$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa File: a818c84d-be15-3978-bb90-e541b1988320.roa (raw, json) Hash identifier: aP9QXAo66cuf1g+dU+y94G/Jho/ya98vPMUc8kf5gxE= Subject key identifier: A9:36:BA:8E:EC:39:66:91:59:20:D2:54:9D:6F:C2:42:19:5E:C0:81 Certificate issuer: /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b Certificate serial: 010D0C9F4328584A03A548A4BFCB8CF51DB929E0 Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 211544 IP address blocks: 2602:fc8b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:48:a4:bf:cb:8c:f5:1d:b9:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=a20798d7-9df2-4cc0-9d6f-7bc3676c37be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:c5:a3:1c:f3:68:68:12:f2:91:77:14:11: 4a:26:fc:97:99:a8:18:34:ed:90:cf:0b:23:c8:34: 59:cb:d4:e9:16:08:cf:12:3c:c9:ff:e9:5a:48:8a: 41:ee:18:d5:96:59:eb:10:99:a2:1b:8c:6e:4f:8d: 22:83:af:e4:f4:fd:99:da:0f:35:7f:92:8b:67:05: 4c:c9:67:e0:2c:7f:a2:fd:42:5c:9a:93:46:75:48: 00:fc:a8:0d:13:fc:f5:72:2f:66:c1:f9:24:d4:40: a5:d9:b4:bb:b7:8b:0c:96:9e:87:33:68:65:d3:a3: 3e:61:51:68:b5:ef:1d:90:0b:6f:82:fe:25:78:90: 1f:51:0e:20:b6:9d:17:7e:14:9a:cd:15:7b:3a:f4: fd:82:fa:46:1e:3b:69:e6:92:f6:16:9b:c7:a6:76: 0c:93:01:37:99:16:ae:e7:0c:69:b2:db:e9:7a:eb: 2f:4a:a6:14:2a:8c:e0:74:70:a2:ac:b1:8f:98:c8: d2:29:e5:2d:98:9b:72:1b:54:bd:34:9f:c2:81:64: 11:74:e1:38:cc:04:8f:8e:8f:da:6f:64:52:ae:66: 68:e0:a4:74:1d:d1:3e:d1:a2:a7:76:9a:54:d7:22: 87:9f:73:ee:7e:f7:02:97:02:ee:e2:a4:41:4c:74: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:BA:8E:EC:39:66:91:59:20:D2:54:9D:6F:C2:42:19:5E:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl X509v3 Authority Key Identifier: keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc8b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c0:1e:59:2c:cf:4d:eb:a2:3c:de:2b:34:60:c3:fd:47:0b: 68:0f:3d:9e:af:f0:20:63:2e:6b:8e:0e:33:f6:df:9d:02:bc: 11:83:4b:aa:99:5c:af:f9:15:f5:6a:c9:52:cd:78:93:c8:c1: 0a:e0:2a:7c:99:1e:31:43:da:32:22:26:3f:7a:f8:d2:aa:24: b1:78:d2:64:bd:82:06:91:dc:7a:bf:38:33:fe:81:87:54:7c: 2b:f2:ef:3c:c4:82:b4:fa:8a:41:36:f6:70:66:34:d3:90:74: d5:22:5a:41:c6:ae:ed:d1:a9:56:73:f4:b8:05:0d:6f:fd:17: 22:9f:31:21:55:c5:d2:76:c2:31:33:0c:d6:cd:d5:b3:47:3e: e3:c8:53:10:3c:d5:4a:ae:39:39:37:59:a2:cf:1b:c2:11:00: 38:f9:47:5b:0b:1b:ea:79:92:42:8a:09:31:71:61:25:2d:d2: 6b:be:53:29:46:ba:a0:8b:b5:42:0f:c8:52:12:17:9f:7f:2b: c3:e2:81:8d:2e:f5:30:e8:ff:49:07:f5:d4:ed:88:4f:c8:f4: 05:0d:e1:8a:14:30:4d:53:17:86:bc:09:39:bf:3d:63:df:c8: 43:02:65:be:79:a0:90:c2:43:d6:9e:43:72:dc:13:91:43:42: db:c6:d3:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoDpUikv8uM9R25KeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdjYjE3ZDQtOTUwMi00ZDM4LWI1MWEtMDJhZTdiZjMx MzdiMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YTIwNzk4ZDctOWRmMi00Y2MwLTlkNmYtN2JjMzY3NmMzN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha7FoxzzaGgS8pF3FBFKJvyXmagYNO2Qzwsj yDRZy9TpFgjPEjzJ/+laSIpB7hjVllnrEJmiG4xuT40ig6/k9P2Z2g81f5KLZwVM yWfgLH+i/UJcmpNGdUgA/KgNE/z1ci9mwfkk1ECl2bS7t4sMlp6HM2hl06M+YVFo te8dkAtvgv4leJAfUQ4gtp0XfhSazRV7OvT9gvpGHjtp5pL2FpvHpnYMkwE3mRau 5wxpstvpeusvSqYUKozgdHCirLGPmMjSKeUtmJtyG1S9NJ/CgWQRdOE4zASPjo/a b2RSrmZo4KR0HdE+0aKndppU1yKHn3PufvcClwLu4qRBTHQOYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKk2uo7sOWaRWSDSVJ1vwkIZXsCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2Ni MTdkNC05NTAyLTRkMzgtYjUxYS0wMmFlN2JmMzEzN2IvYTgxOGM4NGQtYmUxNS0z OTc4LWJiOTAtZTU0MWIxOTg4MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdjYjE3ZDQtOTUwMi00ZDM4LWI1 MWEtMDJhZTdiZjMxMzdiLzA3Y2IxN2Q0LTk1MDItNGQzOC1iNTFhLTAyYWU3YmYz MTM3Yi5jcmwwHwYDVR0jBBgwFoAUwH3zKRqRjc36N2MZ7igizrWINA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2NiMTdkNC05NTAyLTRkMzgtYjUxYS0wMmFl N2JmMzEzN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8iwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ8AeWSzPTeuiPN4rNGDD/UcLaA89nq/wIGMua44OM/bfnQK8EYNL qplcr/kV9WrJUs14k8jBCuAqfJkeMUPaMiImP3r40qoksXjSZL2CBpHcer84M/6B h1R8K/LvPMSCtPqKQTb2cGY005B01SJaQcau7dGpVnP0uAUNb/0XIp8xIVXF0nbC MTMM1s3Vs0c+48hTEDzVSq45OTdZos8bwhEAOPlHWwsb6nmSQooJMXFhJS3Sa75T KUa6oIu1Qg/IUhIXn38rw+KBjS71MOj/SQf11O2IT8j0BQ3hihQwTVMXhrwJOb89 Y9/IQwJlvnmgkMJD1p5DctwTkUNC28bTnA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:53:51 2025 by rpki-client