$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa File: d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa (raw, json) Hash identifier: M1a+caURBmPA0ssYRIq5e6tR+/0rtvaJ7PKhVMua/g8= Subject key identifier: 3E:0A:4B:97:14:DB:66:2B:82:31:A6:E1:9E:FB:93:37:F8:39:54:92 Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584A5600564123FCE8D68B499980 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 401390 IP address blocks: 2602:f7da:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:56:41:23:fc:e8:d6:8b:49:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=9132a281-d827-4f80-b742-57641f517dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:ed:80:98:e9:02:23:f0:71:6f:05:2a:59: 7a:30:74:62:59:dc:d0:3e:16:e1:58:66:95:b9:32: 96:70:66:4e:02:b4:9f:5b:d2:9e:dd:60:9a:79:62: 12:17:66:04:18:e2:e3:c2:2e:eb:01:27:6f:8f:46: d2:60:37:a7:10:02:c5:ef:c5:31:c5:41:ce:c1:9e: bc:e7:0a:ab:90:e8:2e:f1:77:7c:0b:c8:e3:3b:4b: 32:1f:11:52:2f:b8:99:6e:2c:24:fa:9a:cf:af:c6: 3f:8d:87:4f:30:a3:1f:1a:3a:93:66:22:32:c2:b0: 10:1a:2b:6c:d3:76:c6:01:78:71:37:01:48:85:05: c5:89:9b:4c:33:e7:c8:7b:e2:41:05:d4:a3:2c:cf: 23:95:0c:53:2a:4d:1d:85:d7:55:3a:6c:53:43:18: 3d:38:46:ce:3b:89:e7:f0:03:c8:29:64:0c:32:8f: 2c:d2:0f:3b:5e:80:5f:30:ca:aa:4e:68:39:f1:30: d8:7f:64:f9:8c:67:5d:17:e9:45:57:c3:3c:de:82: 88:97:d7:7b:5c:32:13:f5:06:9d:7b:42:97:3d:a2: 95:40:46:9c:61:79:8d:cd:ef:48:3d:92:75:b6:a9: c3:0f:4c:5f:8c:a7:90:c1:cc:3b:45:da:5d:93:68: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:4B:97:14:DB:66:2B:82:31:A6:E1:9E:FB:93:37:F8:39:54:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1d:05:10:f5:0c:e7:92:f0:3f:a8:70:c9:b1:e1:32:10:82: 43:2b:58:83:57:11:0e:ea:b3:ff:76:29:e5:a2:b3:2d:7e:a2: 9e:85:59:b4:db:44:f2:c9:4e:0e:5f:d1:e5:e9:10:ea:11:b1: 75:6b:a8:df:c4:e6:b2:5e:7c:cf:b1:6c:28:cf:5f:2b:44:29: a6:9f:e0:6e:e2:d7:ed:10:09:54:ce:64:46:6f:63:9a:29:3f: 71:e9:e9:9a:67:72:19:83:2a:0f:5b:80:67:74:1a:2c:cd:1a: 06:26:bd:fe:f8:ea:c5:2c:f4:0a:5d:bc:9b:c6:cf:1c:f7:9e: 21:2a:87:ef:6d:8c:de:f7:18:ac:51:6c:1c:ae:be:b6:50:4a: 05:a6:db:54:cb:a0:a8:4d:50:8f:d3:b5:4b:2a:a1:59:e0:c0: 6d:0a:af:a8:ae:04:9f:5e:90:53:f5:10:67:f7:c2:1f:3e:f4: c7:9d:a1:da:a1:99:41:4f:93:ab:dd:b5:ae:c6:a2:5c:54:0f: 28:95:63:ad:20:0d:7e:a9:66:33:83:12:ad:95:e7:3e:d8:a2: c0:3a:23:1b:2e:0a:48:47:0e:d9:4d:a1:9b:6e:ab:04:39:b7: 6e:6b:35:df:22:f6:b9:f9:10:72:ac:ab:c8:2f:fa:20:68:88: db:cc:b0:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpWAFZBI/zo1otJmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk OTEzMmEyODEtZDgyNy00ZjgwLWI3NDItNTc2NDFmNTE3ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU3tgJjpAiPwcW8FKll6MHRiWdzQPhbhWGaV uTKWcGZOArSfW9Ke3WCaeWISF2YEGOLjwi7rASdvj0bSYDenEALF78UxxUHOwZ68 5wqrkOgu8Xd8C8jjO0syHxFSL7iZbiwk+prPr8Y/jYdPMKMfGjqTZiIywrAQGits 03bGAXhxNwFIhQXFiZtMM+fIe+JBBdSjLM8jlQxTKk0dhddVOmxTQxg9OEbOO4nn 8APIKWQMMo8s0g87XoBfMMqqTmg58TDYf2T5jGddF+lFV8M83oKIl9d7XDIT9Qad e0KXPaKVQEacYXmNze9IPZJ1tqnDD0xfjKeQwcw7Rdpdk2hO6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4KS5cU22YrgjGm4Z77kzf4OVSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvZDU2N2M1ZTQtZWEwYi0z NzdiLThiNDItNmMzZDY4YzhiOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACodBRD1DOeS8D+ocMmx4TIQgkMrWINXEQ7qs/92KeWisy1+op6F WbTbRPLJTg5f0eXpEOoRsXVrqN/E5rJefM+xbCjPXytEKaaf4G7i1+0QCVTOZEZv Y5opP3Hp6ZpnchmDKg9bgGd0GizNGgYmvf746sUs9ApdvJvGzxz3niEqh+9tjN73 GKxRbByuvrZQSgWm21TLoKhNUI/TtUsqoVngwG0Kr6iuBJ9ekFP1EGf3wh8+9Med odqhmUFPk6vdta7GolxUDyiVY60gDX6pZjODEq2V5z7YosA6IxsuCkhHDtlNoZtu qwQ5t25rNd8i9rn5EHKsq8gv+iBoiNvMsKE= -----END CERTIFICATE-----Generated at Tue Jul 1 19:24:46 2025 by rpki-client