$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa File: b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa (raw, json) Hash identifier: boAtgt+v6od4aF2cDR4XD2ZQCXttP9adCr5d1vpW2h0= Subject key identifier: 41:8E:8A:4A:3D:1A:11:9D:81:88:2F:35:3C:A8:0C:C5:30:F9:5F:9A Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F4328584A77808EFC990DB580F6AF6D00 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 401466 IP address blocks: 2602:f874:fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8e:fc:99:0d:b5:80:f6:af:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=c7e713fd-87c0-4966-9ae8-119a020b3651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:88:3a:98:4c:c2:ec:e5:d8:49:7e:5c:3b: 14:18:12:44:14:1b:35:0a:3d:ef:47:d1:25:5d:7b: 24:e6:0b:ea:5f:92:d8:df:88:34:ce:75:22:86:90: 0e:2d:cb:8f:74:f7:ba:b1:44:88:65:41:06:c5:d5: 23:d6:60:61:a2:2e:c0:6c:fd:06:1f:a6:c4:aa:d0: 5e:0f:8e:0a:b5:61:05:2c:7d:17:ed:58:b5:0e:20: 09:22:4e:a8:80:d6:d7:c1:c2:d2:1a:d4:88:ec:5d: ca:45:c3:53:48:17:71:75:39:b4:d9:7c:f9:91:a7: 49:e5:e7:31:e2:2b:a9:19:9c:78:5e:03:5f:c0:b5: 5c:38:65:00:ed:1d:e0:bc:f4:bd:2e:cf:9f:c8:af: 2e:ae:1a:5c:53:80:5a:2a:c3:f3:6b:93:70:4c:f3: 2e:46:21:ae:2c:5c:d0:35:58:42:4a:2c:3d:76:5d: ee:4c:0b:80:7c:44:f2:2c:57:04:4e:f4:7a:b1:f1: a6:d9:5c:07:0a:98:fa:5e:19:da:41:6f:56:75:0a: ec:33:ae:42:f7:11:30:27:f2:7b:bc:28:af:71:93: 00:68:a4:8a:b9:b5:95:59:86:8c:ac:09:e1:27:a6: fe:ca:03:c6:4f:de:bc:4d:57:40:60:f5:12:25:c2: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:8A:4A:3D:1A:11:9D:81:88:2F:35:3C:A8:0C:C5:30:F9:5F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874:fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4d:d7:36:5f:59:3b:7d:4f:07:32:39:d4:f7:83:ae:84:ef: f9:b5:88:72:06:25:af:88:93:88:ce:12:99:b4:f4:30:2a:c4: 4d:a3:05:a4:45:dd:19:fb:f3:64:ae:47:d5:83:9b:45:f2:02: 3a:47:ef:a3:7e:ee:57:db:e1:ce:8b:00:10:56:3a:0b:d6:7a: 78:50:3f:3e:05:d7:a9:6c:c6:8d:0e:1d:37:12:a5:a6:79:6e: d7:72:c8:be:4c:06:73:2c:f0:fa:f9:65:5f:29:76:5c:18:46: e4:7d:f5:87:52:6a:71:bd:67:96:5b:41:17:8e:08:c5:34:5a: 5a:4e:fc:e5:30:12:5b:a7:53:82:a7:9e:f9:b2:98:4a:83:a1: 4e:f4:af:64:c9:ec:a8:c0:18:73:07:92:bf:fd:a0:1a:2c:87: 58:46:cc:7b:ea:12:bf:9e:01:9e:75:bc:a7:ff:40:5f:23:77: 20:91:76:1f:f9:ae:2f:10:11:c4:3f:bb:9b:b4:2d:22:d1:cf: d9:93:8e:2d:a4:61:6c:63:bd:4f:53:df:35:e6:a2:d2:a1:74: cc:dc:0e:49:2d:02:0b:28:4f:5b:6f:82:3f:59:ea:4b:ff:92: 6d:6b:61:0b:65:1e:58:54:dc:d0:6a:af:14:6d:56:10:25:9b: d1:a8:4c:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp3gI78mQ21gPavbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YzdlNzEzZmQtODdjMC00OTY2LTlhZTgtMTE5YTAyMGIzNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ryIOphMwuzl2El+XDsUGBJEFBs1Cj3vR9El XXsk5gvqX5LY34g0znUihpAOLcuPdPe6sUSIZUEGxdUj1mBhoi7AbP0GH6bEqtBe D44KtWEFLH0X7Vi1DiAJIk6ogNbXwcLSGtSI7F3KRcNTSBdxdTm02Xz5kadJ5ecx 4iupGZx4XgNfwLVcOGUA7R3gvPS9Ls+fyK8urhpcU4BaKsPza5NwTPMuRiGuLFzQ NVhCSiw9dl3uTAuAfETyLFcETvR6sfGm2VwHCpj6XhnaQW9WdQrsM65C9xEwJ/J7 vCivcZMAaKSKubWVWYaMrAnhJ6b+ygPGT968TVdAYPUSJcIk/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGOiko9GhGdgYgvNTyoDMUw+V+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvYjM2MjZmMjMtYjRlNC0z ZDNjLWFhN2MtOWIxYzY3ZGMzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4dAD6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNN1zZfWTt9TwcyOdT3g66E7/m1iHIGJa+Ik4jOEpm09DAqxE2j BaRF3Rn782SuR9WDm0XyAjpH76N+7lfb4c6LABBWOgvWenhQPz4F16lsxo0OHTcS paZ5btdyyL5MBnMs8Pr5ZV8pdlwYRuR99YdSanG9Z5ZbQReOCMU0WlpO/OUwElun U4KnnvmymEqDoU70r2TJ7KjAGHMHkr/9oBosh1hGzHvqEr+eAZ51vKf/QF8jdyCR dh/5ri8QEcQ/u5u0LSLRz9mTji2kYWxjvU9T3zXmotKhdMzcDkktAgsoT1tvgj9Z 6kv/km1rYQtlHlhU3NBqrxRtVhAlm9GoTC8= -----END CERTIFICATE-----Generated at Tue Aug 12 22:40:55 2025 by rpki-client