$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa File: 2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa (raw, json) Hash identifier: 8dJYAKtWQC3nPe6/Wldk6PnvmC0LrMABmZpsC5CiC7k= Subject key identifier: 7F:FF:79:4D:97:48:48:7C:66:20:59:24:CA:EB:2E:E3:72:D3:3E:89 Certificate issuer: /CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Certificate serial: 010D0C9F4328584A51D074A9A0211FA04D27B740 Authority key identifier: 7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 400191 IP address blocks: 2602:fc0a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:74:a9:a0:21:1f:a0:4d:27:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d1290b-e045-43ca-96b8-a3da87e72c4b Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=b1eefc80-3b0a-4f07-891a-6d1524fda31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:9a:47:1a:6f:9d:13:fa:97:ba:a3:0e:55: 1b:4e:d8:8b:73:61:f1:99:58:c8:c0:ed:b4:b7:80: 51:97:e4:91:b6:18:49:e8:f0:94:b0:f4:f1:76:91: e4:6f:a6:50:26:75:27:03:0e:13:a6:33:c8:8d:5d: cb:ba:4b:d4:a6:00:bc:0e:28:5b:2f:7c:4d:30:5b: ba:e7:16:c1:f7:ba:22:37:cc:b9:66:e2:a0:f1:a7: 00:3b:9a:0c:04:2b:d5:2e:24:5d:12:e7:69:8e:c9: 8d:98:31:fd:ad:67:9e:a2:46:4b:8d:e0:f5:04:19: 8b:90:8a:96:f0:8c:09:0e:ac:34:11:ed:51:6d:d8: b3:25:86:50:2b:75:cf:75:57:ca:0c:f5:14:33:a4: 93:f8:90:fe:17:c0:97:67:6b:e9:6a:dc:b7:ab:53: 7b:e8:f7:73:08:d7:e2:70:d7:71:d4:cc:7b:9b:91: d6:ac:a6:77:60:5e:2a:db:40:2f:9b:87:c2:c5:d4: d1:ab:88:ff:f7:f6:c1:26:3c:c6:36:b8:c2:a8:7a: e8:6c:f4:27:23:1e:92:1b:47:70:51:37:d5:01:45: 2b:90:3d:6a:af:21:0c:d8:d3:2c:d1:08:e6:d3:f9: ab:3d:e7:1f:4b:ca:02:be:b6:0d:2f:8c:9e:94:dc: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FF:79:4D:97:48:48:7C:66:20:59:24:CA:EB:2E:E3:72:D3:3E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/2e8bbd12-84cd-3bf6-8457-b7de7486aa15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b/76d1290b-e045-43ca-96b8-a3da87e72c4b.crl X509v3 Authority Key Identifier: keyid:7F:96:EF:CA:02:7E:0C:BE:ED:E1:6B:31:77:0E:29:D4:0A:B4:F3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/76d1290b-e045-43ca-96b8-a3da87e72c4b.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc0a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:29:f3:c5:25:8c:12:e1:35:5f:87:6b:f5:03:74:31:90:c9: ab:8b:7b:56:7f:f1:08:8e:0e:e2:a7:eb:80:9b:f6:b5:86:8e: cf:41:97:e2:15:d3:0c:23:3b:ba:63:49:13:76:f3:e3:b2:a3: 69:16:50:1c:8b:d8:91:c4:62:55:82:57:8a:b1:13:dc:be:d7: b4:54:25:70:6a:37:f2:1c:d8:e7:0f:66:76:ce:56:60:80:f4: 7d:db:c1:bd:2e:59:52:f2:58:c0:e0:8b:5e:ba:bb:f9:ae:88: 92:dd:22:83:d9:92:e4:db:99:e7:7a:d6:3d:1f:81:e5:bd:df: c8:63:3b:75:14:13:40:95:95:63:1a:52:4b:b1:68:52:8d:b9: ea:33:42:13:93:77:d9:98:ba:30:49:28:94:81:82:6f:81:fc: 1b:b7:8a:5f:89:94:38:8f:05:78:89:46:6d:c5:92:8a:65:dd: 04:b7:5b:67:0c:81:3f:7d:8d:89:35:1f:4a:9a:37:05:4a:82: fb:98:61:9f:3b:ae:fc:35:b1:c6:be:f6:4f:9e:e0:8a:06:cc: 76:78:fd:26:0f:02:7d:fe:e5:45:50:b9:b1:df:db:cc:e3:58: 4e:ba:1f:f7:bd:f8:40:84:36:2f:d4:44:57:1f:97:45:e5:c2: fd:2a:71:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpR0HSpoCEfoE0nt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkMTI5MGItZTA0NS00M2NhLTk2YjgtYTNkYTg3ZTcy YzRiMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk YjFlZWZjODAtM2IwYS00ZjA3LTg5MWEtNmQxNTI0ZmRhMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT2aRxpvnRP6l7qjDlUbTtiLc2HxmVjIwO20 t4BRl+SRthhJ6PCUsPTxdpHkb6ZQJnUnAw4TpjPIjV3LukvUpgC8DihbL3xNMFu6 5xbB97oiN8y5ZuKg8acAO5oMBCvVLiRdEudpjsmNmDH9rWeeokZLjeD1BBmLkIqW 8IwJDqw0Ee1RbdizJYZQK3XPdVfKDPUUM6ST+JD+F8CXZ2vpaty3q1N76PdzCNfi cNdx1Mx7m5HWrKZ3YF4q20Avm4fCxdTRq4j/9/bBJjzGNrjCqHrobPQnIx6SG0dw UTfVAUUrkD1qryEM2NMs0Qjm0/mrPecfS8oCvrYNL4yelNxYUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH//eU2XSEh8ZiBZJMrrLuNy0z6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NmQx MjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2RhODdlNzJjNGIvMmU4YmJkMTItODRjZC0z YmY2LTg0NTctYjdkZTc0ODZhYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzZkMTI5MGItZTA0NS00M2NhLTk2 YjgtYTNkYTg3ZTcyYzRiLzc2ZDEyOTBiLWUwNDUtNDNjYS05NmI4LWEzZGE4N2U3 MmM0Yi5jcmwwHwYDVR0jBBgwFoAUf5bvygJ+DL7t4Wsxdw4p1Aq089IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NmQxMjkwYi1lMDQ1LTQzY2EtOTZiOC1hM2Rh ODdlNzJjNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8CgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAESnzxSWMEuE1X4dr9QN0MZDJq4t7Vn/xCI4O4qfrgJv2tYaOz0GX 4hXTDCM7umNJE3bz47KjaRZQHIvYkcRiVYJXirET3L7XtFQlcGo38hzY5w9mds5W YID0fdvBvS5ZUvJYwOCLXrq7+a6Ikt0ig9mS5NuZ53rWPR+B5b3fyGM7dRQTQJWV YxpSS7FoUo256jNCE5N32Zi6MEkolIGCb4H8G7eKX4mUOI8FeIlGbcWSimXdBLdb ZwyBP32NiTUfSpo3BUqC+5hhnzuu/DWxxr72T57gigbMdnj9Jg8Cff7lRVC5sd/b zONYTrof9734QIQ2L9REVx+XReXC/SpxVw== -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:09 2025 by rpki-client