$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa File: 88d218ab-9c22-353d-a21d-a0cf2af8daff.roa (raw, json) Hash identifier: 1h45xGWpLnD45W1l9NJTrrrq7ycwDjAgKIkEn/QI8ao= Subject key identifier: 85:AC:D6:4B:20:16:64:F5:06:FE:D1:44:84:FF:4D:48:1B:A1:5F:71 Certificate issuer: /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Certificate serial: 010D0C9F4328584A9FFBA8233201D323BB047690 Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 1030 IP address blocks: 2602:f9cd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a8:23:32:01:d3:23:bb:04:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=4ce82fca-ac7a-44b1-abb3-e302728be888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:12:b6:1f:e8:d8:b1:9c:3c:d1:6b:9e:83: bd:dd:1e:05:87:13:50:30:8d:ea:03:01:df:b2:fb: a8:5d:88:66:cd:b3:96:40:85:77:a8:89:68:41:d5: a5:1a:b4:2f:7d:ee:61:06:75:a3:e6:70:08:a3:00: 7e:e0:b4:38:0d:c8:03:69:de:16:c6:10:a1:c4:83: 3d:01:ff:37:8c:79:b0:58:f1:18:a4:d7:a2:d8:18: e0:2b:82:d0:5a:4f:76:bb:29:a9:4f:61:11:c2:0a: 25:f2:f5:c2:f0:53:fb:04:5f:fa:70:8e:c0:29:e7: 0b:f5:15:f5:c3:91:9f:f2:66:e4:07:cb:66:d0:80: 23:53:43:87:3e:46:d2:8d:32:7c:2a:dc:83:58:6d: 7d:f4:fd:8c:f1:2d:23:4c:c1:45:d6:7c:9d:04:2f: 12:a0:8a:86:93:5e:d5:90:b6:5f:dd:e7:26:8c:24: 15:cf:07:c3:7d:8d:c0:4f:a4:20:75:05:9c:b3:b5: f9:38:c5:7b:a4:cf:26:ce:84:6d:2c:da:ee:64:d8: 22:3a:0d:1f:0e:9c:2f:e3:0a:11:43:b9:de:82:57: 37:b6:a2:69:bc:46:1f:7f:cc:a9:11:d1:0a:d9:d1: d9:5c:fe:e8:4b:f5:85:1e:75:82:08:e3:6e:3c:17: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AC:D6:4B:20:16:64:F5:06:FE:D1:44:84:FF:4D:48:1B:A1:5F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl X509v3 Authority Key Identifier: keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bc:11:1f:77:2e:02:97:8d:6b:93:cd:32:a8:90:e5:ca:1d: 45:07:73:27:ca:b5:83:63:f7:45:10:97:86:c0:b0:94:82:64: 25:e5:59:dc:28:41:c6:5d:e0:e7:28:75:50:f6:f9:26:f5:55: 04:99:42:12:90:50:71:87:67:c6:1b:62:4f:b8:b6:ab:78:66: 29:b1:42:1d:f2:93:dc:9b:70:d0:ff:1b:4c:47:90:46:d8:95: a8:bd:92:62:66:54:66:9f:41:0f:19:51:1c:cb:22:87:79:7e: 6b:f5:71:06:8a:36:20:5c:50:f6:31:e2:a2:9d:c1:6a:8f:cf: 2c:49:52:a7:55:c6:50:11:60:5d:1b:01:93:5b:0d:35:a3:cd: 99:11:a6:cd:89:68:26:a5:93:a8:93:42:42:5e:52:b0:6e:40: 30:d3:39:89:b4:b3:65:8d:27:1c:b9:2f:62:bc:b1:1c:c3:7d: 58:2e:97:3b:31:5b:58:d0:9f:1c:b8:fb:da:dd:41:4d:ac:e8: 64:8f:85:46:2a:18:d8:51:53:89:34:82:c0:bb:a4:da:59:de: d5:9e:6d:a9:08:73:d3:b6:3f:45:98:b2:26:d0:ea:b0:09:0c: 54:ab:33:ab:f2:34:91:a3:65:87:38:77:f4:48:4a:10:e7:a1: 92:d9:1c:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqf+6gjMgHTI7sEdpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDViZDM1NzgtM2MwOC00NGQxLTk5ZTItODA4N2ZjNDhm ZmIzMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NGNlODJmY2EtYWM3YS00NGIxLWFiYjMtZTMwMjcyOGJlODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIwSth/o2LGcPNFrnoO93R4FhxNQMI3qAwHf svuoXYhmzbOWQIV3qIloQdWlGrQvfe5hBnWj5nAIowB+4LQ4DcgDad4WxhChxIM9 Af83jHmwWPEYpNei2BjgK4LQWk92uympT2ERwgol8vXC8FP7BF/6cI7AKecL9RX1 w5Gf8mbkB8tm0IAjU0OHPkbSjTJ8KtyDWG199P2M8S0jTMFF1nydBC8SoIqGk17V kLZf3ecmjCQVzwfDfY3AT6QgdQWcs7X5OMV7pM8mzoRtLNruZNgiOg0fDpwv4woR Q7neglc3tqJpvEYff8ypEdEK2dHZXP7oS/WFHnWCCONuPBegMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIWs1ksgFmT1Bv7RRIT/TUgboV9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJk MzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0OGZmYjMvODhkMjE4YWItOWMyMi0z NTNkLWEyMWQtYTBjZjJhZjhkYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDViZDM1NzgtM2MwOC00NGQxLTk5 ZTItODA4N2ZjNDhmZmIzL2Q1YmQzNTc4LTNjMDgtNDRkMS05OWUyLTgwODdmYzQ4 ZmZiMy5jcmwwHwYDVR0jBBgwFoAUk0YLtXT2oJxx8LF9nO1+zQXaB+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3 ZmM0OGZmYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5zQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWLwRH3cuApeNa5PNMqiQ5codRQdzJ8q1g2P3RRCXhsCwlIJkJeVZ 3ChBxl3g5yh1UPb5JvVVBJlCEpBQcYdnxhtiT7i2q3hmKbFCHfKT3Jtw0P8bTEeQ RtiVqL2SYmZUZp9BDxlRHMsih3l+a/VxBoo2IFxQ9jHiop3Bao/PLElSp1XGUBFg XRsBk1sNNaPNmRGmzYloJqWTqJNCQl5SsG5AMNM5ibSzZY0nHLkvYryxHMN9WC6X OzFbWNCfHLj72t1BTazoZI+FRioY2FFTiTSCwLuk2lne1Z5tqQhz07Y/RZiyJtDq sAkMVKszq/I0kaNlhzh39EhKEOehktkcRg== -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:04 2025 by rpki-client