$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa File: 7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa (raw, json) Hash identifier: q74uKOxtsVfD6WH01JlhDtR4+40NGmJgRM2dHatRKiU= Subject key identifier: 93:92:38:67:B5:E5:53:8D:19:BA:A1:45:15:89:A1:45:A0:83:8D:01 Certificate issuer: /CN=bae7ed2b-d42a-42fa-947d-f719eddc984a Certificate serial: 010D0C9F4328584A5FC5EA3235A463642DDBC380 Authority key identifier: 88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 397423 IP address blocks: 2602:2c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ea:32:35:a4:63:64:2d:db:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae7ed2b-d42a-42fa-947d-f719eddc984a Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=5c86120c-dfcb-4bfe-bdf9-c7c20adc2b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a2:93:01:fd:a0:d9:2d:93:75:2a:ea:97:09: 90:f9:c2:b2:b6:a8:d3:ec:6f:e9:14:96:79:28:c6: 3b:b6:55:09:c4:82:07:a6:2c:ac:ac:0b:2e:d2:c2: 8d:b6:4e:da:1f:da:f9:19:59:56:2a:b2:96:75:9f: 14:81:04:6d:28:07:2f:2c:58:8b:e2:ac:1b:ec:af: 64:db:f3:59:5d:de:32:6c:f6:06:c8:87:aa:cf:da: a9:33:55:68:60:4a:d6:ee:99:ae:e7:8b:3f:e6:79: 0a:eb:a3:ab:96:b2:a2:7e:7c:b2:4e:62:77:22:87: 4d:79:68:c5:f4:fe:58:be:c0:eb:c3:e1:19:3c:6b: 3f:0f:d9:e8:0d:e5:e9:a2:63:61:78:f4:11:9b:b1: 23:e7:9d:bf:af:4a:24:f2:a9:8e:dd:76:57:b7:1e: 78:05:74:88:6f:a0:be:0b:45:3e:f6:da:a4:eb:73: bc:1e:c5:f5:0f:72:99:17:ac:55:a7:f2:6c:a0:31: e3:5f:ee:b3:0d:bc:e8:47:7d:15:d2:1a:0d:b5:a3: 01:f3:f0:e2:30:d8:ea:2d:a2:9a:f4:2d:42:16:32: 09:c6:de:d5:05:cb:11:f9:03:a6:55:4c:c7:0e:67: 4f:58:18:df:ee:85:74:4e:fd:51:eb:7d:55:ea:5d: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:38:67:B5:E5:53:8D:19:BA:A1:45:15:89:A1:45:A0:83:8D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl X509v3 Authority Key Identifier: keyid:88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:88:57:a2:bb:93:b9:a3:bd:e0:ba:34:84:b2:3c:04:3e:37: fe:b5:da:18:83:ad:88:28:06:cd:f2:ce:b2:9f:ca:81:9f:17: 13:47:b5:db:27:5d:26:69:4d:86:f4:fd:4b:02:5f:06:f2:ec: c5:38:48:f6:84:15:6a:0f:69:2a:00:03:8d:43:63:65:c2:eb: 46:3c:6f:8c:d4:0e:fd:e1:5c:58:14:19:16:38:2a:61:40:f6: 12:30:3c:e3:0f:cc:6a:99:51:5e:ab:2b:4a:12:b1:9f:1e:8c: b7:3b:72:43:6d:fd:c0:bf:2a:18:e7:39:fc:cc:56:49:0f:74: 7d:19:7a:e9:44:97:cb:01:5f:a3:52:fc:9d:21:e5:dd:42:73: 78:ac:79:17:70:d6:9c:58:f0:5b:bf:b0:b3:b6:5e:9f:b6:e4: ee:4f:3a:84:c2:04:e5:3f:7c:4d:c1:a2:c2:5d:6e:be:4b:70: 8e:1b:4e:b7:6b:cf:b3:1c:5c:64:83:34:ee:d3:7a:0f:bc:c1: f9:45:f7:52:89:d9:73:2a:a3:67:4d:3c:b8:b7:f6:d7:e5:bf: d8:d8:0f:c8:6f:8d:0d:38:40:80:a2:1e:4b:48:cf:ab:77:8b: 73:98:e1:21:06:07:2d:1e:66:99:d0:71:48:06:36:f4:de:2d: 7c:ea:1c:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxeoyNaRjZC3bw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlN2VkMmItZDQyYS00MmZhLTk0N2QtZjcxOWVkZGM5 ODRhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NWM4NjEyMGMtZGZjYi00YmZlLWJkZjktYzdjMjBhZGMyYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aKTAf2g2S2TdSrqlwmQ+cKytqjT7G/pFJZ5 KMY7tlUJxIIHpiysrAsu0sKNtk7aH9r5GVlWKrKWdZ8UgQRtKAcvLFiL4qwb7K9k 2/NZXd4ybPYGyIeqz9qpM1VoYErW7pmu54s/5nkK66OrlrKifnyyTmJ3IodNeWjF 9P5YvsDrw+EZPGs/D9noDeXpomNhePQRm7Ej552/r0ok8qmO3XZXtx54BXSIb6C+ C0U+9tqk63O8HsX1D3KZF6xVp/JsoDHjX+6zDbzoR30V0hoNtaMB8/DiMNjqLaKa 9C1CFjIJxt7VBcsR+QOmVUzHDmdPWBjf7oV0Tv1R631V6l1EcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOSOGe15VONGbqhRRWJoUWgg40BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3 ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5ZWRkYzk4NGEvN2ZmNzFkOTYtYTEyNS0z N2M0LWI3YzMtY2Y1YjNiNzA5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmFlN2VkMmItZDQyYS00MmZhLTk0 N2QtZjcxOWVkZGM5ODRhL2JhZTdlZDJiLWQ0MmEtNDJmYS05NDdkLWY3MTllZGRj OTg0YS5jcmwwHwYDVR0jBBgwFoAUiESzVgFRlSSpcJUrlYdnm2Td2zowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5 ZWRkYzk4NGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyIV6K7k7mjveC6NISyPAQ+N/612hiDrYgoBs3yzrKfyoGfFxNH tdsnXSZpTYb0/UsCXwby7MU4SPaEFWoPaSoAA41DY2XC60Y8b4zUDv3hXFgUGRY4 KmFA9hIwPOMPzGqZUV6rK0oSsZ8ejLc7ckNt/cC/KhjnOfzMVkkPdH0ZeulEl8sB X6NS/J0h5d1Cc3iseRdw1pxY8Fu/sLO2Xp+25O5POoTCBOU/fE3BosJdbr5LcI4b Trdrz7McXGSDNO7Teg+8wflF91KJ2XMqo2dNPLi39tflv9jYD8hvjQ04QICiHktI z6t3i3OY4SEGBy0eZpnQcUgGNvTeLXzqHAc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:53 2025 by rpki-client