$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa File: be920d72-c3a3-399e-9752-c3f9116ce1d7.roa (raw, json) Hash identifier: k+176VH9+VbWWm6wWKDmpv3vC9eWYu4TcPAcrKzUcaE= Subject key identifier: CE:17:7C:A9:A8:D0:57:81:6F:E4:1A:31:94:4C:C5:9E:01:16:A1:E1 Certificate issuer: /CN=0e307b23-6715-4f4e-8e81-99854b623d2d Certificate serial: 010D0C9F4328584A1465782B75097D2614973680 Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 397668 IP address blocks: 2602:f9dd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:78:2b:75:09:7d:26:14:97:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=f41e1732-4a7a-4c4e-8823-1ce40c595690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:55:0d:f8:5c:a8:c9:11:ee:e8:6d:32:c9: f8:b9:bc:f1:ed:9e:03:14:0d:e1:ef:c4:21:e5:a6: 82:29:e4:d0:3a:7e:75:a0:67:0c:2a:92:e9:f5:10: eb:eb:21:ba:66:bb:56:ef:b7:78:fc:3f:51:ac:60: c7:1f:ea:c1:ee:ef:4e:54:96:9e:6e:33:45:5f:4d: 31:1b:9b:c0:e1:77:0a:6b:9f:a4:87:5b:fb:c9:90: fb:da:04:b0:1e:95:ea:24:2f:4a:fc:d2:71:a2:30: 64:a2:1f:fd:3b:81:5c:9b:6c:14:13:f9:12:4e:a8: ed:7e:dd:6a:27:c0:22:e5:17:63:5f:37:e4:41:0c: 30:53:a8:e0:7b:a9:e4:92:d3:30:cc:49:22:25:d5: 33:c6:c8:06:10:14:69:ba:4f:2b:da:1e:9d:9e:90: 1f:18:84:10:7e:8a:fd:b8:07:a7:19:2e:45:f7:8f: 2a:4a:e8:7b:13:51:85:6e:03:48:78:c6:5e:64:3a: e9:07:3a:ab:76:7f:06:f7:0c:55:62:a9:6d:65:69: 2b:59:58:11:45:1e:73:67:de:90:87:c8:71:c4:ba: 86:fd:0f:05:bc:a3:14:a2:8b:07:8c:6f:7a:c6:4a: ac:4a:5b:51:d3:ea:dc:a0:01:3a:48:b8:7b:23:50: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:7C:A9:A8:D0:57:81:6F:E4:1A:31:94:4C:C5:9E:01:16:A1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl X509v3 Authority Key Identifier: keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9dd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7a:52:5a:fc:4f:a0:5e:93:e0:84:ab:2c:9f:58:4d:87:e8: ad:23:fa:57:bc:fa:e8:de:3b:be:cd:33:90:58:47:92:e5:8e: 29:d6:8b:9b:ec:15:b8:f3:28:70:f1:43:97:43:cb:d7:1c:4e: 56:1a:b9:d4:4f:d1:c9:2d:7f:82:d2:97:26:8c:77:bf:4d:8f: 55:06:6c:d6:f8:65:a9:1f:70:02:96:e5:0a:0a:a8:a2:e9:ce: c7:2a:b0:ef:38:1e:f8:ac:9e:4e:34:9e:16:4e:50:74:32:b4: ab:ea:c5:7a:92:64:35:05:4f:70:56:a4:f5:55:b0:ba:25:26: 7d:49:6f:ba:d5:ae:27:f8:ea:4f:51:7b:33:4a:ee:e3:ad:75: b9:fc:c0:22:40:71:e8:22:3f:a6:ae:86:b1:5f:3d:51:36:d8: 5e:f2:c8:28:55:4e:10:46:65:d8:30:4d:3c:b4:78:44:d4:67: 39:17:2c:31:40:34:f5:a0:d9:37:81:5a:35:88:42:7f:79:fe: a1:b5:f9:8a:2f:32:3d:de:97:2b:0e:8c:7c:bb:5a:7d:c5:9f: 86:05:5f:e8:d3:13:67:4b:ab:f9:36:cd:31:4e:82:3d:f4:d7: f0:87:cf:56:b4:2b:b6:e1:90:62:44:97:30:fb:3e:43:50:08: 4c:31:6c:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoUZXgrdQl9JhSXNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUzMDdiMjMtNjcxNS00ZjRlLThlODEtOTk4NTRiNjIz ZDJkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQxZTE3MzItNGE3YS00YzRlLTg4MjMtMWNlNDBjNTk1NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoclVDfhcqMkR7uhtMsn4ubzx7Z4DFA3h78Qh 5aaCKeTQOn51oGcMKpLp9RDr6yG6ZrtW77d4/D9RrGDHH+rB7u9OVJaebjNFX00x G5vA4XcKa5+kh1v7yZD72gSwHpXqJC9K/NJxojBkoh/9O4Fcm2wUE/kSTqjtft1q J8Ai5RdjXzfkQQwwU6jge6nkktMwzEkiJdUzxsgGEBRpuk8r2h6dnpAfGIQQfor9 uAenGS5F948qSuh7E1GFbgNIeMZeZDrpBzqrdn8G9wxVYqltZWkrWVgRRR5zZ96Q h8hxxLqG/Q8FvKMUoosHjG96xkqsSltR0+rcoAE6SLh7I1DliwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM4XfKmo0FeBb+QaMZRMxZ4BFqHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMw N2IyMy02NzE1LTRmNGUtOGU4MS05OTg1NGI2MjNkMmQvYmU5MjBkNzItYzNhMy0z OTllLTk3NTItYzNmOTExNmNlMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUzMDdiMjMtNjcxNS00ZjRlLThl ODEtOTk4NTRiNjIzZDJkLzBlMzA3YjIzLTY3MTUtNGY0ZS04ZTgxLTk5ODU0YjYy M2QyZC5jcmwwHwYDVR0jBBgwFoAUWDT9SHGgd1gTWpDffWNpbGBkXc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMwN2IyMy02NzE1LTRmNGUtOGU4MS05OTg1 NGI2MjNkMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWHpSWvxPoF6T4ISrLJ9YTYforSP6V7z66N47vs0zkFhHkuWOKdaL m+wVuPMocPFDl0PL1xxOVhq51E/RyS1/gtKXJox3v02PVQZs1vhlqR9wApblCgqo ounOxyqw7zge+KyeTjSeFk5QdDK0q+rFepJkNQVPcFak9VWwuiUmfUlvutWuJ/jq T1F7M0ru4611ufzAIkBx6CI/pq6GsV89UTbYXvLIKFVOEEZl2DBNPLR4RNRnORcs MUA09aDZN4FaNYhCf3n+obX5ii8yPd6XKw6MfLtafcWfhgVf6NMTZ0ur+TbNMU6C PfTX8IfPVrQrtuGQYkSXMPs+Q1AITDFsig== -----END CERTIFICATE-----Generated at Mon Jun 16 21:16:41 2025 by rpki-client