$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa File: 8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa (raw, json) Hash identifier: +3GjMLn8GLJ9vApNucfYgDFUBNEDim2hBxRSa5/C1LU= Subject key identifier: 29:C6:12:AE:F4:BA:76:BB:39:17:6B:A1:EC:6C:45:9D:15:67:57:4C Certificate issuer: /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59 Certificate serial: 010D0C9F4328584A9E961C17C3DE741514AFC6C0 Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 23077 IP address blocks: 2602:f9aa::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1c:17:c3:de:74:15:14:af:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9338dd9d-6023-4b5d-9bcb-256c63cb0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:fd:89:3c:2c:c1:6e:61:05:b6:b4:27:77: c4:f3:bb:46:5d:66:82:4f:1c:6d:4a:bf:1c:0f:5f: 98:7c:13:71:cd:18:a8:71:f1:20:e4:25:00:7d:13: c6:7f:03:c5:11:0d:0e:74:de:89:e9:e4:84:b8:aa: 4b:01:fe:b3:fe:2b:a8:b1:77:e4:a9:83:b1:78:0d: 46:80:d4:bf:5a:6b:52:de:78:b6:1e:36:47:4d:6a: c3:bb:4d:52:74:33:57:da:db:66:5c:c6:b4:36:5d: dd:b1:93:c9:93:e8:0d:06:ef:d9:9d:0f:91:55:31: f4:33:f9:78:1c:35:76:e5:4d:4d:f8:15:25:72:65: 94:dc:11:3f:d3:f6:74:ef:cc:19:9f:dc:01:5e:c3: e7:48:60:c4:c4:66:02:b6:a7:a5:80:99:56:aa:4b: 79:4e:d8:93:3e:6f:62:eb:36:26:33:de:eb:ed:99: 9c:5c:81:15:e6:5a:c0:69:81:29:d1:40:f1:d2:8b: 3c:73:15:f1:28:09:0b:3c:45:55:01:83:f0:80:78: 02:bc:8f:be:4d:e9:a6:b4:af:f5:49:5a:a4:48:a0: 7c:7e:59:f2:cb:c4:15:e6:29:a3:7d:22:09:8a:db: 7a:70:5c:8f:9e:47:df:5b:58:f8:4d:a7:63:1c:36: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:12:AE:F4:BA:76:BB:39:17:6B:A1:EC:6C:45:9D:15:67:57:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl X509v3 Authority Key Identifier: keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9aa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:18:d2:50:12:da:4f:65:b9:01:fe:d2:19:16:a4:32:54:92: 52:c5:ec:ed:c6:21:c6:d0:7f:a7:24:db:3b:63:8b:bb:5c:fd: e4:53:3e:3c:a8:a3:25:50:61:ef:bc:e6:f8:b7:45:01:58:a9: f2:f4:5b:e1:cb:c7:c0:64:a5:bb:62:f4:f2:91:47:64:f2:78: 14:25:db:1e:ab:2e:bc:91:f2:09:69:80:e7:c4:e4:10:72:89: 63:38:c5:e7:02:2e:23:9c:0e:ba:3c:88:cb:78:8a:a8:b0:96: 08:a2:a9:8b:5b:c1:53:ad:a9:76:6b:25:38:00:d6:65:14:d2: 02:6a:ea:ea:1c:cf:fc:8c:bd:d9:44:51:26:56:b3:b8:54:e5: 7d:d0:17:40:68:3c:bf:6d:b3:4c:17:de:a4:94:8d:6f:54:bf: 02:f4:e1:7d:e1:49:68:18:0b:18:0c:66:07:6f:f6:ba:64:46: d1:6c:59:d5:ec:b7:05:86:6d:4b:4c:92:86:cd:0f:10:e9:ac: 3f:85:67:c3:21:24:99:fb:10:e8:67:17:54:67:2c:38:e9:24: 6e:b0:7f:f9:9f:5e:ed:df:83:b3:97:9b:69:48:7f:ac:49:67: fd:5d:ba:b4:19:24:74:f4:06:b5:45:ee:8d:4d:ba:5d:03:c3: 98:8d:9b:3a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqelhwXw950FRSvxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVm ZDU5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTMzOGRkOWQtNjAyMy00YjVkLTliY2ItMjU2YzYzY2IwNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGf9iTwswW5hBba0J3fE87tGXWaCTxxtSr8c D1+YfBNxzRiocfEg5CUAfRPGfwPFEQ0OdN6J6eSEuKpLAf6z/iuosXfkqYOxeA1G gNS/WmtS3ni2HjZHTWrDu01SdDNX2ttmXMa0Nl3dsZPJk+gNBu/ZnQ+RVTH0M/l4 HDV25U1N+BUlcmWU3BE/0/Z078wZn9wBXsPnSGDExGYCtqelgJlWqkt5TtiTPm9i 6zYmM97r7ZmcXIEV5lrAaYEp0UDx0os8cxXxKAkLPEVVAYPwgHgCvI++TemmtK/1 SVqkSKB8flnyy8QV5imjfSIJitt6cFyPnkffW1j4TadjHDaqBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCnGEq70una7ORdroexsRZ0VZ1dMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQy Y2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvODQ0N2M0YTItYzRhYi0z YjVlLTliYzUtMjkwOGExZTM5NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzVkMmNiYTUtYWNlYy00YmE4LWFk ZTctMGY4M2E2YWVmZDU5Lzc1ZDJjYmE1LWFjZWMtNGJhOC1hZGU3LTBmODNhNmFl ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUC0KDrTkpponfjH/XE0dGb4/L7/UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgz YTZhZWZkNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5qgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeRjSUBLaT2W5Af7SGRakMlSSUsXs7cYhxtB/pyTbO2OLu1z95FM+ PKijJVBh77zm+LdFAVip8vRb4cvHwGSlu2L08pFHZPJ4FCXbHqsuvJHyCWmA58Tk EHKJYzjF5wIuI5wOujyIy3iKqLCWCKKpi1vBU62pdmslOADWZRTSAmrq6hzP/Iy9 2URRJlazuFTlfdAXQGg8v22zTBfepJSNb1S/AvThfeFJaBgLGAxmB2/2umRG0WxZ 1ey3BYZtS0yShs0PEOmsP4VnwyEkmfsQ6GcXVGcsOOkkbrB/+Z9e7d+Ds5ebaUh/ rEln/V26tBkkdPQGtUXujU26XQPDmI2bOg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:49 2025 by rpki-client