$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa File: 3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json) Hash identifier: /IFJffp8gj9g034g03e4ko4C0QTxu8CBcU8qyhlMbTY= Subject key identifier: 5E:73:AD:6A:44:53:E7:82:62:F3:22:3D:2C:71:5F:96:0A:CA:DD:61 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584A9D30E989016240C21BFC3000 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 396952 IP address blocks: 2602:fec2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e9:89:01:62:40:c2:1b:fc:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=855418e2-6a4d-4db1-8a6a-5c416bbe0273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:8e:b2:b0:79:e0:1a:cf:26:45:47:92:6f: 77:ea:8a:2e:98:05:fc:b4:15:4b:0a:86:89:ea:91: a1:52:8e:1b:fa:1b:05:73:b9:6c:17:8a:69:84:f7: 53:97:f1:f0:03:d7:65:1f:93:27:73:3f:ff:ad:bc: 88:c7:b0:4c:4a:b9:32:ea:5a:73:51:07:35:89:f8: cf:84:6a:d8:9e:99:e7:b0:70:ac:fd:af:3d:f9:fa: 3c:99:96:5b:95:07:a7:9a:14:48:12:c9:eb:08:49: d9:39:a2:ae:a8:a5:e3:59:ed:b5:da:7f:87:30:08: 80:cb:cf:0c:c8:4c:43:f1:43:68:10:9e:c8:aa:e2: b9:29:d1:7c:a5:54:42:0c:bc:fe:56:10:9d:0e:10: 80:86:d9:c7:7e:76:ce:04:84:10:b9:87:e5:44:7c: b4:4d:a4:93:d7:c2:a2:b9:a1:bc:c4:73:35:ae:9e: b3:76:b4:06:22:78:dc:41:a2:0c:c3:27:e4:0d:9d: ad:7f:13:0a:14:09:91:f5:0e:96:98:36:18:13:ed: 14:18:89:e7:88:92:e3:db:2e:2a:ea:d7:f2:d0:99: 2c:ef:34:54:47:9b:fd:25:5f:90:d5:0f:e7:f8:cc: 06:79:28:7b:82:1b:47:a9:aa:b1:e1:a3:0e:01:4b: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:AD:6A:44:53:E7:82:62:F3:22:3D:2C:71:5F:96:0A:CA:DD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:81:69:0b:fb:8a:02:ff:b8:ed:ec:e8:25:f1:a2:d3:2d:b6: ce:80:ef:f2:8e:d5:7c:33:a7:0b:24:8b:07:98:b0:21:01:2c: d0:6b:db:6a:65:10:55:cf:de:40:07:86:83:3b:b5:dd:22:3d: 50:39:6b:70:1e:92:7e:a0:bf:01:c5:50:a5:73:a5:9f:77:de: cc:47:ce:45:8f:1f:6e:6c:33:9e:71:d2:ea:f2:16:19:eb:53: db:d1:46:17:0d:1f:d5:e8:64:d0:2b:a3:ca:7a:75:6b:4a:02: 70:f2:d7:93:da:ea:0e:61:46:6e:45:bc:84:6c:5e:8f:e3:28: e8:34:d4:ed:96:cc:fc:07:fd:6a:7d:9c:9e:28:04:f9:e3:8e: ad:d3:1c:e0:b6:52:41:52:65:89:06:4e:79:ea:8f:a7:17:1c: f7:e3:34:ec:a1:05:3a:70:c5:53:90:b9:1c:42:2b:38:78:7b: ae:4d:aa:0f:bb:c6:ed:62:1c:41:ac:23:62:1b:8e:94:e4:ed: e0:9c:d1:24:e3:08:02:92:f7:81:c7:cc:0c:09:cd:67:a9:af: 7b:58:20:3a:a5:69:d1:c8:b8:e8:8c:e2:b1:3b:9a:4b:df:b8: a9:22:72:48:5c:e9:e0:a7:70:32:a0:0c:e7:58:c6:33:86:1e: d6:82:57:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqdMOmJAWJAwhv8MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ODU1NDE4ZTItNmE0ZC00ZGIxLThhNmEtNWM0MTZiYmUwMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhmOsrB54BrPJkVHkm936ooumAX8tBVLCoaJ 6pGhUo4b+hsFc7lsF4pphPdTl/HwA9dlH5Mncz//rbyIx7BMSrky6lpzUQc1ifjP hGrYnpnnsHCs/a89+fo8mZZblQenmhRIEsnrCEnZOaKuqKXjWe212n+HMAiAy88M yExD8UNoEJ7IquK5KdF8pVRCDLz+VhCdDhCAhtnHfnbOBIQQuYflRHy0TaST18Ki uaG8xHM1rp6zdrQGInjcQaIMwyfkDZ2tfxMKFAmR9Q6WmDYYE+0UGInniJLj2y4q 6tfy0Jks7zRUR5v9JV+Q1Q/n+MwGeSh7ghtHqaqx4aMOAUtTiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF5zrWpEU+eCYvMiPSxxX5YKyt1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvM2Q3Y2Y5ZWQtYTA0NC0z MmZmLThjZWMtZTAwNjZkMTdjMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+wjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvgWkL+4oC/7jt7Ogl8aLTLbbOgO/yjtV8M6cLJIsHmLAhASzQa9tq ZRBVz95AB4aDO7XdIj1QOWtwHpJ+oL8BxVClc6Wfd97MR85Fjx9ubDOecdLq8hYZ 61Pb0UYXDR/V6GTQK6PKenVrSgJw8teT2uoOYUZuRbyEbF6P4yjoNNTtlsz8B/1q fZyeKAT5446t0xzgtlJBUmWJBk556o+nFxz34zTsoQU6cMVTkLkcQis4eHuuTaoP u8btYhxBrCNiG46U5O3gnNEk4wgCkveBx8wMCc1nqa97WCA6pWnRyLjojOKxO5pL 37ipInJIXOngp3AyoAznWMYzhh7WgleJ -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:00 2025 by rpki-client