$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa File: 2fe383f6-932c-31db-b72e-7464e9caaa3e.roa (raw, json) Hash identifier: aMyhfqchQEPN7cTUeR5mBHiA3qqr0aNN6ndvPk7unIA= Subject key identifier: B1:15:73:4E:53:91:DA:24:3B:F3:4C:C2:0B:B7:E4:FE:E5:28:97:48 Certificate issuer: /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Certificate serial: 010D0C9F4328584A9FFB98D3D35AF9D78E046A00 Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 394731 IP address blocks: 2620:124:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:98:d3:d3:5a:f9:d7:8e:04:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=3fb7f376-1568-4b1f-8729-dc58b3105949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:8d:d3:61:d0:e4:84:2c:c7:b0:c1:33:f2: 60:03:0c:28:22:b4:24:de:bc:56:9e:dc:65:4f:78: 53:d2:dc:49:2e:f1:29:70:4a:90:25:3a:d3:5c:a2: 9a:3e:5c:b3:44:48:60:df:d8:1a:19:a3:50:32:e8: d7:9e:87:4c:83:fd:e6:0a:16:05:91:24:9f:a6:a5: a6:56:6a:1e:9c:4b:74:31:13:97:08:8d:83:b8:ef: df:0c:a2:30:92:40:c1:a8:31:15:65:62:6a:a0:13: a2:81:7f:92:83:94:0c:a5:64:fe:b1:49:63:be:47: 91:28:f8:d1:31:6a:34:ee:95:7d:d3:9b:bd:94:68: 6a:e4:b8:09:bb:87:1f:e6:6c:05:a0:92:9c:3a:24: b3:61:dd:04:85:fc:66:b8:5f:92:e8:c4:02:08:6e: dd:51:38:22:7e:15:6a:aa:ec:e4:92:7c:bf:58:ab: 47:1e:17:16:93:89:8e:5d:3a:26:ff:8f:04:3d:0c: 82:88:26:28:4d:06:0c:b0:d2:07:eb:df:1c:ab:0b: 4f:6c:da:99:1d:52:7b:43:cd:b1:74:24:d7:24:34: 9d:4d:3a:49:95:61:32:b5:5e:7b:18:a7:0e:db:e3: 61:eb:8b:95:83:e8:8b:6e:82:95:0b:80:65:e6:f4: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:15:73:4E:53:91:DA:24:3B:F3:4C:C2:0B:B7:E4:FE:E5:28:97:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl X509v3 Authority Key Identifier: keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer sbgp-ipAddrBlock: critical IPv6: 2620:124:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5d:62:53:9d:90:f0:e2:fa:74:23:e6:bb:76:93:84:8f:08: 24:c4:8e:b1:8e:cd:16:c1:c6:f5:b8:75:d2:47:5d:59:6e:ec: f2:29:5e:00:12:c8:80:e1:5c:f7:7e:cb:29:96:59:da:69:d1: ba:54:bf:b3:1f:05:22:fe:ac:a6:3a:34:8a:55:b0:30:d7:e1: c0:01:55:32:40:c1:e6:b7:8e:0c:4f:25:1d:53:cd:39:b8:48: f4:9a:54:e8:32:05:c8:15:9e:4b:49:86:73:66:14:67:b8:4e: dc:c9:77:9e:2a:a6:df:a1:8e:49:7c:39:df:bb:d7:c5:c5:30: e8:e6:c1:9b:da:f9:10:be:c6:44:12:50:c9:e4:77:7c:85:fa: 53:23:b1:26:27:bd:80:9f:70:2c:cd:bd:8a:7e:e3:20:ce:cd: 86:d0:5f:00:ed:70:ca:cc:0d:9b:a1:1b:b1:90:1c:0c:13:97: 3c:58:99:02:be:02:b0:8b:c5:4b:d5:93:c6:25:38:c6:4a:c6: 88:94:63:1a:06:08:f6:7d:00:dc:fd:c0:d3:12:a9:02:ba:8a: cc:95:ad:51:03:6a:49:6a:75:b8:ca:4a:17:70:e7:f1:d1:60: 9e:19:68:32:f4:23:4c:08:38:a0:12:09:aa:49:70:b4:d8:7f: e4:9b:ca:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+5jT01r5144EagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE2MzY1YjgtNmIwOC00MmIyLTllYzEtMThhNmIyZTM1 YjVjMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk M2ZiN2YzNzYtMTU2OC00YjFmLTg3MjktZGM1OGIzMTA1OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF6N02HQ5IQsx7DBM/JgAwwoIrQk3rxWntxl T3hT0txJLvEpcEqQJTrTXKKaPlyzREhg39gaGaNQMujXnodMg/3mChYFkSSfpqWm VmoenEt0MROXCI2DuO/fDKIwkkDBqDEVZWJqoBOigX+Sg5QMpWT+sUljvkeRKPjR MWo07pV905u9lGhq5LgJu4cf5mwFoJKcOiSzYd0EhfxmuF+S6MQCCG7dUTgifhVq quzkkny/WKtHHhcWk4mOXTom/48EPQyCiCYoTQYMsNIH698cqwtPbNqZHVJ7Q82x dCTXJDSdTTpJlWEytV57GKcO2+Nh64uVg+iLboKVC4Bl5vR1GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLEVc05TkdokO/NMwgu35P7lKJdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYz NjViOC02YjA4LTQyYjItOWVjMS0xOGE2YjJlMzViNWMvMmZlMzgzZjYtOTMyYy0z MWRiLWI3MmUtNzQ2NGU5Y2FhYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE2MzY1YjgtNmIwOC00MmIyLTll YzEtMThhNmIyZTM1YjVjLzZhNjM2NWI4LTZiMDgtNDJiMi05ZWMxLTE4YTZiMmUz NWI1Yy5jcmwwHwYDVR0jBBgwFoAUORAQqKmVTu7NAWTGZktmnFJlTngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYzNjViOC02YjA4LTQyYjItOWVjMS0xOGE2 YjJlMzViNWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJLAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9dYlOdkPDi+nQj5rt2k4SPCCTEjrGOzRbBxvW4ddJHXVlu7PIp XgASyIDhXPd+yymWWdpp0bpUv7MfBSL+rKY6NIpVsDDX4cABVTJAwea3jgxPJR1T zTm4SPSaVOgyBcgVnktJhnNmFGe4TtzJd54qpt+hjkl8Od+718XFMOjmwZva+RC+ xkQSUMnkd3yF+lMjsSYnvYCfcCzNvYp+4yDOzYbQXwDtcMrMDZuhG7GQHAwTlzxY mQK+ArCLxUvVk8YlOMZKxoiUYxoGCPZ9ANz9wNMSqQK6isyVrVEDaklqdbjKShdw 5/HRYJ4ZaDL0I0wIOKASCapJcLTYf+Sbyo4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:14 2025 by rpki-client