$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa File: 678b3993-91f5-38e4-8904-da250d8e607d.roa (raw, json) Hash identifier: yWPuqLNlTEt8DldfLVST1Kr3l+cJfe0AXtJ6ZkVBX5I= Subject key identifier: B4:62:36:08:ED:51:5D:94:A4:F0:60:46:F1:E6:65:E7:3C:BB:CC:4B Certificate issuer: /CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f Certificate serial: 010D0C9F4328584A698B14998A26BE07A47F9D00 Authority key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 46170 IP address blocks: 2602:f70c:66::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:14:99:8a:26:be:07:a4:7f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=b03e4398-76d7-46a9-83b7-f77f0dec1fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:c3:9b:a2:bf:d8:65:d3:f0:b7:2f:27:e9: 61:cd:e6:74:85:14:22:b3:49:97:de:73:95:cc:bd: 61:be:5e:2f:64:7d:bb:99:8d:56:ee:8a:2d:10:4e: 96:30:dd:b8:af:fb:62:1f:ad:d5:15:f7:55:48:9d: f0:7b:9f:3e:bb:52:e9:c5:ca:52:94:6a:ed:2e:ca: c6:e2:7d:f2:48:8f:ea:ce:96:fb:a2:f0:93:5d:5a: ab:5e:1b:d5:ec:65:e5:c9:69:1b:7e:b4:93:e9:f9: e0:e3:0f:06:03:86:fe:bb:a4:be:35:5b:90:ad:5d: 4a:e0:d3:9c:36:ec:0f:33:32:de:8f:97:b3:7e:7c: 94:e7:53:eb:31:69:ed:02:39:ba:cf:e6:66:c5:92: 30:3d:2d:8b:a2:6c:22:a3:62:a4:d4:cf:cd:5c:d5: 84:2e:87:b3:96:02:5e:a3:aa:b6:b8:45:c4:b3:48: 79:c4:85:fb:2a:c3:f4:6b:cb:d4:60:bf:7e:6b:25: c8:9d:f5:ad:7c:ed:83:b9:5a:cf:9d:8d:9f:92:d9: 4c:ff:67:2a:ea:c6:72:fb:33:ad:de:59:5b:b5:bf: 45:8c:d5:a7:81:4b:63:16:8f:2a:8c:97:1a:b2:33: 06:0f:28:fa:67:51:0e:c8:e9:b8:56:0f:8f:47:55: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:36:08:ED:51:5D:94:A4:F0:60:46:F1:E6:65:E7:3C:BB:CC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl X509v3 Authority Key Identifier: keyid:E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f70c:66::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:03:c6:b9:a3:d5:ba:cc:64:23:ab:57:3b:55:1f:70:0e: 9e:89:cf:87:6e:20:5b:a1:ee:59:66:43:f5:75:9b:8a:98:42: 4a:01:c9:f9:ca:d1:06:e0:be:2f:ef:e0:85:04:70:a2:46:7c: 5e:58:f1:8e:6e:4b:0d:e4:57:b3:30:14:21:d0:23:a7:b8:99: 27:4a:ad:97:3c:43:ce:66:19:97:88:3d:ad:4c:4d:a6:f1:32: 00:ba:6c:ed:c3:df:80:92:06:fe:21:57:2a:98:9e:f8:10:2c: b2:ab:57:af:ba:1b:21:7b:cc:ba:4d:4d:72:c8:5c:df:60:78: 37:bd:86:49:44:87:84:14:81:37:f3:8f:ff:67:b9:ac:cf:b9: d6:09:08:2d:ad:5d:6a:37:37:5d:1a:60:6f:5c:e5:1b:9f:4d: 84:56:42:ca:39:99:3b:98:b3:86:d8:0f:01:80:30:1c:64:80: ad:16:be:55:0c:ba:5c:1e:12:39:64:af:fc:6f:4a:53:3a:d2: 00:cd:58:77:81:2c:ef:5d:30:a5:c6:ed:74:fe:b9:bd:e6:6b: 6b:8e:32:f8:3a:56:ab:f3:7e:24:80:80:39:b9:31:3e:1c:e0: e4:85:8d:22:78:46:43:16:f2:82:82:ab:47:21:76:97:94:db: 23:18:7c:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEppixSZiia+B6R/nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUyYjdkYzQtMTg0NC00ZTcwLTk4OWItNWU0NDZmOGNj NzBmMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YjAzZTQzOTgtNzZkNy00NmE5LTgzYjctZjc3ZjBkZWMxZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlHDm6K/2GXT8LcvJ+lhzeZ0hRQis0mX3nOV zL1hvl4vZH27mY1W7ootEE6WMN24r/tiH63VFfdVSJ3we58+u1LpxcpSlGrtLsrG 4n3ySI/qzpb7ovCTXVqrXhvV7GXlyWkbfrST6fng4w8GA4b+u6S+NVuQrV1K4NOc NuwPMzLej5ezfnyU51PrMWntAjm6z+ZmxZIwPS2Lomwio2Kk1M/NXNWELoezlgJe o6q2uEXEs0h5xIX7KsP0a8vUYL9+ayXInfWtfO2DuVrPnY2fktlM/2cq6sZy+zOt 3llbtb9FjNWngUtjFo8qjJcasjMGDyj6Z1EOyOm4Vg+PR1XOWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLRiNgjtUV2UpPBgRvHmZec8u8xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ZTJi N2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0NmY4Y2M3MGYvNjc4YjM5OTMtOTFmNS0z OGU0LTg5MDQtZGEyNTBkOGU2MDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWUyYjdkYzQtMTg0NC00ZTcwLTk4 OWItNWU0NDZmOGNjNzBmLzllMmI3ZGM0LTE4NDQtNGU3MC05ODliLTVlNDQ2Zjhj YzcwZi5jcmwwHwYDVR0jBBgwFoAU59U8Yifdy4Nh1UDtLpLAVjhjpO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ZTJiN2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0 NmY4Y2M3MGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3DABm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvOA8a5o9W6zGQjq1c7VR9wDp6Jz4duIFuh7llmQ/V1m4qYQkoB yfnK0Qbgvi/v4IUEcKJGfF5Y8Y5uSw3kV7MwFCHQI6e4mSdKrZc8Q85mGZeIPa1M TabxMgC6bO3D34CSBv4hVyqYnvgQLLKrV6+6GyF7zLpNTXLIXN9geDe9hklEh4QU gTfzj/9nuazPudYJCC2tXWo3N10aYG9c5RufTYRWQso5mTuYs4bYDwGAMBxkgK0W vlUMulweEjlkr/xvSlM60gDNWHeBLO9dMKXG7XT+ub3ma2uOMvg6VqvzfiSAgDm5 MT4c4OSFjSJ4RkMW8oKCq0chdpeU2yMYfEM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:05 2025 by rpki-client