$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/98a10735-f822-39f3-86e2-73b38e9be02e.roa File: 98a10735-f822-39f3-86e2-73b38e9be02e.roa (raw, json) Hash identifier: pNajtYyeb4MWWc2cINu54do91EItp9dy4OmPx4eanA8= Subject key identifier: A9:58:63:5D:6D:D4:32:E3:78:D0:B8:CE:67:FE:ED:C2:C2:6D:D7:01 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584A1EDF0D9F30DCAD4F5D39C980 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/98a10735-f822-39f3-86e2-73b38e9be02e.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 57974 IP address blocks: 2602:2d4:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:df:0d:9f:30:dc:ad:4f:5d:39:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=8f73eb94-cc5e-4aae-8bc2-d9fd11c2ea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:e1:6e:43:af:31:87:88:f3:83:82:9e:16: 28:e1:6e:97:45:7d:82:0d:49:53:c7:f2:b8:b7:7e: a6:ba:57:40:f3:cd:69:61:4b:f6:6e:2f:4f:c9:dc: e9:52:52:ce:25:2b:c5:bf:0b:78:2b:77:0b:60:af: 7f:5d:3e:db:cd:7a:5f:63:db:4d:3f:8d:0c:fd:08: 68:31:cb:cb:51:03:fd:41:db:f1:dc:fe:06:e7:d8: 90:89:64:38:33:3e:88:7d:f2:0a:f8:c5:13:c2:fd: ba:d2:8b:61:79:44:2e:30:ef:a8:92:35:6c:cf:b9: bc:2d:44:93:80:40:a5:57:e7:b7:69:6b:78:d7:7a: 95:12:1d:65:6c:52:ba:5b:92:0b:41:a5:66:eb:95: 1b:0d:67:43:e7:0f:89:4f:c0:93:57:3d:cf:05:5e: ad:90:55:48:59:db:b6:45:40:ad:ce:30:5c:df:85: 15:6b:71:8c:43:71:35:f0:9b:db:2d:f5:41:bf:28: 3f:4a:2d:66:24:62:f6:da:49:ec:fa:27:53:33:59: a2:2f:17:54:2a:7a:86:cb:a5:d0:91:e1:ca:07:90: 81:52:75:6f:10:51:62:d7:74:a2:fa:30:fa:97:df: 9a:35:33:c5:ff:f8:11:02:de:5a:b4:c1:4e:d5:5c: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:63:5D:6D:D4:32:E3:78:D0:B8:CE:67:FE:ED:C2:C2:6D:D7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/98a10735-f822-39f3-86e2-73b38e9be02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d4:e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:27:c5:65:1d:39:7e:9e:b7:a1:cd:dc:e1:5a:0b:5c:3f: e8:d1:c1:6d:17:6d:e2:04:db:ba:e9:32:19:5c:19:3f:ee:07: a3:8e:ca:b9:f1:34:fd:04:0b:ce:66:9f:cd:be:19:16:70:51: 9e:9a:a4:6f:2e:e6:cb:32:46:ec:18:bf:33:10:5b:fc:db:51: 55:68:79:6d:da:51:b7:4c:6f:21:11:d6:d6:48:b8:3c:6b:48: c2:f1:7b:e0:d4:ce:9a:d1:96:d5:23:1f:f1:25:69:d4:48:54: 32:9e:7e:25:bc:60:48:1b:d9:32:ab:01:2a:e1:e0:b7:30:41: 44:34:a0:d9:08:dd:13:98:09:d7:9e:f6:43:d7:01:61:38:a7: 1c:f8:63:85:b5:8a:13:44:2e:cc:55:40:b8:6f:ab:3f:ac:84: 18:96:4f:51:d5:98:f9:97:5b:e0:06:61:08:77:cc:21:d1:b4: ec:cb:9a:55:65:35:67:e7:fe:7c:78:bc:3d:f3:97:c0:60:09: cc:10:7a:0f:6b:22:34:cc:7a:27:6e:0b:bb:da:b2:fb:9b:64: 08:db:de:a7:db:60:19:6c:e1:f3:b7:a2:7f:6c:b5:08:2a:3d: 1e:36:f4:cd:bd:20:19:ef:0f:24:98:95:2e:dd:87:d5:82:b8: 22:a8:84:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoe3w2fMNytT105yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk OGY3M2ViOTQtY2M1ZS00YWFlLThiYzItZDlmZDExYzJlYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPhbkOvMYeI84OCnhYo4W6XRX2CDUlTx/K4 t36muldA881pYUv2bi9PydzpUlLOJSvFvwt4K3cLYK9/XT7bzXpfY9tNP40M/Qho McvLUQP9Qdvx3P4G59iQiWQ4Mz6IffIK+MUTwv260otheUQuMO+okjVsz7m8LUST gEClV+e3aWt413qVEh1lbFK6W5ILQaVm65UbDWdD5w+JT8CTVz3PBV6tkFVIWdu2 RUCtzjBc34UVa3GMQ3E18JvbLfVBvyg/Si1mJGL22kns+idTM1miLxdUKnqGy6XQ keHKB5CBUnVvEFFi13Si+jD6l9+aNTPF//gRAt5atMFO1Vz9IQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKlYY11t1DLjeNC4zmf+7cLCbdcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvOThhMTA3MzUtZjgyMi0z OWYzLTg2ZTItNzNiMzhlOWJlMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC1A4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABHUnxWUdOX6et6HN3OFaC1w/6NHBbRdt4gTbuukyGVwZP+4Ho47K ufE0/QQLzmafzb4ZFnBRnpqkby7myzJG7Bi/MxBb/NtRVWh5bdpRt0xvIRHW1ki4 PGtIwvF74NTOmtGW1SMf8SVp1EhUMp5+JbxgSBvZMqsBKuHgtzBBRDSg2QjdE5gJ 1572Q9cBYTinHPhjhbWKE0QuzFVAuG+rP6yEGJZPUdWY+Zdb4AZhCHfMIdG07Mua VWU1Z+f+fHi8PfOXwGAJzBB6D2siNMx6J24Lu9qy+5tkCNvep9tgGWzh87eif2y1 CCo9Hjb0zb0gGe8PJJiVLt2H1YK4IqiEuA== -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:49 2025 by rpki-client