42:ea:b8:6e:b6:1c:09:3b:db:68:25:83: a3:a6:8f:3f:46:83:41:1c:af:b8:e4:19:78:2e:f1: 82:d9:ea:6d:35:e4:19:93:7e:18:3f:d3:76:71:22: 76:f8:c9:68:d2:98:ab:8a:b2:20:b1:7e:c2:82:75: b6:9c:42:2d:1c:11:02:b0:72:06:58:36:fa:ff:18: f5:75:ba:d2:a8:a6:f9:1b:d0:70:17:58:80:7e:e9: 1b:0a:70:07:49:fc:f6:6e:4e:e2:da:30:c5:3a:22: 4a:9f:39:49:43:0b:a4:2d:54:0e:1d:b0:e8:5d:fb: 27:7e:25:af:88:c6:41:62:4c:a3:d4:38:a6:91:be: 79:d0:fc:cc:19:7e:71:fd:86:ec:cd:04:f7:e1:96: 17:e1:2e:5f:8e:5c:41:da:c7:1d:89:05:94:54:d1: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3A:B8:9A:B1:9C:A6:B6:A9:A8:5B:23:1B:52:96:CB:B2:FE:E5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:9002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:56:a8:f8:7c:1a:78:2f:fc:6a:f4:96:3f:0f:00:b6:8a:f6: ac:e7:ab:ff:6d:bd:24:8c:04:f6:98:52:7f:45:8c:73:7c:36: ae:00:13:f1:4c:42:84:50:e6:25:6b:6e:ea:c2:60:d4:e2:f8: da:b8:a3:48:13:7b:6e:c9:2d:56:df:0e:cd:f6:1b:b5:f3:c5: 3a:1e:5c:9e:71:72:5f:4e:6c:7b:1d:62:1d:dd:d7:21:d3:54: f9:eb:59:ed:42:21:42:40:1e:23:59:18:4f:3e:95:b7:81:bf: c4:fc:4c:9a:83:d2:b5:90:c5:f0:c3:d1:43:bb:7b:60:eb:8a: 7f:2a:07:ab:4a:ec:ad:e0:e0:33:4c:22:93:69:6e:af:8f:7a: ee:33:54:8c:ad:43:e6:f2:e0:c5:69:29:c8:94:34:a8:c5:47: 39:65:7f:d8:01:8a:3c:54:7a:18:8d:36:dc:f2:fa:ef:1e:89: ac:93:f4:3e:ef:5c:3e:9c:5c:de:02:33:d8:0d:62:08:43:df: 71:3e:38:ec:04:75:62:c6:89:b1:e3:f1:4a:c8:ba:fe:95:bd: 6a:8d:8f:00:47:df:87:f3:1b:cc:2c:8b:20:4c:6a:f0:4e:de: d4:e7:12:e4:bc:0e:8d:1a:46:63:79:32:e3:bb:96:a5:aa:59: 65:ba:12:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoeKqJKpc+FFgHEgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NGZhMGY0YTQtNjIwYS00MjRiLWEzNGMtNzJmZGYzOTg0MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul4X5aenywXUJ7Xo0Ustgf5zpV0PZmqr6v+k 9y3uPLcrF4NOzP0gKUWyA/B6+0OJhltf0PXca1XgQLfx31MTOTLhcwZX+HZWxqb1 cxTmCbpXp+ufbu6XPZ++/G1C6rhuthwJO9toJYOjpo8/RoNBHK+45Bl4LvGC2ept NeQZk34YP9N2cSJ2+Mlo0pirirIgsX7CgnW2nEItHBECsHIGWDb6/xj1dbrSqKb5 G9BwF1iAfukbCnAHSfz2bk7i2jDFOiJKnzlJQwukLVQOHbDoXfsnfiWviMZBYkyj 1Dimkb550PzMGX5x/YbszQT34ZYX4S5fjlxB2scdiQWUVNFvTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQ6uJqxnKa2qahbIxtSlsuy/uX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvZDg4NjljMTEtNGMzMy0z MzdkLWE3MDItZDExZGE2ZDE3ZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdWqPh8Gngv/Gr0lj8PALaK9qznq/9tvSSMBPaYUn9FjHN8Nq4A E/FMQoRQ5iVrburCYNTi+Nq4o0gTe27JLVbfDs32G7XzxToeXJ5xcl9ObHsdYh3d 1yHTVPnrWe1CIUJAHiNZGE8+lbeBv8T8TJqD0rWQxfDD0UO7e2Drin8qB6tK7K3g 4DNMIpNpbq+Peu4zVIytQ+by4MVpKciUNKjFRzllf9gBijxUehiNNtzy+u8eiayT 9D7vXD6cXN4CM9gNYghD33E+OOwEdWLGibHj8UrIuv6VvWqNjwBH34fzG8wsiyBM avBO3tTnEuS8Do0aRmN5MuO7lqWqWWW6Epo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:34:13 2025 by rpki-client