$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa File: ddb14b73-0add-39a9-a873-adb4dbd277e4.roa (raw, json) Hash identifier: j9Y3tcYd/Ao3oE3rKdPfiT417SRA1L9VYTqYgMGaYnY= Subject key identifier: F6:B6:C9:5A:90:81:FA:5A:71:25:84:9C:12:9D:C4:3A:E0:5B:48:41 Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618 Certificate serial: 010D0C9F4328584A71EB4DEB3F97813276ACC480 Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 32943 IP address blocks: 2602:f937:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:4d:eb:3f:97:81:32:76:ac:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=0d098c6b-5fd8-4b68-8b84-174489ffb014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:6a:df:8a:0a:02:83:af:52:a6:db:ef:d9: 52:64:92:af:49:46:a3:49:20:74:d1:10:cb:e2:79: 4d:fd:39:e6:92:cb:ef:db:a8:c6:53:24:2b:76:01: eb:6b:75:29:38:04:50:07:33:d9:0c:d2:0f:e9:f0: 3a:c6:1c:6a:76:90:4d:09:5d:6d:cc:4f:e7:44:dd: d7:42:fc:4d:d2:c6:b3:e7:bd:bb:56:37:2e:21:4f: 2a:98:ec:1c:2d:9a:f9:53:6b:86:b3:78:4e:c0:39: 72:39:0a:51:5c:71:25:c0:99:96:a5:29:a6:74:35: fa:a9:21:0c:6d:3d:64:cb:a5:94:3b:0d:53:b6:9d: 2e:f9:0f:43:27:a8:24:47:c7:30:42:c6:4c:5e:c7: 15:db:ad:23:15:7d:1d:84:ec:f8:66:e1:ba:05:44: c5:0d:52:26:98:b1:eb:b1:34:01:7e:d3:e7:29:4a: 7c:f1:0b:9c:6f:d9:17:38:60:a7:a8:19:1a:a7:52: d2:9a:53:02:f5:27:0c:5b:e7:07:ca:c3:7e:ea:f3: 63:e3:0b:1c:16:2c:51:63:c8:f0:2c:64:ff:d6:97: 55:12:b3:91:fd:0c:09:39:08:36:0b:42:01:58:23: 81:9c:cb:8c:a8:a9:0d:7d:68:04:2c:21:46:a0:5c: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B6:C9:5A:90:81:FA:5A:71:25:84:9C:12:9D:C4:3A:E0:5B:48:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl X509v3 Authority Key Identifier: keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer sbgp-ipAddrBlock: critical IPv6: 2602:f937:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:66:31:18:60:f6:fb:c8:63:7f:6c:89:e6:1a:f8:0d:b3:35: 16:67:f2:37:00:19:fc:fe:a4:ba:38:9a:d3:3f:f8:31:20:54: 28:77:fa:24:a2:1a:cc:7e:bb:a1:eb:62:49:f4:df:64:f2:8c: a1:69:fb:7e:79:23:52:ad:68:1c:6d:eb:f5:07:df:6b:73:3a: 73:ed:28:e0:cc:44:f2:55:c3:98:df:4b:3e:83:e2:60:da:47: 62:8c:3f:78:21:be:63:df:2c:64:58:87:2e:1a:78:ec:ae:eb: 1c:5f:e1:39:2c:e2:dc:5b:bd:6c:44:82:b5:0f:23:3d:52:de: a7:79:1b:f2:f6:b8:6a:44:ef:61:f9:a5:ba:4c:50:86:8c:3f: 9d:96:cd:1a:24:a7:02:75:03:38:56:01:9f:1e:94:5d:7d:0e: 84:25:bf:51:1d:3e:5b:e0:b8:12:ac:09:41:15:3b:67:13:8e: 98:72:51:ff:b4:be:55:ba:cc:f8:b4:bf:ae:08:6c:84:dd:9f: 0b:25:94:64:2a:4c:2c:f7:09:4e:bd:99:d2:e6:8f:1e:0e:8a: 35:2f:85:04:5b:db:d8:4d:06:76:36:1e:ed:55:76:ff:e9:72: d5:b4:da:bc:05:00:74:b3:51:c1:75:73:2b:0f:e1:41:f5:e6: 8e:44:5e:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpx603rP5eBMnasxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5 NjE4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MGQwOThjNmItNWZkOC00YjY4LThiODQtMTc0NDg5ZmZiMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiblq34oKAoOvUqbb79lSZJKvSUajSSB00RDL 4nlN/Tnmksvv26jGUyQrdgHra3UpOARQBzPZDNIP6fA6xhxqdpBNCV1tzE/nRN3X QvxN0saz5727VjcuIU8qmOwcLZr5U2uGs3hOwDlyOQpRXHElwJmWpSmmdDX6qSEM bT1ky6WUOw1Ttp0u+Q9DJ6gkR8cwQsZMXscV260jFX0dhOz4ZuG6BUTFDVImmLHr sTQBftPnKUp88Qucb9kXOGCnqBkap1LSmlMC9ScMW+cHysN+6vNj4wscFixRY8jw LGT/1pdVErOR/QwJOQg2C0IBWCOBnMuMqKkNfWgELCFGoFwsvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPa2yVqQgfpacSWEnBKdxDrgW0hBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvZGRiMTRiNzMtMGFkZC0z OWE5LWE4NzMtYWRiNGRiZDI3N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh ZDAyZDk2MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5NwIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASmYxGGD2+8hjf2yJ5hr4DbM1FmfyNwAZ/P6kujia0z/4MSBUKHf6 JKIazH67oetiSfTfZPKMoWn7fnkjUq1oHG3r9Qffa3M6c+0o4MxE8lXDmN9LPoPi YNpHYow/eCG+Y98sZFiHLhp47K7rHF/hOSzi3Fu9bESCtQ8jPVLep3kb8va4akTv YfmlukxQhow/nZbNGiSnAnUDOFYBnx6UXX0OhCW/UR0+W+C4EqwJQRU7ZxOOmHJR /7S+VbrM+LS/rghshN2fCyWUZCpMLPcJTr2Z0uaPHg6KNS+FBFvb2E0GdjYe7VV2 /+ly1bTavAUAdLNRwXVzKw/hQfXmjkReaQ== -----END CERTIFICATE-----Generated at Wed Aug 6 12:28:42 2025 by rpki-client