$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa File: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json) Hash identifier: 9lqSzf178zULM7AovkIha+Ju+CqjtxbUAR+LHZitMFo= Subject key identifier: 35:4D:E9:E1:E2:C4:9E:5B:74:5A:9C:47:E5:61:22:06:8B:2D:42:3D Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584A29556C53D75F145BE6944B00 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 54309 IP address blocks: 2602:fa3c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6c:53:d7:5f:14:5b:e6:94:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=d9d6f52a-b885-4e35-a0c0-31a5d5a1d195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:64:cc:7b:14:d4:58:cb:97:81:6c:97:7c: cf:6c:45:38:8a:2c:de:30:02:2a:4a:4d:c7:4b:19: 75:3e:93:f6:4b:ea:3c:59:19:da:0b:a3:cb:31:42: c8:87:ce:d5:39:b3:3e:73:5d:8b:18:2b:c0:8a:46: 8f:d3:eb:56:6d:df:2a:e6:ca:3c:95:41:e3:80:c7: 1f:26:b6:93:f3:63:50:c3:f7:7f:cc:19:89:76:c9: 47:d0:d5:58:38:e3:d7:35:0b:c6:e1:f0:e9:32:db: 1e:64:f1:55:0b:a7:7f:d7:4b:18:0e:b9:cd:9c:f6: cb:34:58:20:f7:af:d8:60:99:28:e5:84:95:aa:0c: ca:48:74:4c:6d:18:ec:d3:ce:15:e1:55:d6:ea:e5: b1:eb:b7:d7:61:64:27:1f:6d:05:5b:c1:17:a6:db: 86:5c:a2:d8:39:50:f1:9d:3b:52:aa:e3:49:92:0a: e6:53:17:c9:38:1b:76:4e:97:27:56:17:02:2e:28: 1b:f0:b6:e8:fc:4f:df:14:49:98:98:3a:7c:7f:85: 42:c9:fb:f5:a5:5f:66:09:ac:ae:f0:12:59:a0:85: 1c:53:41:8d:6f:62:be:17:dc:62:c0:b3:05:5e:7b: a2:55:05:b0:d4:8e:89:63:57:f2:78:95:ec:67:3e: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:E9:E1:E2:C4:9E:5B:74:5A:9C:47:E5:61:22:06:8B:2D:42:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa3c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2d:10:0e:af:16:42:01:7a:11:34:53:d3:fb:59:ba:ed:99: da:0c:49:fb:dc:d4:e0:f3:fe:e8:3a:b2:4e:59:53:56:b6:f0: 81:25:ef:fe:9e:7b:9c:c6:c0:e4:e1:fb:2b:29:52:24:80:26: d7:c5:0e:72:67:74:3e:a6:46:fc:bb:06:b2:6c:ca:e4:b1:58: 0a:17:a7:86:a3:ac:8b:b5:3b:2d:54:7f:d7:1b:7b:5f:07:24: fb:76:57:17:be:72:7d:6a:3a:65:1c:65:9d:5f:d9:25:6e:62: 6c:39:2f:57:6e:75:6f:67:77:a6:86:1e:05:ca:ea:41:0f:b7: b0:a3:d8:f2:33:dd:34:c0:f5:e4:f2:95:40:31:55:65:ee:df: ab:6b:9d:bd:c5:6f:24:39:70:95:fe:62:d3:37:63:5b:7e:26: 8e:43:17:4f:77:49:28:be:af:19:61:af:89:a6:3e:bd:cb:4d: 3e:c4:85:c2:00:8a:55:ef:a5:80:e5:e1:7e:fe:4a:b6:88:6e: 07:48:9b:f2:b2:d1:8d:c3:f3:2f:30:61:bd:4f:25:f8:90:ac: 8a:d9:6a:13:6f:2e:be:51:ca:bb:37:89:25:07:26:d3:be:e1: ec:ae:6d:81:a5:83:c6:a3:5d:b5:30:45:e4:0c:14:05:b0:6d: d3:56:a1:7f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEopVWxT118UW+aUSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ZDlkNmY1MmEtYjg4NS00ZTM1LWEwYzAtMzFhNWQ1YTFkMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs89kzHsU1FjLl4Fsl3zPbEU4iizeMAIqSk3H Sxl1PpP2S+o8WRnaC6PLMULIh87VObM+c12LGCvAikaP0+tWbd8q5so8lUHjgMcf JraT82NQw/d/zBmJdslH0NVYOOPXNQvG4fDpMtseZPFVC6d/10sYDrnNnPbLNFgg 96/YYJko5YSVqgzKSHRMbRjs084V4VXW6uWx67fXYWQnH20FW8EXptuGXKLYOVDx nTtSquNJkgrmUxfJOBt2TpcnVhcCLigb8Lbo/E/fFEmYmDp8f4VCyfv1pV9mCayu 8BJZoIUcU0GNb2K+F9xiwLMFXnuiVQWw1I6JY1fyeJXsZz40VQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDVN6eHixJ5bdFqcR+VhIgaLLUI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZDY2YmEzM2UtMWE4Ny0z ZjdhLWEzY2EtODI5YzIzZGIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANS0QDq8WQgF6ETRT0/tZuu2Z2gxJ+9zU4PP+6DqyTllTVrbwgSXv /p57nMbA5OH7KylSJIAm18UOcmd0PqZG/LsGsmzK5LFYChenhqOsi7U7LVR/1xt7 Xwck+3ZXF75yfWo6ZRxlnV/ZJW5ibDkvV251b2d3poYeBcrqQQ+3sKPY8jPdNMD1 5PKVQDFVZe7fq2udvcVvJDlwlf5i0zdjW34mjkMXT3dJKL6vGWGviaY+vctNPsSF wgCKVe+lgOXhfv5KtohuB0ib8rLRjcPzLzBhvU8l+JCsitlqE28uvlHKuzeJJQcm 077h7K5tgaWDxqNdtTBF5AwUBbBt01ahfw== -----END CERTIFICATE-----Generated at Mon Jun 30 00:30:14 2025 by rpki-client