$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa File: 589b6e74-2743-3343-aa66-6bfc3894aa50.roa (raw, json) Hash identifier: TcMge1q9qOJGgxs2pHQ3iI4WY2PsDtIeJJL+58EekW0= Subject key identifier: D8:D7:06:9C:B1:47:3A:AC:94:CF:E3:A8:57:75:9D:57:39:4D:97:21 Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F4328584A268AAE54A64F26AE9460CB40 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 968 IP address blocks: 2602:809:300b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ae:54:a6:4f:26:ae:94:60:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=72b54e40-abd3-4d85-b7a4-6268915a9273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:1b:ea:29:17:9f:88:93:7f:2c:6a:b3:4f: 7a:47:e4:b8:81:5a:bb:52:24:ad:11:19:98:21:92: 5e:ce:45:1c:5c:06:8b:b1:95:9e:a3:a6:f1:46:80: 8e:8f:ed:b7:e2:58:f4:cd:17:f7:d7:0a:8f:71:c1: 04:a6:f7:92:b2:80:9c:92:f6:79:56:11:4f:5b:9b: f2:35:61:10:ce:3c:9b:b0:8e:8f:b8:cd:5e:37:8f: 11:66:32:fa:5d:03:86:b1:f8:cd:b0:af:0b:24:d6: 31:6b:84:c5:93:eb:ec:ff:a3:8a:38:aa:e5:e9:7e: 43:c5:a5:ac:9f:89:60:3d:46:4e:87:ec:6d:d5:07: ef:6a:e2:99:ec:6f:ed:5f:f2:34:1a:58:4c:9e:48: 46:d4:de:86:45:3f:ef:3d:44:a6:99:c6:38:5f:f3: 8d:9b:7a:7e:7b:8e:28:57:8f:3f:56:ef:d0:2e:4a: cb:11:96:c4:6a:8c:37:bc:58:30:0f:a7:17:af:36: 44:3b:e6:ee:04:b9:72:e6:14:8f:72:03:bb:25:dc: a1:7e:75:73:b7:d7:98:01:c2:6e:88:95:17:52:23: 02:9c:b8:de:f9:34:49:18:89:88:4c:50:a2:1e:68: 49:91:3e:c2:26:f6:6a:90:f0:7a:ff:b2:56:31:b0: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:06:9C:B1:47:3A:AC:94:CF:E3:A8:57:75:9D:57:39:4D:97:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:300b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6c:43:4d:4a:2b:2a:4c:4b:6e:3c:07:ca:90:16:b1:b7:f4: 6e:61:d6:24:67:ca:41:7c:a8:3b:96:2e:02:ed:5e:ba:08:f4: 12:5a:1f:9c:6e:09:c5:5e:cb:c1:ed:7d:37:44:e1:64:0d:49: 69:46:99:dd:09:cb:85:d9:d6:bf:48:0b:37:cf:4e:37:5c:87: c0:fb:1a:20:e0:76:f0:1e:fd:4f:c2:24:2a:e1:7c:bf:52:df: f9:0d:57:7b:ff:1f:43:58:8d:5b:59:fa:61:31:cb:37:45:dd: a0:b8:fb:a4:ed:66:a5:3a:5a:90:23:e4:2e:84:80:4c:e7:f0: 4b:df:96:b6:ae:92:bd:f2:da:af:cb:0e:e9:63:d1:ed:5d:16: a1:f5:9c:94:c4:62:bc:1a:23:a9:6f:30:7d:ff:ef:e6:7d:69: f5:8a:85:b3:3b:11:4e:52:c2:a4:2b:c0:57:62:63:ef:54:81: 07:70:7e:c2:4b:20:1d:b2:82:73:94:29:88:c2:96:97:94:ab: 7d:c0:ba:ae:85:0b:60:50:07:5f:84:7f:24:9a:08:0d:5f:55: a1:67:5f:5d:e5:4d:60:4c:3d:9a:a0:5b:7f:26:9f:7f:24:9f: 9d:06:47:be:0a:c2:5a:d6:d4:ca:99:86:37:c8:4e:62:16:dd: 5d:d4:7e:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEomiq5Upk8mrpRgy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NzJiNTRlNDAtYWJkMy00ZDg1LWI3YTQtNjI2ODkxNWE5MjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMwb6ikXn4iTfyxqs096R+S4gVq7UiStERmY IZJezkUcXAaLsZWeo6bxRoCOj+234lj0zRf31wqPccEEpveSsoCckvZ5VhFPW5vy NWEQzjybsI6PuM1eN48RZjL6XQOGsfjNsK8LJNYxa4TFk+vs/6OKOKrl6X5DxaWs n4lgPUZOh+xt1QfvauKZ7G/tX/I0GlhMnkhG1N6GRT/vPUSmmcY4X/ONm3p+e44o V48/Vu/QLkrLEZbEaow3vFgwD6cXrzZEO+buBLly5hSPcgO7JdyhfnVzt9eYAcJu iJUXUiMCnLje+TRJGImITFCiHmhJkT7CJvZqkPB6/7JWMbCY9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjXBpyxRzqslM/jqFd1nVc5TZchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvNTg5YjZlNzQtMjc0My0z MzQzLWFhNjYtNmJmYzM4OTRhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICTAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFsQ01KKypMS248B8qQFrG39G5h1iRnykF8qDuWLgLtXroI9BJa H5xuCcVey8HtfTdE4WQNSWlGmd0Jy4XZ1r9ICzfPTjdch8D7GiDgdvAe/U/CJCrh fL9S3/kNV3v/H0NYjVtZ+mExyzdF3aC4+6TtZqU6WpAj5C6EgEzn8Evflraukr3y 2q/LDulj0e1dFqH1nJTEYrwaI6lvMH3/7+Z9afWKhbM7EU5SwqQrwFdiY+9UgQdw fsJLIB2ygnOUKYjClpeUq33Auq6FC2BQB1+EfySaCA1fVaFnX13lTWBMPZqgW38m n38kn50GR74KwlrW1MqZhjfITmIW3V3Ufp4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:15:18 2025 by rpki-client