$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/ecc8b121-504e-333d-8905-0581d173b31f.roa File: ecc8b121-504e-333d-8905-0581d173b31f.roa (raw, json) Hash identifier: KoEfqTtqcCUsjj+GcwZCodfYXeLfEYXVTIyPoyfde5M= Subject key identifier: 48:19:9F:BA:E1:AC:0B:51:7F:67:4A:D0:D2:E4:35:01:3D:6E:9D:DB Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584AF25677670EEBB5200E491480 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/ecc8b121-504e-333d-8905-0581d173b31f.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 212364 IP address blocks: 2602:fc09:f40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:77:67:0e:eb:b5:20:0e:49:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=22a7fd2a-36fc-4bf7-8dd5-78ed3be70f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:d9:69:cd:d8:1f:74:4d:9f:7c:a1:c0:20: 16:82:5f:d2:62:1e:00:98:8e:31:a4:e9:15:61:63: bf:77:dc:3d:df:e7:35:75:ce:1a:04:fd:ae:3b:9b: 3b:f0:3d:1b:9b:5f:48:a0:5c:03:cd:54:46:9d:4b: 5b:77:f9:d9:df:26:3c:cc:03:74:32:b2:bc:85:f5: 51:ac:51:6b:34:8f:a5:f9:7b:83:9c:9b:43:30:e3: 91:92:32:7d:42:b4:42:7e:e7:8f:66:b2:8b:45:59: 86:06:61:45:fb:30:90:68:c7:35:9d:39:80:9c:ef: 9f:24:e1:70:3e:4a:e8:b0:60:b5:a5:61:f4:d2:e1: bc:18:42:f7:c8:65:6c:0b:3a:c7:8a:8b:8f:54:27: 01:a7:ab:14:cd:cf:7b:19:a8:8c:19:86:00:30:a4: 9c:0d:37:39:2c:01:47:fa:46:d4:c8:80:9e:17:b2: d7:98:53:bc:87:e8:01:96:e8:d2:16:74:0b:e0:93: 7f:99:1a:99:19:2f:d2:6f:21:64:ff:f0:9e:9b:8f: e5:ab:e0:ed:6a:a8:48:30:ea:1c:d0:30:dd:7d:32: 5a:22:a7:68:2c:37:e8:d8:b3:fb:93:d9:62:4b:34: 95:c7:ad:d7:6a:9c:e6:8d:5b:66:93:52:f3:2f:80: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:9F:BA:E1:AC:0B:51:7F:67:4A:D0:D2:E4:35:01:3D:6E:9D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/ecc8b121-504e-333d-8905-0581d173b31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:ba:d7:2a:e9:fa:db:da:f1:72:e4:77:72:f9:06:a9:ac: 58:9a:86:f2:8f:69:bf:67:61:e4:51:40:6a:a0:f4:e0:08:94: aa:81:78:00:80:be:8d:4f:dc:c6:ad:4b:0c:97:4c:3a:e3:6b: f6:45:0c:54:db:1a:f4:e8:3c:13:02:27:f5:ed:23:6b:04:b4: 2f:cc:65:12:26:b9:86:ad:17:cb:dd:d1:62:8c:d8:de:d9:08: c5:24:9e:75:6b:74:03:fb:e3:51:7d:2f:17:99:a8:26:87:46: 67:00:10:1d:be:87:7e:fb:fc:c1:0b:b6:ef:2f:54:7f:69:c0: c7:fa:a4:89:15:7c:99:9a:60:57:a5:77:5f:97:25:69:b1:b6: 6a:c7:0c:7c:4c:b7:83:57:b6:8c:0f:15:30:e1:16:98:04:7d: ea:34:63:b9:d7:e1:a6:5d:1b:87:2b:25:a6:9e:27:d4:97:ed: 33:8d:0b:c4:31:4e:7f:14:09:87:3e:c0:d7:41:0c:be:03:96: d4:75:04:33:b2:bd:a6:9e:52:c0:3c:13:28:6c:87:3c:72:64: 68:5c:21:a1:d5:f7:b1:78:5a:40:27:f2:88:65:95:01:05:0b: d6:54:2d:38:f7:8e:a4:9e:8b:0b:6c:94:cf:2b:47:7f:65:e9: b6:e3:10:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVndnDuu1IA5JFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjJhN2ZkMmEtMzZmYy00YmY3LThkZDUtNzhlZDNiZTcwZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23PZac3YH3RNn3yhwCAWgl/SYh4AmI4xpOkV YWO/d9w93+c1dc4aBP2uO5s78D0bm19IoFwDzVRGnUtbd/nZ3yY8zAN0MrK8hfVR rFFrNI+l+XuDnJtDMOORkjJ9QrRCfuePZrKLRVmGBmFF+zCQaMc1nTmAnO+fJOFw PkrosGC1pWH00uG8GEL3yGVsCzrHiouPVCcBp6sUzc97GaiMGYYAMKScDTc5LAFH +kbUyICeF7LXmFO8h+gBlujSFnQL4JN/mRqZGS/SbyFk//Cem4/lq+DtaqhIMOoc 0DDdfTJaIqdoLDfo2LP7k9liSzSVx63XapzmjVtmk1LzL4C90wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgZn7rhrAtRf2dK0NLkNQE9bp3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvZWNjOGIxMjEtNTA0ZS0z MzNkLTg5MDUtMDU4MWQxNzNiMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ9A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEPutcq6frb2vFy5Hdy+QaprFiahvKPab9nYeRRQGqg9OAIlKqB eACAvo1P3MatSwyXTDrja/ZFDFTbGvToPBMCJ/XtI2sEtC/MZRImuYatF8vd0WKM 2N7ZCMUknnVrdAP741F9LxeZqCaHRmcAEB2+h377/MELtu8vVH9pwMf6pIkVfJma YFeld1+XJWmxtmrHDHxMt4NXtowPFTDhFpgEfeo0Y7nX4aZdG4crJaaeJ9SX7TON C8QxTn8UCYc+wNdBDL4DltR1BDOyvaaeUsA8EyhshzxyZGhcIaHV97F4WkAn8ohl lQEFC9ZULTj3jqSeiwtslM8rR39l6bbjEGM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:02 2025 by rpki-client