$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa File: 2a31dd75-45e6-307f-b715-e7b55a1e5617.roa (raw, json) Hash identifier: GSxQIv+Bw5dNLiz1tOyVP7DMIHvM5G/ZUUPVFkGucJk= Subject key identifier: 2F:32:CC:31:B2:3E:29:55:67:4D:68:FF:06:96:E9:63:0C:47:85:A0 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584A7A4B409433A115C09C7C0600 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 14618 IP address blocks: 2602:814:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:40:94:33:a1:15:c0:9c:7c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=3adfc4cf-edbc-4637-b811-ebdfd1e17b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:e8:62:57:83:86:d4:67:ba:0e:e6:56:73: 28:34:1a:e5:7c:a8:38:a4:ea:9c:cd:93:9e:4a:60: 02:8a:a3:2d:33:9a:1b:ef:9b:e0:f6:61:d4:73:de: b0:f7:f9:1e:8c:97:90:45:4c:09:f7:85:94:2b:56: 63:c5:32:d0:1c:b7:f2:ce:56:65:12:47:15:e3:24: 63:d3:26:8e:3d:0b:2c:45:09:8a:3d:d0:19:9e:3f: 7a:47:d9:16:06:f7:3a:15:9e:bd:67:c8:bb:73:1b: ae:c5:32:32:84:f5:f9:e1:13:48:fb:29:84:31:f3: a9:65:b5:2b:d8:62:8c:b6:8f:64:8c:db:bb:e9:a3: 38:60:66:7d:de:0c:9c:22:68:53:74:cf:78:c7:29: a8:d1:44:35:9a:1c:d1:c9:b9:e2:26:d5:e1:7d:67: 84:f4:4a:d8:32:76:5e:4c:ea:24:b9:4e:0d:cf:6c: f7:95:78:fe:51:a5:8c:b9:9f:81:1b:96:89:7a:2e: b0:c8:3a:df:1b:1a:e3:29:00:03:4c:6a:11:91:e9: e3:a2:3b:07:8e:02:f2:de:ff:64:64:f7:b7:b2:d8: be:7f:8f:a9:8d:af:e4:d5:29:65:d1:d3:d8:ee:1f: 20:64:44:c8:5c:57:b8:6b:f5:b4:a0:9c:42:45:29: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:CC:31:B2:3E:29:55:67:4D:68:FF:06:96:E9:63:0C:47:85:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:47:dd:71:d9:eb:dd:44:3f:6a:a7:7f:10:ac:3f:d4:50:3d: 92:54:50:6b:8c:45:f8:9d:d5:6e:0f:c3:0a:df:01:23:39:f4: d8:04:ae:79:93:4d:1d:26:0f:33:3e:39:72:33:fe:ff:1f:53: ba:1c:80:a7:29:37:69:29:0e:9e:ed:1e:53:9e:c4:f7:1e:76: 73:59:4d:38:97:47:4c:04:4c:b5:3a:b6:90:7b:58:0b:15:82: 79:58:a1:a2:32:77:7d:3f:0b:f4:0d:a1:af:df:83:79:77:dc: fe:df:fe:c8:a8:c7:68:f1:4e:10:ed:e9:78:70:d9:e5:ce:11: 51:9f:80:18:5d:bb:58:50:93:37:57:b9:ff:72:1b:d1:a2:e9: 53:77:31:02:46:7e:be:27:7f:a8:e1:91:dd:a1:e8:ec:1b:29: b7:d5:16:d8:7d:75:3b:5e:8f:30:7e:a7:32:bd:c6:32:af:b4: 04:d3:74:2b:d5:29:c5:09:f9:51:9e:c4:13:39:2f:8d:19:49: 1d:df:5b:e7:d3:9e:f2:a9:34:e0:b4:2a:6b:3a:c0:d6:b8:a5: d2:c1:4c:6f:b9:10:a3:3a:81:0d:0e:45:f6:b2:4d:81:d1:a0: e0:10:b7:a0:02:55:74:e2:8b:5e:a5:70:ee:d5:28:5f:c0:0a: 48:08:d6:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp6S0CUM6EVwJx8BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk M2FkZmM0Y2YtZWRiYy00NjM3LWI4MTEtZWJkZmQxZTE3YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4voYleDhtRnug7mVnMoNBrlfKg4pOqczZOe SmACiqMtM5ob75vg9mHUc96w9/kejJeQRUwJ94WUK1ZjxTLQHLfyzlZlEkcV4yRj 0yaOPQssRQmKPdAZnj96R9kWBvc6FZ69Z8i7cxuuxTIyhPX54RNI+ymEMfOpZbUr 2GKMto9kjNu76aM4YGZ93gycImhTdM94xymo0UQ1mhzRybniJtXhfWeE9ErYMnZe TOokuU4Nz2z3lXj+UaWMuZ+BG5aJei6wyDrfGxrjKQADTGoRkenjojsHjgLy3v9k ZPe3sti+f4+pja/k1Sll0dPY7h8gZETIXFe4a/W0oJxCRSnh7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC8yzDGyPilVZ01o/waW6WMMR4WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvMmEzMWRkNzUtNDVlNi0z MDdmLWI3MTUtZTdiNTVhMWU1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL5H3XHZ691EP2qnfxCsP9RQPZJUUGuMRfid1W4PwwrfASM59NgE rnmTTR0mDzM+OXIz/v8fU7ocgKcpN2kpDp7tHlOexPcednNZTTiXR0wETLU6tpB7 WAsVgnlYoaIyd30/C/QNoa/fg3l33P7f/siox2jxThDt6Xhw2eXOEVGfgBhdu1hQ kzdXuf9yG9Gi6VN3MQJGfr4nf6jhkd2h6OwbKbfVFth9dTtejzB+pzK9xjKvtATT dCvVKcUJ+VGexBM5L40ZSR3fW+fTnvKpNOC0Kms6wNa4pdLBTG+5EKM6gQ0ORfay TYHRoOAQt6ACVXTii16lcO7VKF/ACkgI1oA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:55 2025 by rpki-client