$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/ccaad4c1-6415-3430-a897-fda0c1beb929.roa File: ccaad4c1-6415-3430-a897-fda0c1beb929.roa (raw, json) Hash identifier: /oAWJQ+lDlw3/8plXkobQaK7cEsE0UGj1mF0i/4Bpd8= Subject key identifier: C8:70:4C:52:91:3D:4F:D9:46:18:A7:AC:71:47:33:C0:1F:D5:85:C5 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584ADA9BB41B2785E773A02FE480 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/ccaad4c1-6415-3430-a897-fda0c1beb929.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 0 IP address blocks: 2602:fd10:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b4:1b:27:85:e7:73:a0:2f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=ae8c9319-edf7-4dd5-9ac6-6ea302865b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:00:c4:da:fe:fe:a1:dd:59:b8:ee:88:d0: 05:16:33:9d:52:21:29:e5:e4:6e:c3:45:3f:1f:29: dc:df:c3:c4:01:2f:49:1d:5d:72:10:57:7e:89:3f: e3:f1:e4:6a:30:3d:0d:54:dd:65:3c:f1:f4:8d:b5: 69:94:21:2d:4a:61:19:9b:81:0a:80:53:bf:75:07: f3:0a:99:c0:be:53:d2:c5:5e:bd:80:47:b6:e4:ed: a0:49:0d:d9:00:0f:31:0e:db:6a:88:0f:1d:b0:af: fb:bc:6c:3a:59:bd:1d:e0:14:9c:9a:68:f6:a5:11: 5c:79:f7:03:f3:11:3f:f0:55:b3:de:a8:54:83:d5: 25:5a:09:45:99:04:4d:82:74:2b:12:7a:44:76:3a: 3f:a3:60:bc:34:7b:f1:cc:01:83:38:02:5a:6d:ff: b2:21:f7:6c:d9:93:aa:99:1b:72:de:4a:47:94:60: 2d:0a:c2:3e:eb:e6:b6:1f:99:30:1e:c4:e1:87:ee: 73:c9:9f:b9:7a:dd:21:18:85:42:cd:2f:95:aa:aa: 09:ba:92:20:11:b8:5d:c0:c9:5a:08:5c:b5:63:41: 27:ea:2b:15:4e:ce:51:b1:81:56:b2:96:37:c3:35: 44:98:95:d8:03:62:18:26:09:b7:63:65:87:9d:85: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:70:4C:52:91:3D:4F:D9:46:18:A7:AC:71:47:33:C0:1F:D5:85:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/ccaad4c1-6415-3430-a897-fda0c1beb929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd10:b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:83:7b:36:b4:20:40:3b:60:62:75:1f:28:2e:81:ec:e2:bd: 18:4f:96:38:84:a9:ea:ab:b8:31:59:b5:ed:15:ad:42:d7:cb: 3b:a4:f1:5b:ef:b4:13:6e:8f:7f:27:14:eb:61:60:bd:41:40: f9:ac:c1:79:48:35:8f:21:3e:97:7c:b7:64:51:74:ab:bf:f0: 32:13:f3:9f:d5:cc:e5:ce:48:4c:e4:66:ce:92:e2:f7:d7:ab: 88:ed:dd:fc:4f:9a:cf:42:6f:5b:4f:3c:23:95:1c:9b:81:c1: dd:cd:c7:84:26:26:21:b8:72:a9:78:15:8a:3e:1d:ce:c5:a9: 70:2b:f9:d4:c6:25:3c:ed:1d:a3:f2:30:0f:5e:8e:6c:c5:43: 3f:36:42:40:c8:c1:99:f2:39:d1:03:01:07:3e:7c:22:88:55: d9:09:e3:51:ce:74:fa:0b:3d:c0:b5:c2:24:6a:b5:3e:20:57: 07:b3:df:6d:fc:94:db:1b:f7:17:98:9e:eb:1f:e8:95:bb:f1: 9c:53:e9:a2:bf:92:00:68:6e:34:b5:79:ca:9e:68:52:a7:98: d1:f2:d2:31:90:a3:8d:59:7d:12:23:87:22:f1:e3:38:d5:19: ee:51:a1:d9:04:95:36:6a:49:b9:ec:4c:19:9a:55:b9:f8:85: 56:4f:fc:68 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEram7QbJ4Xnc6Av5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YWU4YzkzMTktZWRmNy00ZGQ1LTlhYzYtNmVhMzAyODY1YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv8AxNr+/qHdWbjuiNAFFjOdUiEp5eRuw0U/ Hync38PEAS9JHV1yEFd+iT/j8eRqMD0NVN1lPPH0jbVplCEtSmEZm4EKgFO/dQfz CpnAvlPSxV69gEe25O2gSQ3ZAA8xDttqiA8dsK/7vGw6Wb0d4BScmmj2pRFcefcD 8xE/8FWz3qhUg9UlWglFmQRNgnQrEnpEdjo/o2C8NHvxzAGDOAJabf+yIfds2ZOq mRty3kpHlGAtCsI+6+a2H5kwHsThh+5zyZ+5et0hGIVCzS+VqqoJupIgEbhdwMla CFy1Y0En6isVTs5RsYFWspY3wzVEmJXYA2IYJgm3Y2WHnYUVWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMhwTFKRPU/ZRhinrHFHM8Af1YXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvY2NhYWQ0YzEtNjQxNS0z NDMwLWE4OTctZmRhMGMxYmViOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiYN7NrQgQDtgYnUfKC6B7OK9GE+WOISp6qu4MVm17RWtQtfLO6Tx W++0E26PfycU62FgvUFA+azBeUg1jyE+l3y3ZFF0q7/wMhPzn9XM5c5ITORmzpLi 99eriO3d/E+az0JvW088I5Ucm4HB3c3HhCYmIbhyqXgVij4dzsWpcCv51MYlPO0d o/IwD16ObMVDPzZCQMjBmfI50QMBBz58IohV2QnjUc50+gs9wLXCJGq1PiBXB7Pf bfyU2xv3F5ie6x/olbvxnFPpor+SAGhuNLV5yp5oUqeY0fLSMZCjjVl9EiOHIvHj ONUZ7lGh2QSVNmpJuexMGZpVufiFVk/8aA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:39 2025 by rpki-client