$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa File: 05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa (raw, json) Hash identifier: ZBfc035nCvNxo8EWQ1uSutQSg5Y4sPDzjKh8LxhC6wM= Subject key identifier: 9F:DC:BA:93:A7:55:E5:C1:49:63:F0:12:2C:68:A1:09:B3:C7:45:F1 Certificate issuer: /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Certificate serial: 010D0C9F4328584A612B1C31E1414D58235F9420 Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 401275 IP address blocks: 2602:f84f::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1c:31:e1:41:4d:58:23:5f:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=c8fcd95a-f62d-4cc2-bce1-9af0889b8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:3d:23:53:91:78:e3:b8:53:33:95:1a:e3: a7:d9:19:cd:67:c7:08:7c:33:14:c0:f0:cb:d8:73: c0:c2:c2:83:66:ad:61:fc:32:61:d4:3d:7b:9c:64: 59:32:14:15:13:25:82:6c:0e:22:a3:95:f6:e8:41: 2f:c7:1e:c4:72:20:d6:5d:12:bd:85:29:c0:f1:89: 68:b3:20:00:ca:97:67:e6:f7:f0:5f:05:a3:9d:d8: 61:7c:1f:25:c6:76:82:fe:c7:08:ed:7f:c8:ae:08: a4:c9:bc:49:8d:96:fb:ba:0c:16:64:86:99:fd:15: 8b:f3:1b:8b:e3:c7:94:d4:e8:60:f7:22:ab:ca:5c: f0:27:0c:3e:2a:70:e2:22:03:2e:cc:ff:bb:0a:00: 7b:a2:59:d4:81:e6:0b:4f:0b:82:a4:a8:af:f4:39: 03:07:82:eb:15:ca:5c:d0:68:56:d5:62:27:a3:4e: 03:5c:89:9f:72:f3:68:80:4e:a6:76:fc:d4:99:cb: 08:78:aa:92:03:6e:7b:09:2e:e9:9d:05:55:dc:c3: 0a:a4:79:09:ce:7f:8c:3a:f0:db:ca:f3:84:2a:7f: ac:57:df:ba:3b:3a:b1:fc:64:28:1d:e4:04:1a:54: 06:39:9d:4c:a9:9c:4c:9b:10:b9:e0:4e:03:c0:f8: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DC:BA:93:A7:55:E5:C1:49:63:F0:12:2C:68:A1:09:B3:C7:45:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl X509v3 Authority Key Identifier: keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cf:5f:cc:00:9d:17:ef:e3:8a:8e:a1:9d:51:fc:ec:2b:1f: 9b:f0:32:1c:79:76:f0:0e:d3:32:ee:c7:99:8f:87:9d:59:d1: 0a:a4:b5:b5:1a:69:c9:b0:33:d2:fb:72:b8:bc:3c:e4:77:57: 40:b8:87:23:c2:9d:52:b3:64:bd:6e:b3:1e:56:d3:2e:81:df: 92:bb:b8:09:c5:8f:c7:09:08:a7:3d:3f:55:0d:71:b4:91:9a: 4c:85:d6:48:d4:0c:91:80:44:71:86:89:2c:8f:b9:c0:60:95: 5a:90:f2:62:15:ae:58:af:03:1f:9e:6c:6b:ab:97:40:d2:84: 9f:e4:4d:ce:7d:cf:7b:a8:81:78:d2:e8:12:48:ba:f1:57:6c: 63:3b:20:aa:02:69:71:5d:43:5d:73:58:c2:cb:df:de:98:de: d7:b2:79:ce:d4:75:c6:ba:cd:2f:7f:30:64:1d:35:2c:5a:ad: e5:38:1d:58:08:ea:89:1b:4f:2d:ce:b9:4b:2c:cc:09:e4:b6: de:c9:b8:04:25:38:24:18:85:94:84:af:af:80:f8:52:21:af: e6:91:16:f5:4e:2b:1b:d2:28:a5:e8:86:95:87:5c:c9:b9:d7: 33:61:66:0d:12:eb:f4:63:77:bc:eb:f7:8b:0d:58:7b:1f:68: 74:95:86:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEphKxwx4UFNWCNflCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkZjM3MzgtZmRiMi00OGMwLWE1NDgtYjllY2M3ZjI4 NzA5MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YzhmY2Q5NWEtZjYyZC00Y2MyLWJjZTEtOWFmMDg4OWI4ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv49I1OReOO4UzOVGuOn2RnNZ8cIfDMUwPDL 2HPAwsKDZq1h/DJh1D17nGRZMhQVEyWCbA4io5X26EEvxx7EciDWXRK9hSnA8Ylo syAAypdn5vfwXwWjndhhfB8lxnaC/scI7X/IrgikybxJjZb7ugwWZIaZ/RWL8xuL 48eU1Ohg9yKrylzwJww+KnDiIgMuzP+7CgB7olnUgeYLTwuCpKiv9DkDB4LrFcpc 0GhW1WIno04DXImfcvNogE6mdvzUmcsIeKqSA257CS7pnQVV3MMKpHkJzn+MOvDb yvOEKn+sV9+6Ozqx/GQoHeQEGlQGOZ1MqZxMmxC54E4DwPiwowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ/cupOnVeXBSWPwEixooQmzx0XxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRm MzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdmMjg3MDkvMDVmMGMxZDItNmY3My0z MTZiLWJmZTAtN2VkZGI3M2FhOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjRkZjM3MzgtZmRiMi00OGMwLWE1 NDgtYjllY2M3ZjI4NzA5L2Y0ZGYzNzM4LWZkYjItNDhjMC1hNTQ4LWI5ZWNjN2Yy ODcwOS5jcmwwHwYDVR0jBBgwFoAUEJyiTgXoTZ+43wbmaUXd3C3r9f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVj YzdmMjg3MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4TwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS89fzACdF+/jio6hnVH87Csfm/AyHHl28A7TMu7HmY+HnVnRCqS1 tRppybAz0vtyuLw85HdXQLiHI8KdUrNkvW6zHlbTLoHfkru4CcWPxwkIpz0/VQ1x tJGaTIXWSNQMkYBEcYaJLI+5wGCVWpDyYhWuWK8DH55sa6uXQNKEn+RNzn3Pe6iB eNLoEki68VdsYzsgqgJpcV1DXXNYwsvf3pje17J5ztR1xrrNL38wZB01LFqt5Tgd WAjqiRtPLc65SyzMCeS23sm4BCU4JBiFlISvr4D4UiGv5pEW9U4rG9IopeiGlYdc ybnXM2FmDRLr9GN3vOv3iw1Yex9odJWGAQ== -----END CERTIFICATE-----Generated at Wed Jul 2 04:18:22 2025 by rpki-client