$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa File: 2cc6c38a-68cb-3c34-9564-f77e506f710d.roa (raw, json) Hash identifier: rOJTCUoU5l8fbUqBj2yR1smDBmy7hcjkJ2trbzLwW8o= Subject key identifier: 21:87:23:23:0F:10:0B:12:E6:F7:22:85:43:32:60:54:5C:B8:26:CC Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584A5335B5065D6FAFC33A593480 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 395494 IP address blocks: 2605:2cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:b5:06:5d:6f:af:c3:3a:59:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=6780e2e3-5006-4b4d-8914-d3269a056c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:be:bb:f6:43:57:7b:c8:f6:1c:f2:31:0e: 15:5e:8b:da:83:d6:99:6d:99:5c:35:8b:9f:ad:8a: e6:07:7f:ea:f0:b5:91:23:58:5c:2a:ff:cd:a4:a6: 1f:37:61:d3:df:3e:2a:38:66:06:b3:68:27:0c:4b: b5:d1:4d:e7:42:c6:54:4e:28:5b:6f:0d:6f:26:e9: d2:93:8d:15:be:34:72:ea:68:df:2c:05:08:6a:0e: a4:2e:25:cc:1f:a3:1a:3e:25:65:94:9f:e1:f2:6c: b1:90:18:fb:23:29:8c:68:b7:82:4d:9a:56:d8:ca: 57:d6:a0:55:dc:d3:80:55:12:43:59:21:ef:25:1a: 18:55:bf:a1:97:dd:9f:95:fb:a6:50:27:7e:ab:dd: f7:f2:ca:d0:b2:62:c6:8c:30:11:f5:09:87:ed:d8: 9c:c0:3f:41:40:e2:f3:3e:4a:d8:60:30:97:67:5a: ea:ee:00:56:28:f8:db:25:a4:91:88:b8:dd:f6:5f: 28:4e:e8:48:bb:fc:9c:70:63:c6:bf:55:29:d2:9e: c1:81:43:23:f0:ed:78:8b:50:7f:be:e2:18:8e:87: 11:8f:f5:98:31:55:37:93:a5:84:be:f5:ab:ce:8e: 40:4d:bf:2a:62:60:eb:fd:09:b7:91:9b:b2:2f:67: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:23:23:0F:10:0B:12:E6:F7:22:85:43:32:60:54:5C:B8:26:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv6: 2605:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5c:bb:97:de:1a:c6:10:8f:24:14:dd:7a:1e:d0:f8:d6:d8: 32:16:56:f5:49:92:a6:52:35:a5:05:66:62:74:fd:ea:83:76: 46:5d:5d:a1:81:58:1d:7e:5b:0a:2c:7a:6c:68:82:05:93:76: fa:dc:c3:4a:52:1e:45:2c:9d:6e:dd:ae:9c:5e:5d:7a:5c:d8: 7a:1d:36:89:a2:20:26:44:34:a9:b4:3c:4c:54:2a:97:ac:8e: da:03:84:b0:13:a8:12:0e:ac:ad:59:36:2c:40:cc:22:58:45: 33:61:d8:9c:53:4c:30:2b:57:3a:4b:ed:56:05:46:a9:91:e6: ef:67:40:35:99:71:e7:6b:28:cc:47:34:ac:76:d6:a7:07:0b: 27:33:66:5c:c1:25:48:9a:c5:1b:f4:6e:aa:50:74:f9:1d:13: 63:67:24:1f:16:cf:95:07:8f:03:e3:c1:e5:1d:e1:89:78:dc: 3b:08:fb:ca:14:f9:d8:72:4c:2e:e6:0d:44:d1:4d:b7:a5:11: ae:b8:ec:43:bf:40:75:30:ca:39:13:fc:c0:44:30:5d:03:1c: 83:a2:4c:09:c0:b6:3a:ef:94:e7:7d:aa:d2:7b:96:6b:48:c2: a1:99:87:24:e8:53:b3:0f:56:0c:a2:1d:24:3e:ac:dd:d2:8c: 0d:1a:1b:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNbUGXW+vwzpZNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk Njc4MGUyZTMtNTAwNi00YjRkLTg5MTQtZDMyNjlhMDU2YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWW+u/ZDV3vI9hzyMQ4VXovag9aZbZlcNYuf rYrmB3/q8LWRI1hcKv/NpKYfN2HT3z4qOGYGs2gnDEu10U3nQsZUTihbbw1vJunS k40VvjRy6mjfLAUIag6kLiXMH6MaPiVllJ/h8myxkBj7IymMaLeCTZpW2MpX1qBV 3NOAVRJDWSHvJRoYVb+hl92flfumUCd+q9338srQsmLGjDAR9QmH7dicwD9BQOLz PkrYYDCXZ1rq7gBWKPjbJaSRiLjd9l8oTuhIu/yccGPGv1Up0p7BgUMj8O14i1B/ vuIYjocRj/WYMVU3k6WEvvWrzo5ATb8qYmDr/Qm3kZuyL2e7wwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCGHIyMPEAsS5vcihUMyYFRcuCbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvMmNjNmMzOGEtNjhjYi0z YzM0LTk1NjQtZjc3ZTUwNmY3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUswDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaXLuX3hrGEI8kFN16HtD41tgyFlb1SZKmUjWlBWZidP3qg3ZGXV2h gVgdflsKLHpsaIIFk3b63MNKUh5FLJ1u3a6cXl16XNh6HTaJoiAmRDSptDxMVCqX rI7aA4SwE6gSDqytWTYsQMwiWEUzYdicU0wwK1c6S+1WBUapkebvZ0A1mXHnayjM RzSsdtanBwsnM2ZcwSVImsUb9G6qUHT5HRNjZyQfFs+VB48D48HlHeGJeNw7CPvK FPnYckwu5g1E0U23pRGuuOxDv0B1MMo5E/zARDBdAxyDokwJwLY675TnfarSe5Zr SMKhmYck6FOzD1YMoh0kPqzd0owNGhtU -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:06 2025 by rpki-client