$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa File: 628493d1-603c-3129-8b8d-fbf6af96be8e.roa (raw, json) Hash identifier: orOSSrN2EO+GX/7u4cwqNOEdlhQM81BDuxubZrHEVd0= Subject key identifier: 82:BB:34:60:4D:D5:9A:F3:4F:CB:1A:1C:8F:C6:63:18:04:75:60:C3 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584A2EEABFF05714C54AC32D6D4C Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 53727 IP address blocks: 2602:f982:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bf:f0:57:14:c5:4a:c3:2d:6d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=a7cac726-aa67-4520-be67-0bfc6b00a9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:d4:06:0d:54:50:26:2c:0c:a7:b6:7e:14: 73:b2:04:4b:64:12:2c:6d:03:79:3f:f4:39:e2:bb: a1:2e:09:16:63:5e:cb:74:1f:d0:36:24:85:f6:9d: 27:0a:f1:90:04:7c:42:e4:52:c9:c7:f3:1c:3f:63: db:53:5b:99:22:32:69:f5:2e:0c:4c:5f:90:b9:d6: 8a:64:dc:20:f2:c1:38:8b:04:24:d8:8a:e9:f1:95: 3b:59:b3:f7:18:24:bf:28:98:e4:7f:06:7a:63:15: a9:10:4b:30:18:97:54:b5:c1:f8:81:5d:25:8a:4d: 71:41:b9:5a:f6:58:a0:bc:3f:24:f3:a1:88:11:f5: 33:79:a2:99:d4:11:b1:6a:97:56:bc:13:85:50:18: 61:48:e7:59:91:86:91:8d:5d:bd:54:13:ae:84:ca: d2:e9:8f:44:fe:49:c5:63:c8:7d:80:11:ed:e3:9d: f1:e4:4e:73:a3:4f:aa:eb:9b:d9:cb:d5:99:32:d2: 3f:c6:89:3d:1a:5f:ab:79:4d:cd:9b:70:dd:49:66: 3c:43:3f:ad:2b:44:d6:16:7d:86:d3:b2:06:f8:49: 9a:24:ab:17:18:09:b7:3f:56:b2:68:6c:52:d0:29: 4b:a7:ca:e9:55:8c:06:07:10:a0:e7:c9:d1:46:a0: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BB:34:60:4D:D5:9A:F3:4F:CB:1A:1C:8F:C6:63:18:04:75:60:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:37:21:71:c3:97:90:bb:b1:73:c5:c3:9a:56:d3:c3:e4:ef: 15:bb:a9:1c:35:d3:7c:35:f6:62:e0:54:60:8f:f8:48:b5:04: 2f:f2:3c:6b:50:26:be:82:f4:af:15:ff:91:b4:fb:de:58:bb: c9:ac:c2:4b:30:5f:b6:b0:13:17:aa:aa:96:2d:9b:3f:9d:14: fa:7b:e0:62:20:69:53:ae:40:90:6f:ee:32:f1:c1:9a:5f:e9: f5:07:e1:37:04:82:6b:5d:fb:af:0a:91:dd:95:1f:60:53:0b: a3:2a:c6:94:1a:b9:41:05:1f:c7:f0:ff:4b:81:83:7b:6d:28: ab:5b:4a:b6:2b:f9:13:55:c3:c9:e0:ae:14:0a:be:da:18:47: e2:ef:d0:73:5f:df:5e:17:c1:20:e1:8b:bc:69:5c:7a:83:39: e5:e3:c8:3c:37:81:89:06:7f:aa:c2:19:60:60:5f:c0:96:b8: 10:d7:24:9b:1d:31:40:d7:39:14:ca:59:20:03:55:f7:4c:a2: 8e:ed:c5:91:d4:94:90:e8:9e:f9:82:4d:74:e2:05:1f:a3:28: b7:2c:c8:da:6b:03:85:89:e7:06:28:76:eb:f0:d3:46:ae:ea: ce:f6:93:71:8b:ca:3c:99:5c:25:eb:b8:de:67:af:0d:dd:57: 7e:b8:48:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEou6r/wVxTFSsMtbUwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk YTdjYWM3MjYtYWE2Ny00NTIwLWJlNjctMGJmYzZiMDBhOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGbUBg1UUCYsDKe2fhRzsgRLZBIsbQN5P/Q5 4ruhLgkWY17LdB/QNiSF9p0nCvGQBHxC5FLJx/McP2PbU1uZIjJp9S4MTF+QudaK ZNwg8sE4iwQk2Irp8ZU7WbP3GCS/KJjkfwZ6YxWpEEswGJdUtcH4gV0lik1xQbla 9ligvD8k86GIEfUzeaKZ1BGxapdWvBOFUBhhSOdZkYaRjV29VBOuhMrS6Y9E/knF Y8h9gBHt453x5E5zo0+q65vZy9WZMtI/xok9Gl+reU3Nm3DdSWY8Qz+tK0TWFn2G 07IG+EmaJKsXGAm3P1ayaGxS0ClLp8rpVYwGBxCg58nRRqAq9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIK7NGBN1ZrzT8saHI/GYxgEdWDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvNjI4NDkzZDEtNjAzYy0z MTI5LThiOGQtZmJmNmFmOTZiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEc3IXHDl5C7sXPFw5pW08Pk7xW7qRw103w19mLgVGCP+Ei1BC/y PGtQJr6C9K8V/5G0+95Yu8mswkswX7awExeqqpYtmz+dFPp74GIgaVOuQJBv7jLx wZpf6fUH4TcEgmtd+68Kkd2VH2BTC6MqxpQauUEFH8fw/0uBg3ttKKtbSrYr+RNV w8ngrhQKvtoYR+Lv0HNf314XwSDhi7xpXHqDOeXjyDw3gYkGf6rCGWBgX8CWuBDX JJsdMUDXORTKWSADVfdMoo7txZHUlJDonvmCTXTiBR+jKLcsyNprA4WJ5wYoduvw 00au6s72k3GLyjyZXCXruN5nrw3dV364SF0= -----END CERTIFICATE-----Generated at Mon Jun 30 10:32:24 2025 by rpki-client