$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa File: cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa (raw, json) Hash identifier: 2hkwn3GwdkuZiT8YH2eh9kAf8VMe/VHZD+1c8nxuE3E= Subject key identifier: A0:F7:08:83:5F:2B:35:FA:57:39:4F:B3:4C:4D:B9:12:F8:29:7F:DD Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285849D594D8C6E9ED702237575D00 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 20278 IP address blocks: 2602:ffc8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d8:c6:e9:ed:70:22:37:57:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=b1ef3652-2f27-4303-be72-b9d710f72f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:34:13:9f:94:94:58:0a:d7:78:32:8e:4a: e8:16:25:9d:fd:b8:3e:c9:33:be:96:bd:10:32:fe: 3c:0c:bb:be:80:70:d4:4b:de:eb:14:d7:4b:ab:6e: 29:c2:e0:87:dd:09:af:1c:0c:7a:40:0e:ce:6a:62: 42:6b:cd:59:cf:59:ea:26:89:75:f8:d6:51:25:29: 6c:ac:a8:32:c0:1a:4a:99:8c:44:e0:e1:da:37:af: 44:a2:64:ff:c0:17:fb:fd:be:d1:36:ad:5f:b8:43: 9a:be:0a:70:6d:20:69:6c:69:0b:f1:a5:75:0e:9e: 4a:32:a9:af:8c:b0:6b:20:15:eb:9a:18:3a:8b:9c: f0:a6:99:71:ef:7c:01:20:43:3b:f1:a6:2d:a0:18: 20:12:98:2d:77:d3:a0:03:e1:c8:99:3b:ba:a4:97: 96:62:83:97:32:9d:af:4a:3a:29:59:77:10:ac:82: 85:46:af:98:70:0a:9c:3d:30:c8:4b:51:76:2d:e6: be:f7:31:60:e1:c3:f4:d9:25:ed:9f:13:99:c9:f4: 5c:ca:fa:70:5c:14:58:0e:2d:c9:73:85:a9:28:1b: 37:a4:4b:c5:33:bb:cb:d5:25:ad:2e:c1:ef:32:b4: 28:1c:5f:4c:37:5b:c8:fc:07:b1:d7:27:fe:59:77: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:08:83:5F:2B:35:FA:57:39:4F:B3:4C:4D:B9:12:F8:29:7F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffc8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:56:70:0c:50:b7:11:a7:7c:c7:7f:57:3b:46:5b:9e:4a:c7: 2f:cf:e8:75:08:6e:1f:fb:a1:95:90:6e:9a:27:73:44:2e:91: 62:cc:3e:08:50:67:35:e5:de:0c:34:ac:c9:54:2a:a6:fb:40: 32:69:7e:f1:c6:f5:3b:86:f5:54:28:a0:f2:2e:4b:84:f9:3d: 63:0d:32:f5:cf:eb:a7:6f:67:1e:5c:af:9a:c3:0e:f4:f1:49: 4d:44:e1:b5:2f:7b:01:a5:e3:2b:c3:08:09:20:17:6a:d5:a1: 5c:34:f3:8b:cb:12:1d:b0:b2:ca:18:c5:44:0e:4b:db:0e:ed: 4d:1d:5f:41:55:bd:2e:92:35:b0:ce:12:92:f6:35:53:1e:10: 20:92:f5:a4:78:ee:cd:4f:9a:66:cd:bb:c3:4d:4e:a5:dd:77: d3:c0:79:75:64:98:b6:48:7c:a0:4f:6e:c5:99:ea:b7:8d:49: fe:27:83:45:21:2f:44:4c:2c:89:db:ad:93:bc:f6:44:9c:2c: a4:0c:c6:d4:32:74:1d:cc:b3:6c:44:2f:fc:13:f3:71:cd:a3: 30:3c:ae:f5:0d:e3:14:89:96:8f:97:c2:17:13:48:5b:0f:36: f5:35:3b:72:f4:5a:e2:5c:69:44:cc:19:3f:6c:35:6d:19:eb: 0a:08:a4:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnVlNjG6e1wIjdXXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YjFlZjM2NTItMmYyNy00MzAzLWJlNzItYjlkNzEwZjcyZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGg0E5+UlFgK13gyjkroFiWd/bg+yTO+lr0Q Mv48DLu+gHDUS97rFNdLq24pwuCH3QmvHAx6QA7OamJCa81Zz1nqJol1+NZRJSls rKgywBpKmYxE4OHaN69EomT/wBf7/b7RNq1fuEOavgpwbSBpbGkL8aV1Dp5KMqmv jLBrIBXrmhg6i5zwpplx73wBIEM78aYtoBggEpgtd9OgA+HImTu6pJeWYoOXMp2v SjopWXcQrIKFRq+YcAqcPTDIS1F2Lea+9zFg4cP02SXtnxOZyfRcyvpwXBRYDi3J c4WpKBs3pEvFM7vL1SWtLsHvMrQoHF9MN1vI/Aex1yf+WXcxSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKD3CINfKzX6VzlPs0xNuRL4KX/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvY2IxOGRjNjYtZTg4Yy0z NzgyLTg4ZjYtOTZjN2E0NWNjNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL/yDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBVnAMULcRp3zHf1c7RlueSscvz+h1CG4f+6GVkG6aJ3NELpFizD4I UGc15d4MNKzJVCqm+0AyaX7xxvU7hvVUKKDyLkuE+T1jDTL1z+unb2ceXK+aww70 8UlNROG1L3sBpeMrwwgJIBdq1aFcNPOLyxIdsLLKGMVEDkvbDu1NHV9BVb0ukjWw zhKS9jVTHhAgkvWkeO7NT5pmzbvDTU6l3XfTwHl1ZJi2SHygT27Fmeq3jUn+J4NF IS9ETCyJ262TvPZEnCykDMbUMnQdzLNsRC/8E/NxzaMwPK71DeMUiZaPl8IXE0hb Dzb1NTty9FriXGlEzBk/bDVtGesKCKS2 -----END CERTIFICATE-----Generated at Mon Jun 16 11:57:27 2025 by rpki-client