$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa File: 2879a075-4779-38e7-a71e-76910345c230.roa (raw, json) Hash identifier: c8tvbDB3FZv0EGtNynX19HQ7Bk4BWH0X9XadW8cQ91Q= Subject key identifier: 56:A7:B8:64:2D:6E:71:05:88:D3:19:74:4A:F0:A6:3B:57:78:06:5C Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584ACCA657F4B378096B05713480 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2602:f961::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:57:f4:b3:78:09:6b:05:71:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2a63b323-3e86-477f-aa88-2121ac2956fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:72:df:76:e8:1e:25:1d:20:be:e1:e6:4a: b4:40:0e:99:b5:10:73:87:02:34:82:23:57:92:0e: 36:18:78:00:72:0e:0b:d9:72:6b:48:9a:1e:1a:b8: cd:7d:78:3b:ba:53:c7:19:8e:09:74:fb:95:7d:62: 1c:9e:5d:08:9e:41:55:03:d8:08:b6:a7:1a:a4:39: cd:30:10:ba:35:47:65:fb:5a:88:a8:34:dd:77:c5: 1f:27:c4:c2:c4:e9:68:65:04:bb:e9:53:9d:c3:82: d9:57:c2:20:a9:e2:76:00:60:f2:01:83:2e:f3:9b: 18:f0:27:d2:59:ca:11:d4:75:f1:a7:9b:a0:3f:a1: 45:68:5d:31:e8:09:e8:ac:cd:74:6d:2d:28:66:88: 70:3f:3c:db:9e:0d:9b:dc:91:c8:95:13:34:1b:af: bc:be:86:12:7d:6e:6e:02:80:01:4f:9a:dd:1c:78: f7:86:d5:b4:e8:42:43:1c:7c:1a:ad:43:27:90:43: a6:e4:35:97:c7:06:48:90:15:71:53:c9:ab:6c:14: 56:d2:55:48:8f:18:29:b4:72:49:95:99:50:1e:a4: 00:04:76:d9:b5:4b:c3:5e:7b:bd:a1:08:22:69:49: ad:60:42:cc:3e:a8:f6:1c:38:e6:f6:ef:4c:11:a7: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A7:B8:64:2D:6E:71:05:88:D3:19:74:4A:F0:A6:3B:57:78:06:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f961::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f5:42:ac:e3:5a:02:13:3a:0b:86:09:dd:d6:cc:7b:44:2d: 80:52:0b:b9:a2:a2:7b:9e:85:e0:42:c3:19:57:9a:75:7c:93: d7:55:27:17:b5:38:f3:9e:3b:a8:d9:77:63:58:f0:a4:fe:12: 71:08:23:1d:d3:55:50:d8:c9:07:93:15:01:4e:28:15:ba:a9: db:5c:41:81:2d:31:f6:cf:90:aa:66:23:d9:01:2c:55:75:c6: 01:b9:c2:ba:1c:57:28:d1:48:dc:d4:7e:9b:6c:b9:10:0d:5c: d0:e9:bd:7e:9f:1f:18:22:dd:8c:d8:5d:c5:ba:a4:c3:01:75: 12:f5:dc:eb:ad:1a:95:96:a9:f0:7a:97:e4:99:88:79:16:92: f4:a9:d5:fb:87:1e:27:05:33:70:65:7a:95:59:6b:8c:cd:a6: d2:be:17:e7:74:17:7f:e0:d2:e9:ab:55:ef:3e:14:03:12:39: 57:61:2b:bd:14:94:e2:f5:11:76:3f:3c:9f:de:e3:59:55:d8: e2:83:8f:47:ae:e6:9b:d9:ac:4b:57:b5:c4:46:b9:3e:ad:74: 97:68:50:7e:8c:cc:de:5a:79:69:13:7b:35:1a:26:93:be:0c: 99:ad:4d:c2:6a:db:15:89:18:88:fb:76:3a:9f:fe:5b:6d:1a: 69:25:11:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMplf0s3gJawVxNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmE2M2IzMjMtM2U4Ni00NzdmLWFhODgtMjEyMWFjMjk1NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sxy33boHiUdIL7h5kq0QA6ZtRBzhwI0giNX kg42GHgAcg4L2XJrSJoeGrjNfXg7ulPHGY4JdPuVfWIcnl0InkFVA9gItqcapDnN MBC6NUdl+1qIqDTdd8UfJ8TCxOloZQS76VOdw4LZV8IgqeJ2AGDyAYMu85sY8CfS WcoR1HXxp5ugP6FFaF0x6AnorM10bS0oZohwPzzbng2b3JHIlRM0G6+8voYSfW5u AoABT5rdHHj3htW06EJDHHwarUMnkEOm5DWXxwZIkBVxU8mrbBRW0lVIjxgptHJJ lZlQHqQABHbZtUvDXnu9oQgiaUmtYELMPqj2HDjm9u9MEaeZ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFanuGQtbnEFiNMZdErwpjtXeAZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMjg3OWEwNzUtNDc3OS0z OGU3LWE3MWUtNzY5MTAzNDVjMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5YQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAr1QqzjWgITOguGCd3WzHtELYBSC7mionueheBCwxlXmnV8k9dV Jxe1OPOeO6jZd2NY8KT+EnEIIx3TVVDYyQeTFQFOKBW6qdtcQYEtMfbPkKpmI9kB LFV1xgG5wrocVyjRSNzUfptsuRANXNDpvX6fHxgi3YzYXcW6pMMBdRL13OutGpWW qfB6l+SZiHkWkvSp1fuHHicFM3BlepVZa4zNptK+F+d0F3/g0umrVe8+FAMSOVdh K70UlOL1EXY/PJ/e41lV2OKDj0eu5pvZrEtXtcRGuT6tdJdoUH6MzN5aeWkTezUa JpO+DJmtTcJq2xWJGIj7djqf/lttGmklEew= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:21 2025 by rpki-client