$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa File: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (raw, json) Hash identifier: eN867JaQGwwLZms0zS28qG5x5xroiZrq67ep99m4DSQ= Subject key identifier: 25:44:FE:30:74:7B:C7:09:46:12:85:C3:C7:0E:6C:0A:78:90:0D:AA Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584A46A5AEF95EC121C3FE5A4580 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 401431 IP address blocks: 2602:f7c5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:ae:f9:5e:c1:21:c3:fe:5a:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=0681841a-fbba-4a85-8c6d-2c4049e5a1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:d7:b4:8d:5f:d1:15:2e:1d:b3:03:c4:c3: 1d:e3:5b:20:9e:48:49:09:07:a5:93:75:23:c1:57: 12:fd:2e:19:4a:0f:87:97:f1:99:20:d6:e5:fd:19: 4b:8d:18:69:02:6a:90:0c:5e:ad:57:8a:79:00:09: a6:5e:53:56:92:8c:82:42:d8:63:68:4b:77:d1:a7: 56:23:9c:64:f4:f4:a8:70:f0:c5:48:22:ac:a6:15: 6a:03:9f:d0:b9:39:f1:02:91:9c:f5:a2:85:b7:ad: 32:b7:90:ef:80:56:f5:fc:f8:df:b2:42:72:b3:0a: 68:c5:86:a6:29:01:bb:1b:44:7e:30:23:6a:4e:fe: b6:eb:16:6c:28:3d:9b:d6:13:22:69:85:fe:1a:7e: e9:0a:49:fa:6d:19:d5:f9:39:1f:6a:b2:d0:84:cb: f9:c8:05:6b:55:5a:b6:93:4c:d9:a2:0c:1a:a9:92: 00:bc:85:b4:e4:7f:a9:ed:bd:d1:ef:1a:ce:ed:07: 31:c7:3a:0b:3a:fc:a7:a4:8d:4a:15:5a:02:f0:c6: 05:d0:29:99:61:5d:4e:52:d6:9f:96:f0:1b:13:28: 68:70:a0:de:96:36:db:e9:95:40:d2:c2:5b:7d:fd: ad:8c:ea:86:15:57:94:d0:2f:4a:51:04:67:d3:2a: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:FE:30:74:7B:C7:09:46:12:85:C3:C7:0E:6C:0A:78:90:0D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:20:6c:19:85:44:35:b0:76:b1:6c:b2:53:87:c8:38:f7:aa: 23:a1:72:85:bf:be:85:17:9a:d1:0b:73:fd:27:14:bd:64:97: 57:a6:50:50:e2:dd:b9:38:a4:40:aa:63:ec:17:64:d7:c6:60: 10:22:dd:30:55:ed:d0:30:3d:59:89:a1:1e:fa:a9:5e:a2:a4: e6:14:64:4b:35:3a:53:39:24:72:92:21:62:3e:f9:f9:02:2f: 91:ea:2f:da:e8:64:fe:b3:cd:da:71:95:d8:01:b1:d4:a6:0b: b7:e8:d8:99:63:b1:45:d6:88:84:46:1d:7d:47:bd:11:b7:96: 78:0d:75:a1:2c:07:0f:2a:cc:48:e6:ac:55:42:3f:82:12:60: fd:22:b3:63:3b:de:b9:0f:9a:6c:76:f1:86:09:94:19:4f:bc: 78:f8:04:52:dd:e5:99:d8:77:03:71:11:de:92:76:13:4f:d8: 1d:42:d3:a3:7b:91:8c:59:23:16:36:8d:59:7e:a4:68:36:f1: aa:a3:f1:95:8c:88:8d:05:72:64:51:87:e0:8a:6b:22:c2:e4: 53:fa:f6:88:20:3f:bc:86:9b:d7:8a:ea:f1:34:32:b1:8a:41: fa:ad:9b:da:80:1d:17:8b:d9:72:6b:25:07:44:e6:d9:5f:c9: 34:40:47:ec -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpGpa75XsEhw/5aRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk MDY4MTg0MWEtZmJiYS00YTg1LThjNmQtMmM0MDQ5ZTVhMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH7XtI1f0RUuHbMDxMMd41sgnkhJCQelk3Uj wVcS/S4ZSg+Hl/GZINbl/RlLjRhpAmqQDF6tV4p5AAmmXlNWkoyCQthjaEt30adW I5xk9PSocPDFSCKsphVqA5/QuTnxApGc9aKFt60yt5DvgFb1/PjfskJyswpoxYam KQG7G0R+MCNqTv626xZsKD2b1hMiaYX+Gn7pCkn6bRnV+TkfarLQhMv5yAVrVVq2 k0zZogwaqZIAvIW05H+p7b3R7xrO7QcxxzoLOvynpI1KFVoC8MYF0CmZYV1OUtaf lvAbEyhocKDeljbb6ZVA0sJbff2tjOqGFVeU0C9KUQRn0yqk/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCVE/jB0e8cJRhKFw8cObAp4kA2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvODQyZTQzZTEtOTY4Ny0z NDgyLWFhNGMtZTIwYjkwMjBhNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfSBsGYVENbB2sWyyU4fIOPeqI6Fyhb++hRea0Qtz/ScUvWSXV6ZQ UOLduTikQKpj7Bdk18ZgECLdMFXt0DA9WYmhHvqpXqKk5hRkSzU6UzkkcpIhYj75 +QIvkeov2uhk/rPN2nGV2AGx1KYLt+jYmWOxRdaIhEYdfUe9EbeWeA11oSwHDyrM SOasVUI/ghJg/SKzYzveuQ+abHbxhgmUGU+8ePgEUt3lmdh3A3ER3pJ2E0/YHULT o3uRjFkjFjaNWX6kaDbxqqPxlYyIjQVyZFGH4IprIsLkU/r2iCA/vIab14rq8TQy sYpB+q2b2oAdF4vZcmslB0Tm2V/JNEBH7A== -----END CERTIFICATE-----Generated at Mon Jun 30 22:25:53 2025 by rpki-client