$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa File: 716685f5-50d5-322d-a06f-c4dc39983e59.roa (raw, json) Hash identifier: 31nT7hgGyssrAkKcMYVst+nLyZwqoye89MMTw9JUFg0= Subject key identifier: F8:4C:A3:2D:6D:CE:39:CF:1A:63:41:7E:88:AA:D7:A0:DF:12:AF:62 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584A1B5FFCE0B69BFA5871714E80 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 13627 IP address blocks: 2602:fba3:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fc:e0:b6:9b:fa:58:71:71:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=4df827fd-51b9-46e4-b734-d4c957b79c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:89:f8:8a:12:bc:5e:6e:8f:7b:73:c5:b0: 35:93:b3:29:8f:5e:a2:2a:93:a7:52:ee:be:59:43: 62:df:c6:b3:6e:c2:9d:85:50:90:13:82:db:5e:8d: c0:6f:04:54:37:fa:e4:67:d7:64:06:de:82:e9:6f: 07:e8:42:bd:2a:92:55:4e:42:72:83:ac:37:30:8b: 93:47:93:e9:ae:f8:7c:c4:61:06:a2:02:33:55:92: a6:4b:12:9a:db:71:07:2b:16:e7:0a:e9:98:51:d5: 81:71:82:31:54:40:8f:50:d1:03:52:e2:1f:37:39: db:83:16:0d:6b:f2:e3:bb:18:4b:98:49:e8:4e:19: 4d:6d:c6:2f:34:cf:63:47:a5:53:cd:4b:16:69:8f: 3e:68:9c:ab:12:ab:86:bf:45:79:c9:3e:64:24:f0: 75:67:06:91:81:82:a3:95:61:d4:a8:4b:10:04:d7: b0:be:e5:d1:da:c8:b8:93:14:86:88:b1:7d:dc:dd: 59:69:44:5d:87:d7:7c:31:87:7d:a8:86:1a:d6:01: bc:47:bc:57:e3:0f:0f:03:25:4f:7a:c2:89:a3:30: 56:b7:a3:da:fe:e6:c6:40:59:a8:1b:14:1d:c9:f0: ff:05:97:9e:84:fb:02:ae:42:6d:b9:25:0c:1e:37: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:A3:2D:6D:CE:39:CF:1A:63:41:7E:88:AA:D7:A0:DF:12:AF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv6: 2602:fba3:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:db:da:46:c0:a4:2b:f1:ea:43:99:74:54:b0:c0:8e:9e:f8: d3:6b:00:79:82:0e:13:8a:52:81:dd:9d:22:5b:29:f7:96:92: 17:ef:04:a7:3f:1f:5b:d1:e8:a0:f9:41:4a:f4:c9:2d:38:ac: 9e:53:c8:d8:59:e9:01:7e:e8:f1:19:66:1c:4a:49:2c:ce:4b: 07:84:36:50:db:76:83:0d:4f:1b:7b:da:bf:b0:15:55:1e:33: e6:b1:8a:33:8c:ce:3c:c6:06:9b:00:3e:82:6c:a6:d2:df:dd: 53:2c:5d:d4:fb:29:66:32:0a:d5:a9:6f:70:8e:b4:60:d1:f4: 4f:a8:f6:88:39:c4:ae:c1:0b:bc:9b:7a:1b:c3:fb:dc:08:4c: e5:8e:8d:e7:6f:1e:fc:f7:3c:d9:9b:92:77:08:ba:27:76:77: 38:a9:d5:1d:e4:84:6f:10:24:40:ed:6f:41:e7:ba:bd:cc:42: 54:ed:61:b0:20:f0:21:9c:a0:0f:a0:c8:66:a2:d8:ed:23:86: f9:5f:39:f8:06:13:3b:82:35:6e:d9:a3:80:02:ad:0e:a9:19: 5c:2e:69:e5:93:f8:fa:bb:03:a1:57:9c:5b:91:39:c4:b9:fa: b8:1b:6f:08:9c:97:25:f3:b3:28:f5:d9:01:4b:52:7b:17:3c: 95:aa:2d:3c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEobX/zgtpv6WHFxToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NGRmODI3ZmQtNTFiOS00NmU0LWI3MzQtZDRjOTU3Yjc5YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSOJ+IoSvF5uj3tzxbA1k7Mpj16iKpOnUu6+ WUNi38azbsKdhVCQE4LbXo3AbwRUN/rkZ9dkBt6C6W8H6EK9KpJVTkJyg6w3MIuT R5Pprvh8xGEGogIzVZKmSxKa23EHKxbnCumYUdWBcYIxVECPUNEDUuIfNznbgxYN a/LjuxhLmEnoThlNbcYvNM9jR6VTzUsWaY8+aJyrEquGv0V5yT5kJPB1ZwaRgYKj lWHUqEsQBNewvuXR2si4kxSGiLF93N1ZaURdh9d8MYd9qIYa1gG8R7xX4w8PAyVP esKJozBWt6Pa/ubGQFmoGxQdyfD/BZeehPsCrkJtuSUMHjevwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPhMoy1tzjnPGmNBfoiq16DfEq9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNzE2Njg1ZjUtNTBkNS0z MjJkLWEwNmYtYzRkYzM5OTgzZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7owIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARNvaRsCkK/HqQ5l0VLDAjp7402sAeYIOE4pSgd2dIlsp95aSF+8E pz8fW9HooPlBSvTJLTisnlPI2FnpAX7o8RlmHEpJLM5LB4Q2UNt2gw1PG3vav7AV VR4z5rGKM4zOPMYGmwA+gmym0t/dUyxd1PspZjIK1alvcI60YNH0T6j2iDnErsEL vJt6G8P73AhM5Y6N528e/Pc82ZuSdwi6J3Z3OKnVHeSEbxAkQO1vQee6vcxCVO1h sCDwIZygD6DIZqLY7SOG+V85+AYTO4I1btmjgAKtDqkZXC5p5ZP4+rsDoVecW5E5 xLn6uBtvCJyXJfOzKPXZAUtSexc8laotPA== -----END CERTIFICATE-----Generated at Tue Jul 1 00:53:10 2025 by rpki-client