$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa File: abaecb82-3c77-3112-ae1d-040a8c948f96.roa (raw, json) Hash identifier: 5UkTw0NPhN5aavDWQ44yzQD2+xKwJs+m3mSt2wlFGlE= Subject key identifier: 72:1D:BC:33:DD:AE:A5:59:D9:B7:1C:7B:3C:DB:1D:FD:85:15:BC:4C Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584A5765D4B78F091FE66AF8F600 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 2602:fc88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d4:b7:8f:09:1f:e6:6a:f8:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=7bde1814-e8e7-4b1a-b723-1af78a21f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:82:63:9f:4b:76:af:d7:ad:61:2a:f2:57: 64:50:49:7f:17:b5:1e:33:8d:e8:d5:83:89:ef:d4: 73:eb:67:97:7e:ba:f6:14:7d:78:cb:5b:a2:e8:38: 2e:4c:c5:6a:e6:54:7e:95:c9:c0:51:90:95:e5:29: 3d:2d:3e:0f:ee:0f:c9:ba:8a:75:aa:53:8d:cb:c4: 08:c8:eb:fd:ef:63:9e:0e:7c:1e:31:95:02:07:a9: 92:a5:57:38:d2:67:33:c8:a3:7f:71:3b:d3:4c:25: dc:b4:7b:98:bb:25:e8:2d:c5:8a:9e:b1:27:aa:a6: 83:48:ba:8f:44:a9:a2:10:c9:d3:f9:ff:21:6d:40: 90:1e:b9:72:04:42:ea:17:cd:97:1d:ae:12:96:58: 7e:b9:73:98:f6:96:c7:bc:75:1a:14:59:cc:03:91: 21:e7:65:9b:2c:0c:85:e8:cc:86:7d:37:b6:6e:7d: 79:91:30:76:39:06:b7:7b:a8:e0:ec:09:6c:e4:df: 60:13:fa:65:a1:fa:b1:54:c6:26:43:a6:1d:7c:8d: 95:5f:1d:12:a2:f2:ba:fe:b1:d3:04:b8:e4:51:a6: 08:bf:e9:2c:3c:99:19:70:ae:e2:3a:41:bc:52:f3: dd:ee:2e:ba:3f:b8:48:b4:da:25:2d:11:d6:e6:42: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:BC:33:DD:AE:A5:59:D9:B7:1C:7B:3C:DB:1D:FD:85:15:BC:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c1:7e:ee:3d:4a:af:86:2a:0d:69:de:38:73:0a:8b:52:12: 0a:30:0e:ea:92:29:f3:1a:af:3b:d0:10:7e:c7:27:63:dd:7c: d0:14:1d:e9:07:fd:fc:07:23:a0:34:79:cd:64:c8:3d:1d:2b: 8e:19:e2:8b:eb:d0:d1:1c:7e:5c:c4:a8:6d:66:0c:18:e5:f4: fa:b9:ce:b3:92:36:d3:8f:b1:4b:b7:9e:91:70:9f:70:30:4b: c8:83:d2:ae:61:d4:11:93:77:e6:66:3c:09:6e:39:e7:cd:9d: 72:ce:cd:0d:c2:9c:ce:8d:dd:70:db:4d:47:fa:aa:81:5c:83: c9:25:bf:70:98:f2:40:a9:b6:55:d0:87:fe:ed:5d:2b:e9:a9: 15:af:e0:4f:5d:fd:89:2b:b2:53:22:be:46:f0:74:6d:c3:3e: 62:70:0c:d9:e1:bf:57:db:a9:e6:b8:ba:0c:d2:05:e6:9a:02: e3:f5:a1:b6:45:c1:e5:ac:f7:94:1d:6b:22:60:b8:98:c1:f1: 8a:cd:e7:89:6a:69:7f:99:8e:73:73:88:e4:a1:ae:ee:6f:87: 47:08:01:23:b8:d7:68:25:50:90:60:7a:4a:2f:91:a2:9c:5c: 96:1f:5f:7e:39:06:16:3b:eb:e2:36:81:5c:6b:d6:40:91:49: c3:b5:78:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZdS3jwkf5mr49gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk N2JkZTE4MTQtZThlNy00YjFhLWI3MjMtMWFmNzhhMjFmMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gqCY59Ldq/XrWEq8ldkUEl/F7UeM43o1YOJ 79Rz62eXfrr2FH14y1ui6DguTMVq5lR+lcnAUZCV5Sk9LT4P7g/Juop1qlONy8QI yOv972OeDnweMZUCB6mSpVc40mczyKN/cTvTTCXctHuYuyXoLcWKnrEnqqaDSLqP RKmiEMnT+f8hbUCQHrlyBELqF82XHa4Sllh+uXOY9pbHvHUaFFnMA5Eh52WbLAyF 6MyGfTe2bn15kTB2OQa3e6jg7Als5N9gE/plofqxVMYmQ6YdfI2VXx0SovK6/rHT BLjkUaYIv+ksPJkZcK7iOkG8UvPd7i66P7hItNolLRHW5kLg6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHIdvDPdrqVZ2bccezzbHf2FFbxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvYWJhZWNiODItM2M3Ny0z MTEyLWFlMWQtMDQwYThjOTQ4Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPBfu49Sq+GKg1p3jhzCotSEgowDuqSKfMarzvQEH7HJ2PdfNAU HekH/fwHI6A0ec1kyD0dK44Z4ovr0NEcflzEqG1mDBjl9Pq5zrOSNtOPsUu3npFw n3AwS8iD0q5h1BGTd+ZmPAluOefNnXLOzQ3CnM6N3XDbTUf6qoFcg8klv3CY8kCp tlXQh/7tXSvpqRWv4E9d/YkrslMivkbwdG3DPmJwDNnhv1fbqea4ugzSBeaaAuP1 obZFweWs95QdayJguJjB8YrN54lqaX+ZjnNziOShru5vh0cIASO412glUJBgekov kaKcXJYfX345BhY76+I2gVxr1kCRScO1eLE= -----END CERTIFICATE-----Generated at Tue Jul 1 08:09:59 2025 by rpki-client