$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa File: 2963c665-992a-3711-97c8-3b7592a72c41.roa (raw, json) Hash identifier: vAO/PIi2oIjR/wpUVkWBVm1zjcoTUKIT5fXN5xfKQ6k= Subject key identifier: D2:27:A3:B1:78:53:47:F2:8A:30:92:70:90:96:05:31:49:AA:57:BF Certificate issuer: /CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Certificate serial: 010D0C9F4328584A612B16F65A1CB7278DF94E40 Authority key identifier: D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 397735 IP address blocks: 2606:37c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:16:f6:5a:1c:b7:27:8d:f9:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=a5865bce-634f-4f9c-a805-2e746c7e69ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f3:1e:85:92:59:87:0d:84:0a:79:fa:e2:90: 11:e3:06:25:a9:95:b9:9b:2e:51:18:87:9d:f3:91: 4b:13:69:26:9a:6d:06:99:56:35:ce:a5:d0:e7:52: 2e:20:aa:57:9b:9b:42:8d:cb:58:f7:f5:b4:b6:24: 1a:a0:db:a0:a7:e7:0c:79:eb:d2:97:66:98:6e:f9: c6:c8:25:f8:a0:cd:35:b4:a3:61:a7:0e:a2:bf:98: f9:f4:d6:99:55:c0:8a:6b:63:af:dc:32:0f:c4:ae: 34:2d:e0:58:dd:d2:29:5f:c1:35:42:02:79:d4:66: f4:a3:cd:df:45:a6:7a:4e:a1:b6:87:1a:4f:2c:c9: b0:17:2b:d7:ce:3e:15:c4:2c:58:38:54:dc:05:3b: b5:9a:4e:37:ee:a3:fb:43:8c:35:e9:27:2f:fd:a1: f2:f1:45:94:80:c7:2b:0d:e6:a6:f6:e7:e7:68:ac: 4c:43:ea:60:4f:7b:8a:30:3f:e7:d2:35:ef:06:e2: 7f:f1:b4:60:63:c0:e7:00:30:e4:eb:d8:a8:ad:f5: aa:0e:8a:c2:da:ee:3f:5f:95:ea:af:f6:7e:af:e6: 3e:0d:66:56:cb:e5:10:58:5b:74:38:da:ad:d1:62: 0c:ef:f8:37:e2:73:0b:5b:2d:e0:ad:1c:b0:e8:e2: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:A3:B1:78:53:47:F2:8A:30:92:70:90:96:05:31:49:AA:57:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl X509v3 Authority Key Identifier: keyid:D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer sbgp-ipAddrBlock: critical IPv6: 2606:37c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:90:82:12:33:bd:c2:b7:34:14:2c:c2:dc:5e:cc:c6:9f:7e: ed:57:8f:0b:b7:7e:57:a4:56:2f:3b:c8:ee:90:91:55:36:cc: 96:58:d8:87:95:d6:bf:4a:ca:8d:11:14:c9:7d:22:e9:e6:a1: 74:f5:1d:9b:e6:08:00:fd:7c:8c:91:de:34:25:48:f2:e8:81: 05:b3:f2:ac:8a:1a:ec:2f:41:ff:da:cf:c8:86:de:da:99:dc: b6:e5:ee:23:bc:26:ca:66:8d:a1:e0:47:87:7c:dc:ac:da:78: 03:ea:ac:13:63:61:42:c3:8a:76:a9:9e:c3:45:a6:9c:bf:23: f8:93:a0:02:40:71:2a:90:d3:b5:46:3b:7a:4e:0c:5c:15:be: 84:45:b5:e6:61:cc:88:b0:04:4c:f1:d6:c4:a3:73:4f:f6:6a: 49:d0:81:ca:7e:ef:60:41:8e:39:0a:f7:35:22:ec:e1:b4:96: cb:db:74:13:22:3a:13:73:ac:82:30:de:e3:9f:02:06:63:67: d9:ae:08:4f:d4:59:9e:52:a7:7f:ce:92:09:47:ff:14:04:31: df:f4:6f:2e:60:74:f5:4c:cf:a7:d8:b2:59:27:7d:4d:71:92: 75:b8:40:b6:4a:02:4c:9d:98:74:9b:96:fc:51:1e:57:bd:9a: d8:75:61:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEphKxb2Why3J435TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM0OGNkMjUtYzUyOS00NGE5LWE3YWUtZjNlNGJmNzJk OWI0MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YTU4NjViY2UtNjM0Zi00ZjljLWE4MDUtMmU3NDZjN2U2OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfMehZJZhw2ECnn64pAR4wYlqZW5my5RGIed 85FLE2kmmm0GmVY1zqXQ51IuIKpXm5tCjctY9/W0tiQaoNugp+cMeevSl2aYbvnG yCX4oM01tKNhpw6iv5j59NaZVcCKa2Ov3DIPxK40LeBY3dIpX8E1QgJ51Gb0o83f RaZ6TqG2hxpPLMmwFyvXzj4VxCxYOFTcBTu1mk437qP7Q4w16Scv/aHy8UWUgMcr Deam9ufnaKxMQ+pgT3uKMD/n0jXvBuJ/8bRgY8DnADDk69iorfWqDorC2u4/X5Xq r/Z+r+Y+DWZWy+UQWFt0ONqt0WIM7/g34nMLWy3grRyw6OKlDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNIno7F4U0fyijCScJCWBTFJqle/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4 Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0YmY3MmQ5YjQvMjk2M2M2NjUtOTkyYS0z NzExLTk3YzgtM2I3NTkyYTcyYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWM0OGNkMjUtYzUyOS00NGE5LWE3 YWUtZjNlNGJmNzJkOWI0LzljNDhjZDI1LWM1MjktNDRhOS1hN2FlLWYzZTRiZjcy ZDliNC5jcmwwHwYDVR0jBBgwFoAU2ASZw13m/Q/BTH9pQw3mBWR9+DswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0 YmY3MmQ5YjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOkIISM73CtzQULMLcXszGn37tV48Lt35XpFYvO8jukJFVNsyWWNiH lda/SsqNERTJfSLp5qF09R2b5ggA/XyMkd40JUjy6IEFs/KsihrsL0H/2s/Iht7a mdy25e4jvCbKZo2h4EeHfNys2ngD6qwTY2FCw4p2qZ7DRaacvyP4k6ACQHEqkNO1 Rjt6TgxcFb6ERbXmYcyIsARM8dbEo3NP9mpJ0IHKfu9gQY45Cvc1IuzhtJbL23QT IjoTc6yCMN7jnwIGY2fZrghP1FmeUqd/zpIJR/8UBDHf9G8uYHT1TM+n2LJZJ31N cZJ1uEC2SgJMnZh0m5b8UR5XvZrYdWE8 -----END CERTIFICATE-----Generated at Mon Aug 4 18:55:11 2025 by rpki-client