$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: OoLbL9fgygdLC+jTYqqjT+wRzPM6nvfDbhsBgvNwZW4= Subject key identifier: 37:FE:4A:A4:2A:23:09:3A:B3:71:77:33:BE:E9:5E:53:D1:00:06:C5 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584A4F05D11B14E0B57EF1D4AF60 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:d1:1b:14:e0:b5:7e:f1:d4:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=aa7c0bd7-ea40-454f-b6ef-73a8f761402f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:eb:38:c6:62:1b:78:0d:d6:ab:3f:d1:bf: 39:04:17:a5:50:1a:d3:08:24:8b:f6:2b:6c:dd:16: 21:b2:c4:e4:3b:89:37:48:72:a9:2a:b4:4f:72:2c: 78:b3:40:27:ed:94:80:58:a3:34:ac:ae:34:11:39: 5e:7f:84:cd:7d:dd:b7:ca:23:3c:ed:eb:68:5d:fe: 25:b9:4b:17:e3:2c:7a:bf:cf:7d:22:c3:55:64:66: bc:f8:48:06:ef:f3:1a:a1:c1:80:bb:6a:13:e0:e7: 5b:c3:95:f0:7d:3a:e5:d9:df:5a:c4:89:fb:5f:d1: 31:fd:ba:e3:c4:94:07:93:e4:50:4c:ff:ad:ea:c4: d4:9a:09:54:30:58:67:41:15:0b:09:ad:5e:c0:ac: 0f:89:95:52:9c:f4:cb:95:12:4e:6b:06:c8:34:7d: be:3f:57:0a:39:0c:dc:c6:13:b2:95:89:b3:05:7e: 83:38:fd:15:ea:ff:2f:af:0b:5a:ea:75:3f:31:03: a0:75:18:12:55:01:b5:0d:0a:02:11:d4:03:68:d0: 63:b2:82:27:b0:c2:e0:cd:c6:d1:ba:13:3b:d0:d2: 51:7e:6f:e2:63:e5:e2:33:93:f3:e5:83:58:5f:6e: 4c:b0:0e:06:7d:57:04:c9:04:5c:25:4a:22:68:f0: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:4A:A4:2A:23:09:3A:B3:71:77:33:BE:E9:5E:53:D1:00:06:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:34:27:87:05:a5:49:9a:da:6b:ff:bd:d7:a0:de:b6:ec:0f: 93:c7:20:52:a1:d7:26:9c:52:35:6d:69:eb:01:82:6b:aa:8a: 3b:89:fb:1b:84:36:91:e2:89:ff:c3:0f:7c:ab:6f:2e:a2:24: 68:b6:a4:e4:89:35:88:53:92:26:cc:1f:80:87:bd:f2:c2:9c: 43:15:b5:4d:1b:02:1d:07:b7:3a:f5:67:52:f5:2a:b9:6a:ed: d8:b1:07:86:99:fd:8e:a6:da:43:7b:3e:68:f8:93:cc:16:fa: 54:b8:30:6a:61:96:9f:d7:36:8b:e6:f1:20:ce:9d:25:f8:6d: a5:e1:79:80:d0:0b:4e:db:df:92:7c:d6:55:01:07:83:e6:f6: b6:4e:59:47:a1:fc:e7:cf:41:03:1f:b1:95:49:34:e4:bc:b4: a2:2b:17:48:19:d2:51:57:25:e5:47:8f:fe:e7:7c:66:54:5a: 6b:e1:fc:42:7a:7b:e7:ee:ec:43:60:63:c7:00:7d:3b:4b:fa: 62:18:9a:62:49:0b:98:53:83:5f:3f:51:fb:0c:ed:57:b2:ee: 4f:c1:6f:8f:52:38:15:06:64:a4:af:ec:f9:75:97:1d:47:7f: e8:d4:34:37:b7:25:4d:1d:5f:14:c6:51:3e:1d:4f:68:74:6f: af:c5:71:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpPBdEbFOC1fvHUr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YWE3YzBiZDctZWE0MC00NTRmLWI2ZWYtNzNhOGY3NjE0MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsbrOMZiG3gN1qs/0b85BBelUBrTCCSL9its 3RYhssTkO4k3SHKpKrRPcix4s0An7ZSAWKM0rK40ETlef4TNfd23yiM87etoXf4l uUsX4yx6v899IsNVZGa8+EgG7/MaocGAu2oT4Odbw5XwfTrl2d9axIn7X9Ex/brj xJQHk+RQTP+t6sTUmglUMFhnQRULCa1ewKwPiZVSnPTLlRJOawbINH2+P1cKOQzc xhOylYmzBX6DOP0V6v8vrwta6nU/MQOgdRgSVQG1DQoCEdQDaNBjsoInsMLgzcbR uhM70NJRfm/iY+XiM5Pz5YNYX25MsA4GfVcEyQRcJUoiaPCv3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDf+SqQqIwk6s3F3M77pXlPRAAbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfzQnhwWlSZraa/+916DetuwPk8cgUqHXJpxSNW1p6wGCa6qKO4n7 G4Q2keKJ/8MPfKtvLqIkaLak5Ik1iFOSJswfgIe98sKcQxW1TRsCHQe3OvVnUvUq uWrt2LEHhpn9jqbaQ3s+aPiTzBb6VLgwamGWn9c2i+bxIM6dJfhtpeF5gNALTtvf knzWVQEHg+b2tk5ZR6H8589BAx+xlUk05Ly0oisXSBnSUVcl5UeP/ud8ZlRaa+H8 Qnp75+7sQ2BjxwB9O0v6YhiaYkkLmFODXz9R+wztV7LuT8Fvj1I4FQZkpK/s+XWX HUd/6NQ0N7clTR1fFMZRPh1PaHRvr8VxLg== -----END CERTIFICATE-----Generated at Mon Jun 30 14:04:23 2025 by rpki-client