$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/711e28fe-0e2e-3f69-aa45-eba3be7e2f5b.roa File: 711e28fe-0e2e-3f69-aa45-eba3be7e2f5b.roa (raw, json) Hash identifier: njnCDKx5BzgiIJysz3axZgJLdjUmhCnYdLw0d2PsYsI= Subject key identifier: 52:37:A5:0F:3A:29:6F:1B:21:A5:34:E9:9F:9D:ED:FF:C1:B9:D2:BF Certificate issuer: /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Certificate serial: 010D0C9F4328584AD7D11681033448C28E2CE000 Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/711e28fe-0e2e-3f69-aa45-eba3be7e2f5b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 400773 IP address blocks: 2602:ff65:e27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:16:81:03:34:48:c2:8e:2c:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=a6ecebfe-2657-4845-81d6-172930a96041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:c4:5e:a2:bc:73:5a:4b:15:e0:95:c9:76: 87:f9:56:7f:64:55:ff:60:ea:3e:47:a3:ca:df:5c: 3c:df:21:6b:a0:1f:e9:ed:b4:54:f1:78:56:64:21: 88:15:2d:32:05:f0:6c:0f:95:ce:a5:fb:03:88:5d: 25:e9:7e:90:35:78:cc:99:69:00:e2:67:74:02:5b: d0:fb:9a:79:50:64:16:b6:e8:8e:2b:b8:44:74:55: ad:6d:da:34:ce:94:ae:d6:63:ef:4e:c0:98:84:d8: 76:4f:0c:92:4a:cb:c1:e3:36:14:57:08:f0:e6:a8: a9:3d:a6:fb:24:98:86:51:af:45:92:d2:82:fc:18: 50:1e:1b:3d:e6:bc:c5:81:b3:97:91:ea:ea:c8:5a: 6c:20:29:52:2e:7f:87:da:d6:77:41:82:ee:49:c6: be:e2:b2:76:0b:43:63:25:d6:b4:ce:06:b6:94:90: ca:0e:f7:79:74:3f:38:69:cf:8d:98:8c:1c:f9:a9: 0c:b2:9c:9e:4a:10:9c:38:d1:22:38:3b:90:7f:bc: 69:34:b4:f3:33:57:3c:3d:9f:93:cd:43:ea:f7:2b: f0:5d:bb:8d:16:af:ab:01:e7:57:e6:56:60:98:71: 3f:c9:33:72:17:36:cf:a6:33:dd:1f:8a:4e:ad:0b: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:A5:0F:3A:29:6F:1B:21:A5:34:E9:9F:9D:ED:FF:C1:B9:D2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/711e28fe-0e2e-3f69-aa45-eba3be7e2f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl X509v3 Authority Key Identifier: keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff65:e27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:31:88:f5:62:98:4c:69:6c:3a:e5:4f:e4:eb:f3:a1:34:a5: cd:ff:dd:f1:86:f7:e1:72:98:a6:08:86:72:72:93:c6:3e:8a: 56:90:2a:80:57:f8:05:e3:a4:bb:8b:93:fc:f6:cb:57:92:f6: 97:cc:42:1f:93:6d:cd:8d:9e:8f:e1:1a:fd:34:74:f0:11:f4: b5:8e:76:5c:4f:79:47:0c:cb:c0:a1:20:ce:97:55:fe:01:9e: f7:21:bc:51:14:1d:93:be:22:db:9e:db:2a:60:e0:45:8d:2c: 27:1b:d1:ac:7c:f1:5a:87:50:7b:a8:92:07:c5:26:9b:d7:bc: 5a:b6:9d:ba:4e:69:94:f4:ef:53:08:d9:ec:9d:37:34:b1:2f: b1:b8:35:a6:16:e2:05:d9:b4:b7:37:80:77:3b:89:2d:da:ed: e6:02:0d:b8:a1:1c:c9:fa:ce:ce:81:44:ee:88:14:e0:e1:80: 5f:69:b4:89:9a:af:fc:6c:79:c7:3b:ae:04:21:0e:b6:51:c8: fa:a9:4c:98:9d:09:08:20:37:fe:1c:fe:fd:99:47:c5:db:ea: c4:31:0c:b1:70:c5:fb:89:94:5a:20:3e:3c:70:a0:5b:1c:c2: 95:0e:67:10:45:a4:07:46:3a:9f:ee:d4:ea:6a:68:90:fa:dd: c1:f9:c5:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0RaBAzRIwo4s4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM0OTQ0YzQtMDQ1Ni00YzNjLTliYTctOTBlM2JjYmU0 N2I4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YTZlY2ViZmUtMjY1Ny00ODQ1LTgxZDYtMTcyOTMwYTk2MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS7EXqK8c1pLFeCVyXaH+VZ/ZFX/YOo+R6PK 31w83yFroB/p7bRU8XhWZCGIFS0yBfBsD5XOpfsDiF0l6X6QNXjMmWkA4md0AlvQ +5p5UGQWtuiOK7hEdFWtbdo0zpSu1mPvTsCYhNh2TwySSsvB4zYUVwjw5qipPab7 JJiGUa9FktKC/BhQHhs95rzFgbOXkerqyFpsIClSLn+H2tZ3QYLuSca+4rJ2C0Nj Jda0zga2lJDKDvd5dD84ac+NmIwc+akMspyeShCcONEiODuQf7xpNLTzM1c8PZ+T zUPq9yvwXbuNFq+rAedX5lZgmHE/yTNyFzbPpjPdH4pOrQvWSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFI3pQ86KW8bIaU06Z+d7f/BudK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YzQ5 NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNiZTQ3YjgvNzExZTI4ZmUtMGUyZS0z ZjY5LWFhNDUtZWJhM2JlN2UyZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWM0OTQ0YzQtMDQ1Ni00YzNjLTli YTctOTBlM2JjYmU0N2I4LzVjNDk0NGM0LTA0NTYtNGMzYy05YmE3LTkwZTNiY2Jl NDdiOC5jcmwwHwYDVR0jBBgwFoAUs3IEvVfCQfk7jbpbYbLLhqc/KTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUz YmNiZTQ3YjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/ZQ4n MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4xiPVimExpbDrlT+Tr86E0pc3/3fGG9+FymKYIhnJyk8Y+ilaQ KoBX+AXjpLuLk/z2y1eS9pfMQh+Tbc2Nno/hGv00dPAR9LWOdlxPeUcMy8ChIM6X Vf4BnvchvFEUHZO+Itue2ypg4EWNLCcb0ax88VqHUHuokgfFJpvXvFq2nbpOaZT0 71MI2eydNzSxL7G4NaYW4gXZtLc3gHc7iS3a7eYCDbihHMn6zs6BRO6IFODhgF9p tImar/xsecc7rgQhDrZRyPqpTJidCQggN/4c/v2ZR8Xb6sQxDLFwxfuJlFogPjxw oFscwpUOZxBFpAdGOp/u1OpqaJD63cH5xas= -----END CERTIFICATE-----Generated at Sat Aug 23 20:52:01 2025 by rpki-client