$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa File: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (raw, json) Hash identifier: TjhOYECRIqBnnwX9hPr8wjPr4dtWrjb8gPVU9N9UEbk= Subject key identifier: 29:D1:D3:11:F6:BA:3E:41:91:CD:E9:38:0E:C5:64:48:7A:D7:95:89 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584A90A0BAF3A1A3B4CBBAD58300 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 398328 IP address blocks: 2602:fd46:137::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ba:f3:a1:a3:b4:cb:ba:d5:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=66222d64-158c-4eed-8777-2570e476bc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:3c:39:49:34:a8:d0:0d:16:91:22:dc:f4: 39:8d:31:9f:14:c1:a2:21:f7:15:20:c6:5f:cd:e1: 43:dc:f8:5b:e9:33:d0:42:6d:6e:c2:44:0e:9a:d2: ed:61:12:a0:f7:84:2d:12:bb:cc:41:63:80:7b:e6: 17:63:05:f3:c9:d7:f8:13:5d:cf:6b:02:37:06:26: 0d:e9:b9:0b:14:78:72:bb:a4:6c:3e:b7:49:7c:3b: 9e:8a:64:68:7a:ce:89:1a:04:53:42:26:c7:d9:e7: 2f:a9:92:72:ff:78:58:a7:fa:af:de:d5:3b:89:68: b0:7a:25:40:c8:44:af:7e:85:2a:aa:eb:dc:9e:6a: 4c:8a:42:29:9d:2b:03:83:75:17:36:a1:fa:76:a4: b6:54:78:a2:a0:bd:1a:39:b0:60:da:47:2b:0f:ea: ba:f1:fa:e1:3a:09:2c:3b:7a:c6:af:1b:e6:e9:b2: 7a:6e:32:b4:c5:74:1e:64:65:35:67:b8:dc:b6:f1: 1b:41:9a:35:57:8d:88:67:1c:a5:63:6f:3f:16:d5: 8a:39:48:30:47:e2:7e:25:54:74:01:28:17:ec:02: db:a8:eb:90:83:3a:3c:9f:f9:39:b4:e5:89:39:c5: 8e:b6:aa:34:5b:89:f3:68:2b:47:ff:8c:cf:00:39: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D1:D3:11:F6:BA:3E:41:91:CD:E9:38:0E:C5:64:48:7A:D7:95:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd46:137::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:aa:f4:9f:f1:79:e2:ae:7e:46:14:af:96:0e:f0:9e:9b:3d: c8:cd:09:05:26:e4:8f:63:f3:12:65:09:97:99:e3:fd:ff:f5: d4:81:ac:e4:6a:02:46:dd:06:f5:f4:8b:4e:30:05:56:94:67: ff:00:03:4b:d8:be:55:33:c4:a8:34:02:5b:e7:7e:db:1d:af: bb:59:25:82:06:52:d5:29:36:f0:22:23:74:aa:13:98:d1:35: aa:e9:12:ac:b7:32:43:5f:ca:b6:51:5e:4d:fa:e5:21:dc:10: 88:b9:91:83:47:48:dd:a0:8a:c1:fb:88:f5:38:9c:68:24:b2: 01:0b:31:c1:c8:b4:1d:24:1c:6d:87:6e:f8:03:c1:8a:4a:97: 7e:2a:d2:a3:8b:66:38:1e:72:8a:9a:c6:7e:1c:71:c2:52:16: 50:e5:2b:c4:e3:70:75:9b:38:d6:6d:b7:be:a0:11:86:98:08: 78:08:de:9b:97:c4:7b:9f:c9:be:92:d7:c1:f2:dd:d9:15:c5: e6:d1:07:f4:09:a0:cd:a2:fc:98:a2:77:a2:c1:c0:ba:80:54: fe:7b:a6:40:ea:af:e4:cf:5f:13:f4:4b:7a:1b:81:34:da:fe: 68:d3:ab:df:09:81:97:26:62:a1:1a:73:7f:ee:1c:e7:9d:e7: 51:9f:6a:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoLrzoaO0y7rVgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjYyMjJkNjQtMTU4Yy00ZWVkLTg3NzctMjU3MGU0NzZiYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmo8OUk0qNANFpEi3PQ5jTGfFMGiIfcVIMZf zeFD3Phb6TPQQm1uwkQOmtLtYRKg94QtErvMQWOAe+YXYwXzydf4E13PawI3BiYN 6bkLFHhyu6RsPrdJfDueimRoes6JGgRTQibH2ecvqZJy/3hYp/qv3tU7iWiweiVA yESvfoUqquvcnmpMikIpnSsDg3UXNqH6dqS2VHiioL0aObBg2kcrD+q68frhOgks O3rGrxvm6bJ6bjK0xXQeZGU1Z7jctvEbQZo1V42IZxylY28/FtWKOUgwR+J+JVR0 ASgX7ALbqOuQgzo8n/k5tOWJOcWOtqo0W4nzaCtH/4zPADn5DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCnR0xH2uj5Bkc3pOA7FZEh615WJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvYzBkNjA5ZjUtMmVhOC0z NjljLTljMmItMDdjYTA4ZTVlNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9RgE3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACiq9J/xeeKufkYUr5YO8J6bPcjNCQUm5I9j8xJlCZeZ4/3/9dSB rORqAkbdBvX0i04wBVaUZ/8AA0vYvlUzxKg0Alvnftsdr7tZJYIGUtUpNvAiI3Sq E5jRNarpEqy3MkNfyrZRXk365SHcEIi5kYNHSN2gisH7iPU4nGgksgELMcHItB0k HG2HbvgDwYpKl34q0qOLZjgecoqaxn4cccJSFlDlK8TjcHWbONZtt76gEYaYCHgI 3puXxHufyb6S18Hy3dkVxebRB/QJoM2i/Jiid6LBwLqAVP57pkDqr+TPXxP0S3ob gTTa/mjTq98JgZcmYqEac3/uHOed51GfagY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:27 2025 by rpki-client