$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa File: cf0646b3-a270-3e91-a9bb-005e44df8feb.roa (raw, json) Hash identifier: wrKtfZBLCobHBJxe47dVfXo86lOPXSo4NuXvJ7UMSJk= Subject key identifier: 74:AC:74:0A:F8:AE:84:A4:6D:78:93:49:A5:56:08:64:27:DB:D3:7B Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584A5765D1A46B3118D3E3822300 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 399805 IP address blocks: 2602:fc88:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d1:a4:6b:31:18:d3:e3:82:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=7db6865f-c8f3-4009-9c33-4426a278f8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:d4:81:5c:45:c9:51:a4:32:09:68:55:3c: e6:15:cc:30:f5:d7:5c:91:d0:bb:20:af:f0:cb:f7: 48:1a:a1:7d:35:96:33:3b:84:d4:74:2e:9d:70:0a: d6:59:6c:2f:5e:8b:63:4d:d2:34:b3:ac:67:9c:e3: 74:7d:be:2b:3c:f5:22:1e:70:7c:96:8b:c7:17:59: 2e:3e:11:57:24:25:b8:79:7e:7c:c3:c9:cf:a8:d7: 7d:da:51:31:8d:92:90:a0:c8:d8:36:d2:95:a5:a6: fc:96:fc:5c:90:8c:fa:44:9c:66:a7:44:e4:17:85: 72:03:b8:fd:96:27:89:1f:61:79:36:ee:5c:5d:74: 4b:4e:20:79:f9:77:c6:50:b2:fc:44:be:71:57:b6: ba:31:b7:fc:23:a4:19:2d:db:b6:06:33:26:e7:33: c5:7f:ee:02:04:5e:6d:c7:53:d0:01:ff:c7:ca:4c: d1:f3:31:33:6c:5a:99:bd:a5:74:c0:9e:d0:7f:1a: 68:f9:ec:6d:e3:30:17:39:c2:1a:a5:63:fd:8a:98: 8a:12:9c:52:8d:8f:b6:3d:65:3e:84:ef:6f:49:c8: f7:dc:36:d6:be:84:ff:de:45:32:b2:b6:14:4c:6f: 61:2a:25:42:3b:e1:c8:b0:d4:41:4e:ce:ef:fe:0d: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:74:0A:F8:AE:84:A4:6D:78:93:49:A5:56:08:64:27:DB:D3:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d2:7a:7e:9d:a6:59:aa:76:c2:24:cb:5f:87:f5:2d:89:20: 4f:c6:af:47:67:4f:8d:94:13:65:91:52:bb:50:f9:b2:77:b7: f7:b5:5e:b8:1d:49:cf:07:6a:68:03:7c:9f:93:4c:1b:d6:47: 0c:e4:ba:7b:85:9f:2f:aa:1b:18:43:58:c1:ad:9e:a9:bd:fd: 76:cf:18:bf:71:12:b6:0c:4e:8b:03:7a:d6:ca:4c:0c:1f:2b: 46:85:6c:24:7a:d9:9e:43:ad:62:f1:74:95:5d:0c:76:15:51: 8b:7c:77:4a:ab:93:93:1d:77:a3:60:73:2b:35:be:4f:1a:60: 69:ca:61:14:22:40:e3:92:df:9c:41:bf:3f:a5:2a:91:3a:01: b2:be:b0:5d:ad:77:20:19:cd:61:05:22:22:37:3d:df:51:37: 58:ac:c0:fc:f9:a9:b7:50:a7:8e:ff:bf:47:d0:47:55:23:76: 6c:1f:5b:f2:15:ad:6a:21:82:47:a4:01:e0:5e:02:18:97:67: b4:79:4c:08:19:1e:ca:7a:37:b8:0f:2e:1a:03:bf:69:8b:23: bf:98:58:22:03:6c:c8:62:70:0d:e0:38:e7:d8:0a:6a:d3:6c: f8:64:07:f7:05:8f:00:1c:a6:9f:45:53:93:f0:f5:9b:ed:83: 30:9d:d5:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZdGkazEY0+OCIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk N2RiNjg2NWYtYzhmMy00MDA5LTljMzMtNDQyNmEyNzhmOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9rUgVxFyVGkMgloVTzmFcww9ddckdC7IK/w y/dIGqF9NZYzO4TUdC6dcArWWWwvXotjTdI0s6xnnON0fb4rPPUiHnB8lovHF1ku PhFXJCW4eX58w8nPqNd92lExjZKQoMjYNtKVpab8lvxckIz6RJxmp0TkF4VyA7j9 lieJH2F5Nu5cXXRLTiB5+XfGULL8RL5xV7a6Mbf8I6QZLdu2BjMm5zPFf+4CBF5t x1PQAf/HykzR8zEzbFqZvaV0wJ7Qfxpo+ext4zAXOcIapWP9ipiKEpxSjY+2PWU+ hO9vScj33DbWvoT/3kUysrYUTG9hKiVCO+HIsNRBTs7v/g3VIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHSsdAr4roSkbXiTSaVWCGQn29N7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2YwNjQ2YjMtYTI3MC0z ZTkxLWE5YmItMDA1ZTQ0ZGY4ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALTSen6dplmqdsIky1+H9S2JIE/Gr0dnT42UE2WRUrtQ+bJ3t/e1 XrgdSc8HamgDfJ+TTBvWRwzkunuFny+qGxhDWMGtnqm9/XbPGL9xErYMTosDetbK TAwfK0aFbCR62Z5DrWLxdJVdDHYVUYt8d0qrk5Mdd6Ngcys1vk8aYGnKYRQiQOOS 35xBvz+lKpE6AbK+sF2tdyAZzWEFIiI3Pd9RN1iswPz5qbdQp47/v0fQR1Ujdmwf W/IVrWohgkekAeBeAhiXZ7R5TAgZHsp6N7gPLhoDv2mLI7+YWCIDbMhicA3gOOfY CmrTbPhkB/cFjwAcpp9FU5Pw9ZvtgzCd1QI= -----END CERTIFICATE-----Generated at Sun Jun 29 20:05:12 2025 by rpki-client