$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa File: a05e816d-14ac-367c-876a-ed9f65d71b90.roa (raw, json) Hash identifier: 1WEULPiJtlKCbm6WTgn/d6ZMbda0kuJWdHfb44HPJ4E= Subject key identifier: 8F:08:53:C3:D4:0A:37:EF:E8:74:4A:64:25:72:1E:F7:9F:94:17:F6 Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584A9D30E1D4D6328D53D669AE00 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 35008 IP address blocks: 2602:2d5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e1:d4:d6:32:8d:53:d6:69:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=7bfe81ad-85f8-4155-ba88-6552e51ad726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:b8:6f:98:2d:76:a1:37:34:b9:61:85:98: b0:cc:8f:c8:23:d8:ba:08:3c:9d:ab:c7:87:45:b4: 4a:06:83:d3:38:75:c7:03:d1:c9:90:06:ec:e3:af: cd:71:4f:63:84:5c:4a:44:40:59:28:15:e2:2d:fc: 17:c2:3d:aa:62:3d:74:e2:55:51:8b:9b:e5:74:e3: cb:73:ba:46:12:04:d9:72:7b:e7:32:9a:9e:b5:51: b8:b2:a9:f6:25:0f:47:8c:e0:18:33:59:b1:b3:b3: 55:90:4d:04:2e:54:b9:f9:8a:1a:21:f3:49:cb:57: 2a:49:bf:6d:1c:e4:21:3c:92:34:a8:08:65:2d:8e: a9:70:35:7d:03:75:a7:89:7e:0e:55:cc:49:2f:59: ec:df:f8:7e:14:bb:ae:74:5d:db:21:80:2a:32:8f: 03:e6:c9:c8:1b:df:c3:45:89:6f:10:99:63:db:8c: f7:47:f2:78:53:54:c6:24:e2:62:40:4a:0c:00:e5: 6f:e4:75:e1:af:33:44:50:e3:2e:e1:97:33:bb:f2: 7e:56:89:78:13:e1:0f:09:be:06:82:be:48:7b:e2: 71:30:cf:50:11:70:d3:b6:65:19:15:c8:c9:b4:42: ed:61:80:53:0e:aa:9b:60:b8:ba:a2:15:f6:ee:f3: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:08:53:C3:D4:0A:37:EF:E8:74:4A:64:25:72:1E:F7:9F:94:17:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9e:bd:ad:a2:5f:a7:e5:9c:cd:09:5a:31:75:57:33:91:f0: 04:b3:99:f8:20:6c:1b:7e:41:44:a8:92:78:8a:95:ea:5d:23: 94:e4:8a:d4:70:81:9c:ba:66:3e:88:32:d0:26:71:25:e0:d5: 4b:ea:22:9e:97:3c:56:75:87:25:f3:09:a2:d2:dd:4a:a6:ec: c5:d6:3a:06:a2:1b:b5:bc:e5:fe:a6:26:76:44:08:c3:4b:d8: e9:b6:93:c6:a0:ac:16:e2:4e:3c:10:5d:25:a5:3d:65:7e:79: 4a:d8:e5:15:50:d9:35:2c:dc:39:f2:e2:d7:b1:b1:dc:9b:8b: 60:c8:7a:b3:fd:86:fe:6d:af:a6:61:46:20:c7:4c:0f:a5:8d: 1b:ad:60:dc:0c:77:f3:70:d2:11:9a:8a:91:12:7e:09:ef:eb: 7a:6a:7b:27:f7:93:a1:b6:72:14:2a:c2:1b:20:c6:3a:97:75: 7e:ff:46:5f:4e:5d:38:6a:be:63:d4:e2:d5:49:31:a3:95:3b: c8:bb:8a:03:8f:b4:e2:b7:9b:c0:75:c9:02:98:a0:63:ce:90: 75:51:2d:6c:89:c0:2b:d3:03:57:68:b6:d7:8f:46:79:19:94: d8:1e:0c:c8:a4:59:d0:cf:5f:90:60:e4:a3:60:8b:27:99:0a: e2:29:23:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqdMOHU1jKNU9ZprgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk N2JmZTgxYWQtODVmOC00MTU1LWJhODgtNjU1MmU1MWFkNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArby4b5gtdqE3NLlhhZiwzI/II9i6CDydq8eH RbRKBoPTOHXHA9HJkAbs46/NcU9jhFxKREBZKBXiLfwXwj2qYj104lVRi5vldOPL c7pGEgTZcnvnMpqetVG4sqn2JQ9HjOAYM1mxs7NVkE0ELlS5+YoaIfNJy1cqSb9t HOQhPJI0qAhlLY6pcDV9A3WniX4OVcxJL1ns3/h+FLuudF3bIYAqMo8D5snIG9/D RYlvEJlj24z3R/J4U1TGJOJiQEoMAOVv5HXhrzNEUOMu4Zczu/J+Vol4E+EPCb4G gr5Ie+JxMM9QEXDTtmUZFcjJtELtYYBTDqqbYLi6ohX27vOHzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI8IU8PUCjfv6HRKZCVyHveflBf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvYTA1ZTgxNmQtMTRhYy0z NjdjLTg3NmEtZWQ5ZjY1ZDcxYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC1QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAs569raJfp+WczQlaMXVXM5HwBLOZ+CBsG35BRKiSeIqV6l0jlOSK 1HCBnLpmPogy0CZxJeDVS+oinpc8VnWHJfMJotLdSqbsxdY6BqIbtbzl/qYmdkQI w0vY6baTxqCsFuJOPBBdJaU9ZX55StjlFVDZNSzcOfLi17Gx3JuLYMh6s/2G/m2v pmFGIMdMD6WNG61g3Ax383DSEZqKkRJ+Ce/remp7J/eTobZyFCrCGyDGOpd1fv9G X05dOGq+Y9Ti1Ukxo5U7yLuKA4+04rebwHXJApigY86QdVEtbInAK9MDV2i2149G eRmU2B4MyKRZ0M9fkGDko2CLJ5kK4ikjDA== -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:10 2025 by rpki-client