$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa File: 2a02a96f-732c-347d-b56b-b374e0d12acc.roa (raw, json) Hash identifier: TAYO/YFOD25nr5JzGTe9m0KK8vfdcrAZwzDPyyWOI+Q= Subject key identifier: 14:DE:91:4A:50:B5:09:6F:16:EC:F1:CD:4E:2B:54:CE:60:4D:98:2E Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584A62908C769534FA6DDF1BF880 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 19165 IP address blocks: 2604:5500:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8c:76:95:34:fa:6d:df:1b:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=4d6e23e6-9093-4e34-9571-ad2f830a986f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:b0:69:e8:29:d6:17:f6:4b:7a:be:d8:af: cf:d6:20:a1:82:62:4c:1a:a2:4f:a7:5e:88:5c:65: 5d:53:28:15:1c:c8:fb:c7:21:31:03:a4:95:59:e0: 98:4d:a5:33:fa:85:b1:92:bf:1f:d6:5e:53:d7:9e: 68:90:ab:01:f4:ea:34:09:62:19:42:f5:1c:63:10: 85:f4:73:73:92:a9:50:c3:42:b6:e0:d3:ac:4d:78: 3a:4e:dc:0b:11:5e:ab:4a:a2:fc:3d:fe:3a:1f:fe: 80:fc:33:38:36:90:c6:cb:42:47:27:b2:d4:06:31: d1:65:48:70:df:d3:39:91:8c:06:4e:b8:28:54:c4: 6b:9a:41:f3:62:10:bc:0f:b0:59:ca:06:75:38:e2: cc:66:85:0a:35:97:4c:75:f9:5e:ab:9f:50:c9:5f: 1a:19:95:c7:cd:15:2d:c9:1a:1e:2c:1f:d5:a5:6d: 0b:fc:31:d5:c2:f2:38:94:98:6e:56:4d:d6:fb:48: 64:5c:05:15:c6:a9:f8:05:58:06:52:f8:a9:b3:88: 68:af:30:fa:3c:fa:1e:db:76:a6:e2:0b:52:2a:19: 32:c4:fd:b1:69:e9:23:4b:f5:89:5c:e9:3f:c7:cf: 10:ad:ac:d7:35:67:d7:64:20:3d:2c:63:38:39:e7: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:91:4A:50:B5:09:6F:16:EC:F1:CD:4E:2B:54:CE:60:4D:98:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv6: 2604:5500:4000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:77:f6:db:8f:22:fc:3d:28:69:06:cf:b3:1a:a1:22:29:7c: 0e:b8:dc:4b:ee:69:fc:dd:a2:6d:81:6e:7e:23:c2:9b:94:3f: 20:7c:88:4a:19:ed:4c:50:ef:8f:cf:99:e2:dc:9c:ee:15:9e: b1:8f:7b:30:b4:c3:f0:f5:ac:2d:e3:96:74:e6:1d:81:41:34: eb:62:4a:88:27:2a:c3:72:4f:5b:64:26:7d:10:d0:66:b1:e1: 8d:fa:39:8f:a5:9d:9d:cf:51:51:e5:44:34:9d:ff:aa:47:5c: ea:de:f7:19:eb:a0:46:35:a2:8b:5d:7c:39:24:c7:ca:2c:c6: 6f:ac:85:4c:58:62:f3:91:b9:76:5f:c2:9f:96:43:10:3e:70: 1a:71:5d:a0:00:f9:8c:27:55:69:1b:a3:5f:d3:6a:02:18:60: 2f:b5:81:dc:c6:73:ba:08:04:90:44:2c:4b:a0:4b:3a:45:11: 09:42:62:8b:e9:0f:f3:b0:eb:bd:6a:80:ea:9b:cb:85:96:67: 0d:54:c9:22:21:95:9e:d0:d2:bc:aa:cf:c8:2a:29:fa:21:a2: 48:b0:19:bb:52:ac:73:b5:49:46:14:2b:48:fe:89:ad:cc:c1: a1:51:a9:07:3f:df:c1:5c:e8:63:ec:cb:c1:5b:08:1a:55:e9: a2:bf:95:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpikIx2lTT6bd8b+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NGQ2ZTIzZTYtOTA5My00ZTM0LTk1NzEtYWQyZjgzMGE5ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl36waegp1hf2S3q+2K/P1iChgmJMGqJPp16I XGVdUygVHMj7xyExA6SVWeCYTaUz+oWxkr8f1l5T155okKsB9Oo0CWIZQvUcYxCF 9HNzkqlQw0K24NOsTXg6TtwLEV6rSqL8Pf46H/6A/DM4NpDGy0JHJ7LUBjHRZUhw 39M5kYwGTrgoVMRrmkHzYhC8D7BZygZ1OOLMZoUKNZdMdfleq59QyV8aGZXHzRUt yRoeLB/VpW0L/DHVwvI4lJhuVk3W+0hkXAUVxqn4BVgGUvips4horzD6PPoe23am 4gtSKhkyxP2xaekjS/WJXOk/x88QrazXNWfXZCA9LGM4OedZhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBTekUpQtQlvFuzxzU4rVM5gTZguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMmEwMmE5NmYtNzMyYy0z NDdkLWI1NmItYjM3NGUwZDEyYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVAEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd3f2248i/D0oaQbPsxqhIil8DrjcS+5p/N2ibYFufiPCm5Q/IHyI ShntTFDvj8+Z4tyc7hWesY97MLTD8PWsLeOWdOYdgUE062JKiCcqw3JPW2QmfRDQ ZrHhjfo5j6Wdnc9RUeVENJ3/qkdc6t73GeugRjWii118OSTHyizGb6yFTFhi85G5 dl/Cn5ZDED5wGnFdoAD5jCdVaRujX9NqAhhgL7WB3MZzuggEkEQsS6BLOkURCUJi i+kP87DrvWqA6pvLhZZnDVTJIiGVntDSvKrPyCop+iGiSLAZu1Ksc7VJRhQrSP6J rczBoVGpBz/fwVzoY+zLwVsIGlXpor+VNA== -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:11 2025 by rpki-client