$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa File: 22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa (raw, json) Hash identifier: HBXSFqzBg/OkMzD+GJHJcFzF3YsSe8QsIMewcl7Lj+k= Subject key identifier: 54:5D:F4:4D:AB:7C:88:DA:71:E2:C0:85:26:C5:18:3E:6B:3C:63:0F Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584A9E96194BA45F466A8EC327A0 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 62517 IP address blocks: 2602:f83b:1688::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:19:4b:a4:5f:46:6a:8e:c3:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=f76bfd9d-0ba0-4c59-b2e1-e0dfc027615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:1e:e7:4f:34:a7:8a:da:53:71:77:82:bf: ff:1b:9e:f9:7c:f4:c9:b3:c4:a3:04:f8:e0:1f:a5: 00:7e:9b:dc:ff:0b:51:8f:3d:40:a9:b0:8b:45:8b: 44:ac:c0:8d:b8:d1:bb:1a:30:97:dc:be:39:60:2d: 90:38:3e:72:de:31:1a:b6:20:f5:30:d6:e5:d1:41: 2f:c4:a9:c4:30:7a:45:eb:0e:30:8a:10:00:14:8a: 9d:6c:a2:77:eb:5c:49:65:56:70:18:16:75:0c:c3: a6:fe:a0:f6:9d:60:84:59:49:e4:8f:ea:92:25:89: f2:c6:d8:16:67:6f:f4:f0:58:ba:19:ca:5f:7c:f6: 00:67:99:00:76:23:ef:32:f8:19:3f:ee:71:3c:0a: 41:a7:84:48:f6:9f:98:7e:d0:86:e2:70:82:55:b2: 16:d7:62:91:23:be:1b:3c:bb:92:2b:89:57:8a:ce: ef:8e:74:03:9d:57:ad:e2:e5:2a:f5:d0:03:19:32: 50:e9:de:ac:8b:cf:aa:2d:05:fa:61:47:2c:8f:58: cd:de:59:3f:e3:07:89:32:ba:80:87:7a:39:30:13: e4:f9:74:d8:7c:9d:04:7c:84:9f:5b:9a:d7:ee:54: bf:11:cd:7d:7c:9f:d3:36:71:32:f3:35:3f:25:ad: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5D:F4:4D:AB:7C:88:DA:71:E2:C0:85:26:C5:18:3E:6B:3C:63:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:1688::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:47:85:13:42:ef:60:50:85:b7:29:e5:a5:c6:3d:10:52:0e: 19:e7:63:a1:5a:d8:b9:44:ce:a0:8e:15:cd:ee:16:17:22:f3: b6:cc:77:f4:ea:0a:38:67:66:70:b0:f0:cf:75:38:c5:1b:37: ce:a7:79:8b:db:ac:c1:0e:59:2e:73:8f:fa:01:99:0e:43:4d: 27:84:aa:b7:dc:ff:e2:97:8f:b7:f2:b9:22:69:b0:ce:66:00: df:97:a6:ff:48:b9:b6:0d:cd:a6:b4:e1:30:45:b1:aa:fe:fd: 72:a9:a9:8c:05:8e:28:97:2a:d6:a6:22:c0:58:dc:3d:82:22: c7:eb:94:e3:3b:25:2d:a3:8c:f2:6d:5a:02:67:86:9f:df:d1: a8:5e:90:07:d6:d5:44:7b:fa:eb:83:64:d1:8f:30:56:e0:98: 8f:bd:8c:52:65:12:fb:f4:ad:8d:26:d6:ea:6f:0a:09:be:cd: 82:db:83:bc:69:aa:39:82:81:9c:5d:39:f2:2d:0a:19:09:0c: eb:bf:b0:b7:9b:01:02:a4:7c:05:8e:04:20:6a:a6:d0:81:74: 3e:7a:df:db:53:af:f5:e3:98:f6:7d:c0:21:0e:9e:d6:ed:c3: 72:56:48:67:df:bd:e9:48:bc:17:59:0c:fe:bc:9b:7b:10:8b: e0:73:bf:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqelhlLpF9Gao7DJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Zjc2YmZkOWQtMGJhMC00YzU5LWIyZTEtZTBkZmMwMjc2MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmske5080p4raU3F3gr//G575fPTJs8SjBPjg H6UAfpvc/wtRjz1AqbCLRYtErMCNuNG7GjCX3L45YC2QOD5y3jEatiD1MNbl0UEv xKnEMHpF6w4wihAAFIqdbKJ361xJZVZwGBZ1DMOm/qD2nWCEWUnkj+qSJYnyxtgW Z2/08Fi6GcpffPYAZ5kAdiPvMvgZP+5xPApBp4RI9p+YftCG4nCCVbIW12KRI74b PLuSK4lXis7vjnQDnVet4uUq9dADGTJQ6d6si8+qLQX6YUcsj1jN3lk/4weJMrqA h3o5MBPk+XTYfJ0EfISfW5rX7lS/Ec19fJ/TNnEy8zU/Ja1W3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFRd9E2rfIjaceLAhSbFGD5rPGMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMjJhYjAwMGUtYzVlMi0z M2RmLThiYjYtM2VjMjg4ZTM2YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OxaI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1HhRNC72BQhbcp5aXGPRBSDhnnY6Fa2LlEzqCOFc3uFhci87bM d/TqCjhnZnCw8M91OMUbN86neYvbrMEOWS5zj/oBmQ5DTSeEqrfc/+KXj7fyuSJp sM5mAN+Xpv9IubYNzaa04TBFsar+/XKpqYwFjiiXKtamIsBY3D2CIsfrlOM7JS2j jPJtWgJnhp/f0ahekAfW1UR7+uuDZNGPMFbgmI+9jFJlEvv0rY0m1upvCgm+zYLb g7xpqjmCgZxdOfItChkJDOu/sLebAQKkfAWOBCBqptCBdD5639tTr/XjmPZ9wCEO ntbtw3JWSGffvelIvBdZDP68m3sQi+Bzv6k= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:41 2025 by rpki-client