$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa File: 21ed223f-8609-37c0-afbe-eeed3f862822.roa (raw, json) Hash identifier: Xb9bslnzKbn4NMpudmr4/nDKF2Dm+tDwTxKcjlSQdkk= Subject key identifier: 4F:25:0D:FF:59:8E:A0:61:63:CE:6A:99:06:54:F6:90:A8:1B:CB:92 Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584A331AF38C81A1FA26FD60E340 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 2602:fa28:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f3:8c:81:a1:fa:26:fd:60:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=9f166ae9-f4a0-43ba-84a7-2697c01cec81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:7c:53:be:84:ab:42:0c:3b:1f:ec:8c:c8: 7c:ba:9d:c1:93:17:13:08:38:24:60:61:7d:52:b5: be:c8:41:28:e1:76:bf:b1:ed:c1:a9:63:34:70:24: 0e:ea:ba:bd:29:1a:00:70:db:42:f4:10:ca:a0:81: d3:31:cf:5a:99:27:77:a5:0d:2d:30:45:2c:b5:28: a3:2c:41:cb:49:04:b6:d9:b3:48:fa:9c:32:9a:48: ff:c6:fd:98:51:e2:13:7e:2f:3d:d3:89:aa:16:0a: 66:28:36:a0:7c:e0:fb:db:20:4b:f9:50:13:38:b3: c9:5d:1b:1a:33:f8:33:46:35:5c:d6:1b:8b:5e:cc: 4f:f6:2a:5e:c7:d7:da:4d:6c:ee:ba:a3:2b:ee:48: ee:48:18:00:93:06:7d:25:35:c7:21:18:41:23:b3: 67:59:f2:fa:80:a0:f3:05:fc:2f:24:ab:35:71:d2: 10:11:84:e9:17:95:20:a9:26:01:e0:a6:e5:10:17: 4a:43:75:e7:48:77:1b:42:49:89:16:e4:e5:00:7f: 92:9a:c5:fe:08:45:51:fa:55:aa:c6:6a:79:da:a2: 67:55:d0:e7:b3:90:f1:d6:02:fb:9c:e8:e8:d9:7a: 4c:3c:0c:7e:26:54:15:d1:b6:fd:81:a3:bc:8b:40: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:0D:FF:59:8E:A0:61:63:CE:6A:99:06:54:F6:90:A8:1B:CB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa28:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:df:98:d8:78:ae:51:df:46:bf:03:87:40:76:46:43:a4:94: 1c:1c:9a:63:b8:99:aa:e7:9d:fb:3e:54:2e:38:88:23:ea:00: 89:21:39:81:a9:89:24:5b:a4:b6:15:ed:ec:d2:05:61:da:9e: 43:4c:4f:1e:65:27:d8:8c:93:c7:53:f7:07:f8:bc:16:94:c2: de:82:a3:e0:6c:20:3c:da:20:d9:e1:ea:32:c6:00:b2:9d:8e: dc:6e:5f:89:a2:67:c7:18:ba:27:26:c2:a5:4d:48:9c:97:95: f2:c1:43:b4:01:ab:55:cf:53:c2:54:d2:af:7d:1a:84:33:48: f3:94:a8:f9:d6:94:67:bd:e9:5f:a3:08:3d:36:5c:e4:f9:e0: 2a:25:c3:d6:e0:e3:34:f0:b7:bd:1c:f4:c0:95:0c:10:a3:32: 39:5e:8a:7d:f4:10:ca:27:e9:93:af:0e:d9:d8:83:a7:71:2b: b8:ad:97:dc:93:0d:f5:9b:7e:b6:e1:f4:32:3c:50:56:fc:c5: c0:59:69:80:71:9c:d7:9c:f7:f3:c7:1f:9a:d4:c4:53:b9:5f: df:df:a7:01:1c:50:2e:7e:b8:78:a6:78:7f:a1:a4:39:56:94: b2:1b:72:bd:a6:fd:3f:d7:e6:2e:a7:77:2d:b3:de:5e:c9:4c: 9c:cc:bd:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEozGvOMgaH6Jv1g40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk OWYxNjZhZTktZjRhMC00M2JhLTg0YTctMjY5N2MwMWNlYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14d8U76Eq0IMOx/sjMh8up3BkxcTCDgkYGF9 UrW+yEEo4Xa/se3BqWM0cCQO6rq9KRoAcNtC9BDKoIHTMc9amSd3pQ0tMEUstSij LEHLSQS22bNI+pwymkj/xv2YUeITfi8904mqFgpmKDagfOD72yBL+VATOLPJXRsa M/gzRjVc1huLXsxP9ipex9faTWzuuqMr7kjuSBgAkwZ9JTXHIRhBI7NnWfL6gKDz BfwvJKs1cdIQEYTpF5UgqSYB4KblEBdKQ3XnSHcbQkmJFuTlAH+SmsX+CEVR+lWq xmp52qJnVdDns5Dx1gL7nOjo2XpMPAx+JlQV0bb9gaO8i0CRqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8lDf9ZjqBhY85qmQZU9pCoG8uSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvMjFlZDIyM2YtODYwOS0z N2MwLWFmYmUtZWVlZDNmODYyODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6KAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLfmNh4rlHfRr8Dh0B2RkOklBwcmmO4marnnfs+VC44iCPqAIkh OYGpiSRbpLYV7ezSBWHankNMTx5lJ9iMk8dT9wf4vBaUwt6Co+BsIDzaINnh6jLG ALKdjtxuX4miZ8cYuicmwqVNSJyXlfLBQ7QBq1XPU8JU0q99GoQzSPOUqPnWlGe9 6V+jCD02XOT54Colw9bg4zTwt70c9MCVDBCjMjlein30EMon6ZOvDtnYg6dxK7it l9yTDfWbfrbh9DI8UFb8xcBZaYBxnNec9/PHH5rUxFO5X9/fpwEcUC5+uHimeH+h pDlWlLIbcr2m/T/X5i6ndy2z3l7JTJzMvSQ= -----END CERTIFICATE-----Generated at Sun Jun 29 10:18:53 2025 by rpki-client