$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa File: 1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa (raw, json) Hash identifier: UO9PlismpoyvM/36ezm5lGXI0xoVA2h/HyXdIK/Y4fc= Subject key identifier: 62:45:47:B0:2A:A6:84:D9:BD:F5:1D:7D:AF:7E:05:F6:AC:51:A5:F5 Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F4328584AA590F36C2F695EAED7F5AD40 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 400402 IP address blocks: 2602:fa8a:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f3:6c:2f:69:5e:ae:d7:f5:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=2743284f-bd45-42f9-bda9-ff29992e1033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:21:3b:2b:b2:da:06:e5:39:c0:17:eb:89: 7c:97:7d:d6:39:9f:68:73:da:d3:3a:a4:91:1a:39: ac:e4:22:52:de:42:1e:42:96:70:ab:02:75:41:23: 43:4d:1c:28:46:10:5d:1d:65:cb:c3:da:58:40:f5: 90:40:3f:dd:2c:e1:09:81:0c:c1:46:23:f4:10:0f: f7:b0:cd:3c:a5:43:15:dd:c9:52:37:93:59:3e:fe: dd:f2:b2:ac:f3:ab:6f:2d:a2:a0:b2:f2:31:84:aa: 64:85:86:19:ee:0f:94:ef:0c:a4:b0:e2:9e:0f:af: 0a:cc:e2:9c:14:e7:60:13:93:66:87:c4:00:bb:1c: 5e:3d:e9:ee:8d:da:40:21:c7:1c:e9:e4:6d:1a:5d: d7:2c:89:ee:b8:ec:e3:a1:5f:51:34:38:c7:5e:c2: 76:fd:70:b3:46:73:c4:08:59:41:dd:73:e9:cb:ad: 5b:f3:4d:38:b9:71:8c:06:fb:5a:a2:a8:79:b5:b5: a3:02:22:bf:f5:64:ad:be:78:5c:f5:f7:09:ea:30: 85:0f:f0:b7:8b:f1:ff:1c:60:01:50:56:63:ce:91: b2:93:ac:14:e1:b9:ec:29:a1:82:fd:23:6e:4b:c6: db:67:8a:7b:31:c6:8c:b6:40:8e:fe:11:f4:da:a8: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:45:47:B0:2A:A6:84:D9:BD:F5:1D:7D:AF:7E:05:F6:AC:51:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa8a:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:83:32:05:5e:b4:93:63:f1:d5:0d:be:95:ee:21:2b:ce:f4: 20:ef:80:2c:fe:da:0d:05:b1:f4:ff:76:07:90:e1:50:27:ad: 56:bb:2d:a3:3f:29:d8:38:26:e6:ee:41:c3:56:28:8b:e8:d9: 3f:81:26:68:24:5f:0b:60:21:ea:ab:90:17:70:23:e1:b1:24: cb:5e:42:e9:7f:e5:ba:30:a1:e7:6f:c9:7b:53:46:ed:ce:52: ec:78:6f:ba:61:cf:bd:fe:37:be:bd:67:0b:e0:fb:51:e8:8b: 82:b1:28:ee:17:38:e5:5c:21:4e:35:73:5d:47:30:c7:2b:55: 77:31:8e:34:6a:a1:3f:de:a9:5d:60:07:f5:08:f0:c1:42:10: 06:69:31:12:aa:30:69:91:f0:09:f2:20:ce:d5:a5:a5:fe:21: 2e:8c:65:37:96:05:1e:1b:b4:0c:66:f7:a1:b7:3c:b2:11:69: 0e:8e:a5:57:27:7b:f2:d6:4e:a6:d2:10:69:b5:51:41:c1:69: 40:4b:7c:13:71:c0:30:04:cc:d6:6d:7f:dc:57:d2:e8:59:df: f5:0f:51:11:82:73:7f:82:48:59:5a:72:04:e0:ce:1d:2d:64: 36:3d:cd:9b:04:e4:37:94:19:b6:0b:13:35:f9:0b:1b:ad:d7: 86:68:8e:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqlkPNsL2lertf1rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk Mjc0MzI4NGYtYmQ0NS00MmY5LWJkYTktZmYyOTk5MmUxMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd4hOyuy2gblOcAX64l8l33WOZ9oc9rTOqSR Gjms5CJS3kIeQpZwqwJ1QSNDTRwoRhBdHWXLw9pYQPWQQD/dLOEJgQzBRiP0EA/3 sM08pUMV3clSN5NZPv7d8rKs86tvLaKgsvIxhKpkhYYZ7g+U7wyksOKeD68KzOKc FOdgE5Nmh8QAuxxePenujdpAIccc6eRtGl3XLInuuOzjoV9RNDjHXsJ2/XCzRnPE CFlB3XPpy61b8004uXGMBvtaoqh5tbWjAiK/9WStvnhc9fcJ6jCFD/C3i/H/HGAB UFZjzpGyk6wU4bnsKaGC/SNuS8bbZ4p7McaMtkCO/hH02qjlqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJFR7AqpoTZvfUdfa9+BfasUaX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvMWIwMGQ5ODAtY2M4NS0z YTMzLThiOWYtMWY0MDAxYWVjNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6igAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKDMgVetJNj8dUNvpXuISvO9CDvgCz+2g0FsfT/dgeQ4VAnrVa7 LaM/Kdg4JubuQcNWKIvo2T+BJmgkXwtgIeqrkBdwI+GxJMteQul/5bowoedvyXtT Ru3OUux4b7phz73+N769Zwvg+1Hoi4KxKO4XOOVcIU41c11HMMcrVXcxjjRqoT/e qV1gB/UI8MFCEAZpMRKqMGmR8AnyIM7VpaX+IS6MZTeWBR4btAxm96G3PLIRaQ6O pVcne/LWTqbSEGm1UUHBaUBLfBNxwDAEzNZtf9xX0uhZ3/UPURGCc3+CSFlacgTg zh0tZDY9zZsE5DeUGbYLEzX5Cxut14ZojrQ= -----END CERTIFICATE-----Generated at Tue Aug 5 16:52:12 2025 by rpki-client