$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa File: 678c9af5-e375-344d-99f6-39e192dcba5d.roa (raw, json) Hash identifier: NnO0j5PjKDxx+zWpeqx+rIGmVPZAbU4pRHApyFzYxz8= Subject key identifier: 54:3B:67:7C:18:5D:47:B3:43:A7:60:A9:A0:3B:35:5E:10:58:69:97 Certificate issuer: /CN=e95630a3-5da1-408c-891c-268d2b4791c7 Certificate serial: 010D0C9F4328584A9EEA8D694E7608AAAF27B780 Authority key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa Signing time: Thu 24 Jul 2025 03:51:05 +0000 ROA not before: Thu 24 Jul 2025 03:51:05 +0000 ROA not after: Wed 22 Oct 2025 03:51:05 +0000 asID: 401380 IP address blocks: 2602:f7e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:ea:8d:69:4e:76:08:aa:af:27:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95630a3-5da1-408c-891c-268d2b4791c7 Validity Not Before: Jul 24 03:51:05 2025 GMT Not After : Oct 22 03:51:05 2025 GMT Subject: CN=274eee5f-558b-4f93-8e42-100ec7f4207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:5b:6f:cc:75:67:58:fc:65:f2:b6:79:62: 6d:98:93:75:84:55:5e:a5:7a:3c:9f:f3:69:b8:ae: 16:ea:c8:23:e7:9d:04:a4:e0:42:0b:31:0f:6e:3d: a2:5a:86:24:93:71:a7:a5:e2:f0:37:a9:5e:f1:9c: 18:8c:03:01:33:03:45:06:2c:96:65:6a:0e:c9:65: f7:9b:c8:79:99:b9:53:3b:89:07:a6:1b:d9:e4:13: 47:2f:5e:ad:25:07:71:57:0f:6e:02:68:d9:c8:fb: 84:ac:e6:ed:a0:de:87:91:ff:41:29:13:a4:63:ec: a3:b2:05:be:62:0a:71:44:df:84:0d:7d:3f:2f:a8: c8:8f:16:6f:b4:c5:71:d6:84:7c:db:47:e9:22:00: e5:21:6f:94:bd:87:81:2e:e8:4b:0d:11:d1:75:38: e4:d6:f9:c8:a4:ab:2d:b4:ca:80:61:13:cc:d9:f8: c4:55:d2:1e:23:38:48:69:f2:d0:48:40:62:11:c2: 10:a8:86:8a:d3:c1:bd:4f:a1:e7:bd:49:22:18:1d: c9:50:7f:6e:a6:64:fc:b5:e9:52:4f:ac:2b:cc:fe: ec:22:88:4b:2e:4d:bd:8a:5b:d9:62:c6:ac:f9:3c: 7f:8b:6d:af:a4:56:1c:2d:84:82:c5:65:f0:a8:3e: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:67:7C:18:5D:47:B3:43:A7:60:A9:A0:3B:35:5E:10:58:69:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl X509v3 Authority Key Identifier: keyid:16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7e2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f3:1c:06:9e:31:55:3d:48:c0:fe:b7:62:af:4a:33:a9:75: b4:30:62:c2:7f:11:d2:88:e0:be:f5:e4:6f:95:95:78:2f:4b: 13:d3:3c:8d:ec:b6:e1:06:bf:03:13:8f:e5:d0:b7:37:1d:d9: a9:5d:20:8f:6b:3e:aa:9f:82:5d:98:32:e2:91:ba:5e:7f:18: 18:6d:9b:0e:9c:8e:b8:41:b2:f1:4b:ce:a9:25:46:c3:94:6e: 90:35:ed:59:30:db:27:c1:cf:25:8b:90:6d:39:78:8e:68:8f: ae:d8:f0:97:fe:e0:31:b7:ec:cb:6a:2c:21:6b:b9:d1:10:39: 2b:03:2a:1e:89:49:11:87:81:99:94:b9:dd:85:78:17:0c:4e: 2d:20:70:e0:1f:dc:ce:19:23:8e:47:86:51:fe:58:53:03:73: e8:1c:64:7a:13:7e:b3:a2:28:f4:ba:ef:53:53:0d:c1:12:d6: 00:97:97:58:76:24:a5:b6:69:10:c5:7a:35:a7:2e:c2:8b:bf: ed:16:87:0d:d6:b5:91:25:ba:19:da:cb:f3:28:17:02:14:a0: 01:f2:aa:55:0a:30:36:89:c3:d0:43:62:2f:8e:a2:b7:ab:46: fe:8f:c0:e2:93:0d:30:2a:01:29:27:7c:b0:bc:b9:4b:1b:de: f8:71:96:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqe6o1pTnYIqq8nt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk1NjMwYTMtNWRhMS00MDhjLTg5MWMtMjY4ZDJiNDc5 MWM3MB4XDTI1MDcyNDAzNTEwNVoXDTI1MTAyMjAzNTEwNVowLzEtMCsGA1UEAxMk Mjc0ZWVlNWYtNTU4Yi00ZjkzLThlNDItMTAwZWM3ZjQyMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBlbb8x1Z1j8ZfK2eWJtmJN1hFVepXo8n/Np uK4W6sgj550EpOBCCzEPbj2iWoYkk3GnpeLwN6le8ZwYjAMBMwNFBiyWZWoOyWX3 m8h5mblTO4kHphvZ5BNHL16tJQdxVw9uAmjZyPuErObtoN6Hkf9BKROkY+yjsgW+ YgpxRN+EDX0/L6jIjxZvtMVx1oR820fpIgDlIW+UvYeBLuhLDRHRdTjk1vnIpKst tMqAYRPM2fjEVdIeIzhIafLQSEBiEcIQqIaK08G9T6HnvUkiGB3JUH9upmT8telS T6wrzP7sIohLLk29ilvZYsas+Tx/i22vpFYcLYSCxWXwqD59PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQ7Z3wYXUezQ6dgqaA7NV4QWGmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTU2 MzBhMy01ZGExLTQwOGMtODkxYy0yNjhkMmI0NzkxYzcvNjc4YzlhZjUtZTM3NS0z NDRkLTk5ZjYtMzllMTkyZGNiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk1NjMwYTMtNWRhMS00MDhjLTg5 MWMtMjY4ZDJiNDc5MWM3L2U5NTYzMGEzLTVkYTEtNDA4Yy04OTFjLTI2OGQyYjQ3 OTFjNy5jcmwwHwYDVR0jBBgwFoAUFs/ax6JzM7jNId1jHZVdInRJc3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTU2MzBhMy01ZGExLTQwOGMtODkxYy0yNjhk MmI0NzkxYzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL34gAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/zHAaeMVU9SMD+t2KvSjOpdbQwYsJ/EdKI4L715G+VlXgvSxPT PI3stuEGvwMTj+XQtzcd2aldII9rPqqfgl2YMuKRul5/GBhtmw6cjrhBsvFLzqkl RsOUbpA17Vkw2yfBzyWLkG05eI5oj67Y8Jf+4DG37MtqLCFrudEQOSsDKh6JSRGH gZmUud2FeBcMTi0gcOAf3M4ZI45HhlH+WFMDc+gcZHoTfrOiKPS671NTDcES1gCX l1h2JKW2aRDFejWnLsKLv+0Whw3WtZEluhnay/MoFwIUoAHyqlUKMDaJw9BDYi+O orerRv6PwOKTDTAqASknfLC8uUsb3vhxlgg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:03 2025 by rpki-client