$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa File: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (raw, json) Hash identifier: 08DG4maJJvMHbQOPSDt7rJzMK4HNMcHd8i6u3pdwk80= Subject key identifier: 3B:C5:54:7A:EA:AC:71:D4:1C:48:AE:73:4E:DA:BF:C6:EC:69:58:D9 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584A66C069388187E364F4632180 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 400245 IP address blocks: 2602:fb7d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:69:38:81:87:e3:64:f4:63:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=28f50c2e-7c2c-4569-9dcf-246f8d1b3e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:82:f7:9f:4d:e6:4f:da:12:95:93:65:0f: b0:d2:56:e3:db:63:ce:1b:b7:c6:e1:50:c4:48:ec: 54:14:7a:70:5c:9a:d0:23:ad:cc:9f:3d:64:72:72: 2b:84:51:dd:fa:38:55:f3:16:c3:79:8a:53:ae:76: 89:bf:d1:81:ae:00:d8:5a:eb:bc:08:ae:4b:bb:21: b7:f8:7c:b3:cb:30:0e:a4:23:89:3c:4c:f2:5b:70: 3b:39:65:f4:27:f1:02:55:4f:6c:fe:3c:1f:21:74: 9c:15:04:68:04:f8:0c:b7:76:1d:c4:95:c3:62:89: 5e:8d:2c:4c:bb:c3:d4:1a:95:c5:61:45:f7:54:9b: 3f:9c:2d:7d:64:9c:1e:ea:af:f7:d7:f9:1c:0f:ea: 5b:29:ad:2e:95:d8:79:bf:75:56:70:56:a7:72:bd: 23:7b:0b:d2:fc:dd:46:56:38:79:8f:c4:e9:21:bd: 6c:84:3f:c0:97:7c:d4:9e:7d:f0:70:f5:5f:62:9a: e7:9b:66:58:2e:d3:60:3f:1c:d8:cf:ce:fb:53:3d: 96:8c:67:01:66:04:21:b1:2d:24:4f:4d:d8:04:d9: 9f:b9:59:94:c5:fa:ca:66:d5:85:90:a1:7d:6a:8b: 02:04:bd:58:77:f5:52:cc:9c:bd:91:97:81:3f:c2: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C5:54:7A:EA:AC:71:D4:1C:48:AE:73:4E:DA:BF:C6:EC:69:58:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb7d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:75:36:97:44:b3:1d:77:4b:d5:98:1d:1f:af:60:af:c9:3d: f1:8b:ab:35:e8:a6:fa:20:f7:5c:88:81:6b:ba:77:de:6e:f9: 89:9c:55:ec:38:28:da:1a:d4:9b:a1:25:92:c1:de:af:bd:15: 32:ee:01:56:16:2b:4c:f0:e3:9e:a2:e6:f7:d8:2d:9e:af:1f: 5b:20:f8:67:b8:8a:bb:cb:d6:76:63:a5:b9:29:4e:21:f5:02: 7f:08:17:9a:3a:5c:13:cf:3b:37:90:5f:86:d9:bb:94:ba:e3: 77:c3:b8:59:99:d1:b5:38:cb:0c:e3:24:70:15:4d:4c:f7:5e: 55:ac:ba:7b:ba:5a:f6:e6:ca:be:9b:e6:6d:e6:f8:d2:92:c3: cb:a9:14:e1:e6:a8:bd:b2:51:db:d8:c6:2d:13:e8:1f:53:a2: 19:28:29:b1:48:9e:25:69:c1:8c:3c:3d:31:fe:71:e3:5d:40: b1:01:ed:16:25:43:a1:9e:72:14:87:14:84:a1:0e:1b:47:55: 01:bc:c4:e1:05:d8:8e:e6:14:19:f0:4c:ca:59:da:46:a5:3d: 93:91:21:4c:41:fd:5f:21:5f:15:53:f1:9a:6f:ee:32:5d:ad: 31:8a:6e:9f:3b:16:bf:f8:c2:41:76:1e:a4:23:26:d6:e3:12: e4:d6:b8:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpmwGk4gYfjZPRjIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MjhmNTBjMmUtN2MyYy00NTY5LTlkY2YtMjQ2ZjhkMWIzZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59OC959N5k/aEpWTZQ+w0lbj22POG7fG4VDE SOxUFHpwXJrQI63Mnz1kcnIrhFHd+jhV8xbDeYpTrnaJv9GBrgDYWuu8CK5LuyG3 +HyzyzAOpCOJPEzyW3A7OWX0J/ECVU9s/jwfIXScFQRoBPgMt3YdxJXDYolejSxM u8PUGpXFYUX3VJs/nC19ZJwe6q/31/kcD+pbKa0uldh5v3VWcFancr0jewvS/N1G Vjh5j8TpIb1shD/Al3zUnn3wcPVfYprnm2ZYLtNgPxzYz877Uz2WjGcBZgQhsS0k T03YBNmfuVmUxfrKZtWFkKF9aosCBL1Yd/VSzJy9kZeBP8JdyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDvFVHrqrHHUHEiuc07av8bsaVjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvY2QzY2I3ZGUtMjYyNS0z ODkzLWEzMjMtZDFiZWM3ZDI1OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7fQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB3U2l0SzHXdL1ZgdH69gr8k98YurNeim+iD3XIiBa7p33m75iZxV 7Dgo2hrUm6ElksHer70VMu4BVhYrTPDjnqLm99gtnq8fWyD4Z7iKu8vWdmOluSlO IfUCfwgXmjpcE887N5Bfhtm7lLrjd8O4WZnRtTjLDOMkcBVNTPdeVay6e7pa9ubK vpvmbeb40pLDy6kU4eaovbJR29jGLRPoH1OiGSgpsUieJWnBjDw9Mf5x411AsQHt FiVDoZ5yFIcUhKEOG0dVAbzE4QXYjuYUGfBMylnaRqU9k5EhTEH9XyFfFVPxmm/u Ml2tMYpunzsWv/jCQXYepCMm1uMS5Na4/w== -----END CERTIFICATE-----Generated at Thu Aug 7 17:39:47 2025 by rpki-client