$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa File: f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa (raw, json) Hash identifier: KrNoRhXfXTn15Q1Dp9pKfzanDMp/psI1rKU1fW39J2Q= Subject key identifier: E3:E3:CA:03:A7:8B:24:1C:CE:26:AE:27:35:D5:4C:08:6B:76:45:AF Certificate issuer: /CN=e0222b33-d953-40bd-9e16-838d515a3e80 Certificate serial: 010D0C9F4328584AA42B7E1B1E990B09321A7A80 Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 30708 IP address blocks: 2607:f618::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7e:1b:1e:99:0b:09:32:1a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=1e779d92-a4ef-462f-86b7-8f062d791631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:0f:23:ef:2b:9a:ab:ed:0c:39:f4:96:f9: bc:24:a3:8c:64:8d:c6:82:cb:b8:70:f4:e5:1e:a3: fe:91:fe:9b:aa:26:04:5b:67:c6:db:84:ea:5c:47: 78:07:b2:03:aa:40:c1:fd:55:3c:77:02:f4:8c:9f: a4:34:4c:af:41:a4:88:f7:66:28:9b:03:2d:74:23: 29:f6:e5:90:10:5d:ad:a6:78:af:65:2c:ae:d1:7b: 12:97:c5:43:84:51:b5:ed:8f:ac:24:b9:4f:ea:e0: cf:c6:6a:e5:b2:8b:f9:96:2b:9a:08:ff:68:74:12: 91:78:9e:4f:0e:4d:47:a4:99:42:cf:23:8d:4e:45: 0c:70:ce:7f:ea:a2:f9:b9:5d:5c:7b:2b:ce:39:5f: e4:06:5a:05:99:d6:18:c1:4c:be:28:6d:10:9d:7c: 87:7c:f6:fa:ba:3d:0a:88:6d:3c:01:bd:50:de:84: cb:5a:4f:1c:b2:87:93:92:79:7b:8c:4d:1c:16:6e: df:f5:bd:0e:5d:e4:f7:13:7f:49:8a:9d:20:f4:9f: 3e:a3:e4:8b:16:7b:ac:82:e4:5d:de:20:3b:0e:eb: be:60:df:c1:0e:f8:8a:c0:ab:62:da:c2:f6:1a:3f: 8b:6e:92:1f:82:1f:69:d0:ab:4c:9a:70:64:00:5a: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E3:CA:03:A7:8B:24:1C:CE:26:AE:27:35:D5:4C:08:6B:76:45:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl X509v3 Authority Key Identifier: keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer sbgp-ipAddrBlock: critical IPv6: 2607:f618::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:81:36:0f:68:64:ff:1c:8c:f4:42:76:5a:a6:e6:53:e1:76: 75:3d:93:95:9b:12:91:6b:16:a3:87:fc:6a:11:94:66:07:03: aa:d7:8d:c9:4a:02:10:3e:87:54:14:00:1b:3f:fe:f6:da:fb: 7c:be:67:fe:63:b5:14:c9:60:e8:52:64:60:ee:59:ea:6a:33: 56:25:69:12:6e:44:cb:24:5a:77:d6:6a:28:85:06:10:b1:58: 3f:38:a5:75:79:5c:cc:81:3f:67:b8:6e:f1:f1:8a:c9:34:26: d7:e1:a4:7e:37:4d:d8:05:e5:e3:06:61:eb:55:12:05:4a:1f: 06:d5:3f:a1:6c:0b:a0:70:28:f7:d3:94:21:83:2f:f8:50:be: 60:d7:7e:ef:06:2f:d8:34:d0:fe:e9:30:b9:5f:e3:e5:28:c2: 85:b5:37:6c:22:f5:6b:1b:a3:68:11:ea:35:dc:cf:92:cf:75: fa:ab:af:f3:e6:a2:62:74:fd:c6:24:30:fa:9c:79:b7:c8:8f: 86:45:3c:0f:95:98:7d:ad:25:ec:b9:54:37:ea:13:53:bb:d6: 14:3c:93:5b:7e:26:5d:64:1a:29:c3:6d:c1:a7:3f:4f:0d:d1: 7e:0d:2b:88:1e:11:24:8b:ae:8e:2e:1a:a1:ef:b4:3d:78:f2: f6:12:d3:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqkK34bHpkLCTIaeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyMjJiMzMtZDk1My00MGJkLTllMTYtODM4ZDUxNWEz ZTgwMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MWU3NzlkOTItYTRlZi00NjJmLTg2YjctOGYwNjJkNzkxNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsAPI+8rmqvtDDn0lvm8JKOMZI3Ggsu4cPTl HqP+kf6bqiYEW2fG24TqXEd4B7IDqkDB/VU8dwL0jJ+kNEyvQaSI92YomwMtdCMp 9uWQEF2tpnivZSyu0XsSl8VDhFG17Y+sJLlP6uDPxmrlsov5liuaCP9odBKReJ5P Dk1HpJlCzyONTkUMcM5/6qL5uV1ceyvOOV/kBloFmdYYwUy+KG0QnXyHfPb6uj0K iG08Ab1Q3oTLWk8csoeTknl7jE0cFm7f9b0OXeT3E39Jip0g9J8+o+SLFnusguRd 3iA7Duu+YN/BDviKwKti2sL2Gj+LbpIfgh9p0KtMmnBkAFp7jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOPjygOniyQcziauJzXVTAhrdkWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIy MmIzMy1kOTUzLTQwYmQtOWUxNi04MzhkNTE1YTNlODAvZjUwMmIzOWItMTRhOS0z NjcyLTlkMmEtYzhhYTg2ZGZiNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTAyMjJiMzMtZDk1My00MGJkLTll MTYtODM4ZDUxNWEzZTgwL2UwMjIyYjMzLWQ5NTMtNDBiZC05ZTE2LTgzOGQ1MTVh M2U4MC5jcmwwHwYDVR0jBBgwFoAUU+sTaTvXHkWKe4HffPv01GMjHOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIyMmIzMy1kOTUzLTQwYmQtOWUxNi04Mzhk NTE1YTNlODAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2GDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMgTYPaGT/HIz0QnZapuZT4XZ1PZOVmxKRaxajh/xqEZRmBwOq143J SgIQPodUFAAbP/722vt8vmf+Y7UUyWDoUmRg7lnqajNWJWkSbkTLJFp31moohQYQ sVg/OKV1eVzMgT9nuG7x8YrJNCbX4aR+N03YBeXjBmHrVRIFSh8G1T+hbAugcCj3 05Qhgy/4UL5g137vBi/YNND+6TC5X+PlKMKFtTdsIvVrG6NoEeo13M+Sz3X6q6/z 5qJidP3GJDD6nHm3yI+GRTwPlZh9rSXsuVQ36hNTu9YUPJNbfiZdZBopw23Bpz9P DdF+DSuIHhEki66OLhqh77Q9ePL2EtMg -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:50 2025 by rpki-client