$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa File: 3cff927a-f198-366e-8e76-9857222f0035.roa (raw, json) Hash identifier: P1nlXPVB8/tio5rOxyTZm1JWxLDYr/1uyd/0QG61bnY= Subject key identifier: 91:1B:B7:9A:F4:59:0D:21:78:26:B3:C8:BC:BD:B7:A4:43:71:52:2A Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584A857602EF30F04918079DE080 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 13566 IP address blocks: 2602:fa64:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:02:ef:30:f0:49:18:07:9d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=b0d403bf-7bca-421d-ba19-b9d747a46fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:ff:03:ff:01:b4:ae:6f:09:89:dc:5e:bb: 2b:74:c1:46:58:ae:5b:14:6c:24:18:4b:dc:4a:0b: 64:82:ac:49:9a:6a:03:65:88:b2:67:b0:61:1b:93: 35:1e:9c:9a:0e:87:7b:bc:96:39:06:e2:18:62:6d: 18:7d:24:13:4d:cf:30:9a:15:66:1e:5a:fb:01:78: 49:57:78:36:d9:01:59:f8:60:26:0f:8d:6e:d2:04: 30:ba:19:94:cb:7f:bc:62:1e:a1:85:3f:c1:6c:b6: 1d:d3:7b:89:30:5f:48:9b:40:cf:26:b7:72:8f:61: e2:3f:b7:40:26:33:22:d7:f2:04:88:43:bd:07:64: c0:db:1f:7e:62:5d:1a:5a:85:dd:09:c0:56:04:4c: d0:42:99:f0:f7:11:5d:c3:09:3a:fe:57:d9:0d:0b: 83:66:a5:94:2e:32:4f:b8:bf:63:ad:73:9e:86:e5: d9:76:fb:35:52:71:26:4c:48:3f:6d:2a:2e:4b:8e: c3:2b:5a:98:9f:b1:81:4f:81:28:0e:0a:f6:8f:46: 6d:25:8f:fc:b3:a7:f0:bd:40:38:3f:0b:f6:6d:95: b0:38:d7:fb:bf:55:b0:84:57:d1:b3:f6:2c:ac:0e: 3c:45:0f:6d:69:ae:65:ec:6a:26:70:33:5f:8b:9f: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:B7:9A:F4:59:0D:21:78:26:B3:C8:BC:BD:B7:A4:43:71:52:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa64:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:40:f1:8d:40:73:e0:b9:6e:19:c4:87:d5:13:a8:8d:0d:3e: d5:93:ef:7a:14:0e:c7:c4:03:78:e5:fc:97:c6:fd:b6:e4:fe: b5:ef:73:c4:d4:10:2c:69:5a:ca:5d:6b:a9:b3:2a:49:79:ab: 74:a3:96:2e:71:f6:39:13:cd:10:02:72:d6:46:a3:39:98:e3: ba:8f:ea:87:43:41:3b:a7:fa:26:84:ba:10:6c:ef:4e:a0:8e: cf:98:b8:ec:60:82:c7:46:49:80:a3:45:d6:8f:07:f9:7e:58: 5a:60:d5:67:f6:4d:28:57:e9:aa:ac:ae:32:e5:5c:a9:0a:aa: 99:f1:0d:ed:c1:6b:33:1d:ec:62:1f:b9:78:67:5b:d5:7f:ef: 04:5a:2e:4a:90:8b:42:44:cf:d6:0b:b8:71:de:63:7f:d0:47: 9c:96:4e:38:8c:b1:e5:c2:85:64:91:6c:ce:54:d6:61:b1:ae: 63:9d:2b:3b:9c:69:b1:d5:d8:dd:81:57:7f:56:91:39:c2:0f: 13:c9:be:a2:03:2e:61:bb:3a:d0:be:4a:17:aa:9b:82:dc:89: 6e:bd:38:72:d5:5c:f9:ab:00:66:f2:d5:fe:7b:8b:98:c4:c1: 28:a5:2b:e1:98:22:56:b3:45:3a:73:f1:2d:7e:de:56:ed:97: 96:38:b5:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFdgLvMPBJGAed4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk YjBkNDAzYmYtN2JjYS00MjFkLWJhMTktYjlkNzQ3YTQ2ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAb/A/8BtK5vCYncXrsrdMFGWK5bFGwkGEvc SgtkgqxJmmoDZYiyZ7BhG5M1HpyaDod7vJY5BuIYYm0YfSQTTc8wmhVmHlr7AXhJ V3g22QFZ+GAmD41u0gQwuhmUy3+8Yh6hhT/BbLYd03uJMF9Im0DPJrdyj2HiP7dA JjMi1/IEiEO9B2TA2x9+Yl0aWoXdCcBWBEzQQpnw9xFdwwk6/lfZDQuDZqWULjJP uL9jrXOehuXZdvs1UnEmTEg/bSouS47DK1qYn7GBT4EoDgr2j0ZtJY/8s6fwvUA4 Pwv2bZWwONf7v1WwhFfRs/YsrA48RQ9taa5l7GomcDNfi5/sKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJEbt5r0WQ0heCazyLy9t6RDcVIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvM2NmZjkyN2EtZjE5OC0z NjZlLThlNzYtOTg1NzIyMmYwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ZAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9A8Y1Ac+C5bhnEh9UTqI0NPtWT73oUDsfEA3jl/JfG/bbk/rXv c8TUECxpWspda6mzKkl5q3Sjli5x9jkTzRACctZGozmY47qP6odDQTun+iaEuhBs 706gjs+YuOxggsdGSYCjRdaPB/l+WFpg1Wf2TShX6aqsrjLlXKkKqpnxDe3BazMd 7GIfuXhnW9V/7wRaLkqQi0JEz9YLuHHeY3/QR5yWTjiMseXChWSRbM5U1mGxrmOd KzucabHV2N2BV39WkTnCDxPJvqIDLmG7OtC+Sheqm4LciW69OHLVXPmrAGby1f57 i5jEwSilK+GYIlazRTpz8S1+3lbtl5Y4td4= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:28 2025 by rpki-client