$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa File: 3373b409-dc7f-33d9-aa1d-16771300f34e.roa (raw, json) Hash identifier: 9RGTtHyE2FMriBXM91/r8/pk7tOfJzeVfZ3WqZ8Cncc= Subject key identifier: 59:05:52:EB:D0:55:BD:70:2F:2C:6B:58:EE:B3:01:20:A8:4A:DF:1F Certificate issuer: /CN=acaade25-9776-4234-a203-4f2776b69f08 Certificate serial: 010D0C9F4328584A47340ADF1E282DA2C36BDE40 Authority key identifier: DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa Signing time: Sun 22 Jun 2025 17:48:01 +0000 ROA not before: Sun 22 Jun 2025 17:48:01 +0000 ROA not after: Sat 20 Sep 2025 17:48:01 +0000 asID: 14874 IP address blocks: 2602:f825::/40 maxlen: 124 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:47:34:0a:df:1e:28:2d:a2:c3:6b:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaade25-9776-4234-a203-4f2776b69f08 Validity Not Before: Jun 22 17:48:01 2025 GMT Not After : Sep 20 17:48:01 2025 GMT Subject: CN=afed0d09-da8d-4ed5-aee5-0244d40b3834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:39:81:2f:d9:cb:19:fa:b0:de:4b:69:5c: 52:c0:da:8a:4f:47:20:71:eb:d4:f1:52:18:73:24: b0:ae:7b:fc:65:fb:2d:9e:d2:c7:ec:42:ac:9e:07: 19:45:7f:3c:84:ba:ac:96:49:b4:d9:5e:b5:fa:5a: 20:c4:31:d7:eb:ff:48:9e:d6:c7:08:cb:7d:60:2a: 16:41:de:73:a6:47:58:e8:00:f3:25:bd:b5:fa:6b: f5:ea:f4:46:a9:6f:f4:da:4f:39:df:b0:e9:f7:e7: 62:6a:f8:19:8e:a0:52:bd:30:c4:94:29:28:a4:b7: 4b:40:af:67:0b:31:fb:e7:42:ba:f0:e4:c7:fb:50: e6:32:8a:f7:df:54:18:e0:90:96:10:0d:4b:45:b0: 89:36:22:63:c3:1f:a2:2e:8c:bb:30:1b:98:67:f5: 30:c7:51:96:a1:c4:ae:f2:34:36:eb:a7:e0:60:64: a0:ed:80:ec:f8:33:7f:49:98:be:77:7a:5f:26:32: 0f:e9:5a:11:04:d0:5f:e9:6b:0a:ce:3e:6c:ca:b3: 76:ac:f0:8d:a3:51:10:e1:a5:c6:2a:6f:ce:da:08: 84:98:04:10:df:2d:18:39:e8:fa:b3:04:19:73:b3: 79:96:7a:70:88:14:f7:40:18:d0:46:bd:18:53:19: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:05:52:EB:D0:55:BD:70:2F:2C:6B:58:EE:B3:01:20:A8:4A:DF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/3373b409-dc7f-33d9-aa1d-16771300f34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl X509v3 Authority Key Identifier: keyid:DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer sbgp-ipAddrBlock: critical IPv6: 2602:f825::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5a:c3:18:f6:cf:b9:9a:1f:d2:29:31:bf:78:b1:c6:3c:ab: 9b:98:cd:0c:ff:f5:a2:f5:92:e8:97:18:c6:1e:ab:c4:83:64: a3:7e:fd:03:53:db:89:6e:34:32:6b:ae:d6:fb:e1:c1:2f:1a: 3c:3f:d8:73:f6:86:af:23:76:a4:53:19:18:a7:2c:d1:36:3a: 91:26:78:0c:80:c2:62:be:bd:41:58:6c:f8:81:3f:f1:d5:2b: 83:9e:ee:72:f8:54:a1:dd:90:b7:75:f3:4d:62:34:05:8e:fe: 7e:48:8f:d7:cf:59:f6:38:9e:63:dd:0e:32:f8:d7:ef:54:ad: 0d:37:de:b6:fa:00:f1:c4:b0:fa:a5:a5:5e:0e:32:d6:d1:c4: 26:f0:ab:95:3a:c8:01:91:0d:e0:6a:92:e0:3e:2f:9e:e8:dc: 55:1c:b3:57:76:c5:31:f6:da:43:2a:8e:8c:b2:04:86:1e:21: 1d:5a:e3:fd:34:68:2f:f7:5a:05:50:2f:85:3f:95:02:c1:41: 3f:ba:e0:6d:f7:0d:e1:9d:d7:a6:bb:20:21:51:0e:f1:5e:ed: 93:04:86:c8:50:53:1f:eb:80:dd:e8:e9:a3:37:65:a4:60:49: 1e:7e:c2:5c:d1:f2:12:85:07:c7:0b:8f:e8:4c:4f:18:ec:cc: 3f:52:eb:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpHNArfHigtosNr3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNhYWRlMjUtOTc3Ni00MjM0LWEyMDMtNGYyNzc2YjY5 ZjA4MB4XDTI1MDYyMjE3NDgwMVoXDTI1MDkyMDE3NDgwMVowLzEtMCsGA1UEAxMk YWZlZDBkMDktZGE4ZC00ZWQ1LWFlZTUtMDI0NGQ0MGIzODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleQ5gS/Zyxn6sN5LaVxSwNqKT0cgcevU8VIY cySwrnv8ZfstntLH7EKsngcZRX88hLqslkm02V61+logxDHX6/9IntbHCMt9YCoW Qd5zpkdY6ADzJb21+mv16vRGqW/02k8537Dp9+diavgZjqBSvTDElCkopLdLQK9n CzH750K68OTH+1DmMor331QY4JCWEA1LRbCJNiJjwx+iLoy7MBuYZ/Uwx1GWocSu 8jQ266fgYGSg7YDs+DN/SZi+d3pfJjIP6VoRBNBf6WsKzj5syrN2rPCNo1EQ4aXG Km/O2giEmAQQ3y0YOej6swQZc7N5lnpwiBT3QBjQRr0YUxm6EQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFkFUuvQVb1wLyxrWO6zASCoSt8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Fh ZGUyNS05Nzc2LTQyMzQtYTIwMy00ZjI3NzZiNjlmMDgvMzM3M2I0MDktZGM3Zi0z M2Q5LWFhMWQtMTY3NzEzMDBmMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNhYWRlMjUtOTc3Ni00MjM0LWEy MDMtNGYyNzc2YjY5ZjA4L2FjYWFkZTI1LTk3NzYtNDIzNC1hMjAzLTRmMjc3NmI2 OWYwOC5jcmwwHwYDVR0jBBgwFoAU2//RLWvvx2C6TbJ+i5YiRQ4E5sUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2FhZGUyNS05Nzc2LTQyMzQtYTIwMy00ZjI3 NzZiNjlmMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4JQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhlrDGPbPuZof0ikxv3ixxjyrm5jNDP/1ovWS6JcYxh6rxINko379 A1PbiW40Mmuu1vvhwS8aPD/Yc/aGryN2pFMZGKcs0TY6kSZ4DIDCYr69QVhs+IE/ 8dUrg57ucvhUod2Qt3XzTWI0BY7+fkiP189Z9jieY90OMvjX71StDTfetvoA8cSw +qWlXg4y1tHEJvCrlTrIAZEN4GqS4D4vnujcVRyzV3bFMfbaQyqOjLIEhh4hHVrj /TRoL/daBVAvhT+VAsFBP7rgbfcN4Z3XprsgIVEO8V7tkwSGyFBTH+uA3ejpozdl pGBJHn7CXNHyEoUHxwuP6ExPGOzMP1LrcA== -----END CERTIFICATE-----Generated at Wed Jun 25 11:17:11 2025 by rpki-client