$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa File: 396d499f-2ea7-3c33-ab89-036118ac5c6c.roa (raw, json) Hash identifier: b0S0rLpcAogbdc7uNaNkeAKfrka06Hj+DvMtYAJ42rw= Subject key identifier: 08:E4:1D:AD:4B:BA:D8:7B:E3:8F:3F:F2:07:1B:A6:DF:A1:FF:D9:39 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F43285849F71526C2E7D529A7A3D95CE0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 31898 IP address blocks: 2602:fdaa:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:26:c2:e7:d5:29:a7:a3:d9:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9548198e-7d82-4d3a-b93e-c4ba20363398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:6f:f0:ed:65:8d:6e:f8:c6:4a:95:10:69: 6b:0a:2e:56:42:75:c6:b7:3c:73:33:8b:4d:aa:58: 6c:e6:14:42:1b:d8:da:aa:e0:91:23:00:02:8f:98: 1a:4d:4e:d6:06:99:92:f5:ee:48:30:9e:eb:64:b2: 93:8f:f5:c8:2a:65:40:04:8c:4d:35:73:ca:79:9c: 49:8b:8e:40:d5:11:76:cf:bf:18:8b:cf:96:3e:9e: 44:b6:77:e1:f9:fd:4c:06:58:bf:9c:41:49:12:66: 70:2d:2d:70:ce:80:a1:3e:06:81:d8:01:d4:e2:8f: d4:ca:1b:99:c2:95:d0:67:a1:54:31:05:a9:b4:1e: d8:6f:76:35:e9:49:ee:b8:8a:eb:83:74:ea:bc:4f: 4c:bc:4d:0a:19:4f:b0:89:58:c2:c2:62:5c:ea:32: b4:48:e2:eb:16:f8:32:a8:1b:10:c1:7d:b3:43:81: 1e:49:1b:9b:66:8c:d8:2d:12:45:37:46:31:d5:e6: 8c:1f:9a:4b:9a:d2:13:a3:8a:93:d9:1f:b7:6d:1d: 9c:77:8a:2c:21:29:46:1b:dc:01:a1:b5:fc:b8:44: ae:45:ba:4b:ad:45:67:71:e8:43:46:3a:da:d2:4e: 87:fe:38:e3:a4:63:ee:c8:61:24:6a:52:8c:a1:3d: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:1D:AD:4B:BA:D8:7B:E3:8F:3F:F2:07:1B:A6:DF:A1:FF:D9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f4:b2:9a:85:99:1b:2e:30:c6:15:0f:a0:81:24:9d:5e:6d: 44:62:8b:e5:3d:87:e2:1d:48:8b:4a:6d:a2:02:12:9d:b6:55: 40:56:73:1a:ce:c1:9b:fe:b4:bf:f0:e5:8c:4e:ad:a9:0f:a2: 7a:eb:74:06:66:28:1d:56:6f:7a:12:8c:2c:04:54:0c:13:0a: f5:ee:a8:f3:bd:8f:b9:b5:c8:ac:64:f0:8a:a6:63:28:23:82: c9:1f:d5:5e:b8:73:bd:e1:f6:34:b7:47:57:7e:2b:d7:c1:8b: 17:29:11:a0:e4:8c:55:44:05:13:63:28:26:4c:f9:f9:bb:f5: 0e:0f:a1:ae:03:9c:88:99:82:81:86:d1:de:f0:27:3b:76:ab: ea:ab:29:8c:80:ac:e2:37:70:55:0b:03:02:65:7f:f5:4f:50: 7b:95:c0:66:8a:70:f2:25:d0:91:31:40:e7:14:5a:b6:cc:e9: e4:2f:85:d2:15:16:13:b7:69:fc:a9:9c:fd:1c:a2:68:c2:9b: b9:c7:35:ad:89:d9:57:52:51:50:09:45:1b:56:ec:6c:42:d5: 1d:14:25:65:a9:74:79:79:8b:57:77:95:98:51:75:08:1e:03: e2:df:03:17:3a:0f:ed:dd:81:e4:99:9c:68:ef:66:9d:d1:4a: 0d:05:60:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FSbC59Upp6PZXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OTU0ODE5OGUtN2Q4Mi00ZDNhLWI5M2UtYzRiYTIwMzYzMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXlv8O1ljW74xkqVEGlrCi5WQnXGtzxzM4tN qlhs5hRCG9jaquCRIwACj5gaTU7WBpmS9e5IMJ7rZLKTj/XIKmVABIxNNXPKeZxJ i45A1RF2z78Yi8+WPp5Etnfh+f1MBli/nEFJEmZwLS1wzoChPgaB2AHU4o/UyhuZ wpXQZ6FUMQWptB7Yb3Y16UnuuIrrg3TqvE9MvE0KGU+wiVjCwmJc6jK0SOLrFvgy qBsQwX2zQ4EeSRubZozYLRJFN0Yx1eaMH5pLmtITo4qT2R+3bR2cd4osISlGG9wB obX8uESuRbpLrUVncehDRjra0k6H/jjjpGPuyGEkalKMoT1PNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAjkHa1Luth7448/8gcbpt+h/9k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMzk2ZDQ5OWYtMmVhNy0z YzMzLWFiODktMDM2MTE4YWM1YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIP0spqFmRsuMMYVD6CBJJ1ebURii+U9h+IdSItKbaICEp22VUBW cxrOwZv+tL/w5YxOrakPonrrdAZmKB1Wb3oSjCwEVAwTCvXuqPO9j7m1yKxk8Iqm Yygjgskf1V64c73h9jS3R1d+K9fBixcpEaDkjFVEBRNjKCZM+fm79Q4Poa4DnIiZ goGG0d7wJzt2q+qrKYyArOI3cFULAwJlf/VPUHuVwGaKcPIl0JExQOcUWrbM6eQv hdIVFhO3afypnP0comjCm7nHNa2J2VdSUVAJRRtW7GxC1R0UJWWpdHl5i1d3lZhR dQgeA+LfAxc6D+3dgeSZnGjvZp3RSg0FYAo= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:13 2025 by rpki-client