$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa File: 34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json) Hash identifier: M29eDJrl1xQDguCiEn7M0TU7zXbxWgXWyF/dzJMQFp0= Subject key identifier: 85:8E:A4:5B:44:52:CF:81:B8:A1:AA:CF:57:E8:11:3F:1B:FA:39:F5 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584AD7D127289EC23202ED985E80 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 31898 IP address blocks: 2602:fdaa:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:27:28:9e:c2:32:02:ed:98:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=914e3f8b-c676-4188-b97a-47339a36c803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:62:9d:3d:38:fd:de:bc:9b:70:e6:e6:12: 84:35:63:25:24:f9:95:a5:2a:e5:b2:91:4b:71:d7: a4:be:51:78:fd:d3:eb:62:a3:2d:f0:15:0d:29:a3: f4:ca:da:6e:5b:1a:cf:a9:5f:f7:78:ec:10:f2:3e: d7:63:85:23:09:60:80:f5:35:fb:08:00:55:c5:e9: 13:da:23:79:80:c2:f9:7c:b8:c7:86:bf:96:7f:26: ca:50:b6:f5:5d:49:5e:6c:49:c2:d5:75:22:80:53: 24:a8:a9:08:b9:7c:2c:0c:46:33:e8:41:c7:f7:da: 31:be:21:a0:06:87:86:7b:35:98:5c:e2:8b:41:76: 38:78:40:eb:3d:ce:62:eb:e7:be:e2:32:98:ff:a1: bd:8d:87:b9:f4:1c:20:c6:dd:22:2f:61:bd:5e:a4: cf:ad:6c:65:75:eb:14:6d:c5:82:85:fc:fe:00:df: 7e:fe:81:55:15:8c:8d:c5:46:6f:6b:ef:e9:33:6b: 9d:32:36:fb:60:a6:fd:ce:78:7d:01:a5:de:fa:0a: 39:59:eb:ef:a0:95:e9:1c:f7:9e:a7:39:5e:5c:af: 85:87:17:03:fa:41:8c:92:24:71:24:ff:be:83:0f: d2:c5:53:2c:ae:24:b0:46:0d:56:88:fc:e3:ff:1b: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8E:A4:5B:44:52:CF:81:B8:A1:AA:CF:57:E8:11:3F:1B:FA:39:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:22:f7:97:b8:0b:47:58:e7:fb:24:23:50:98:7c:75:5f:15: 53:49:8e:13:f6:9d:35:92:6b:74:ec:e0:a9:64:dc:b5:95:31: 74:6a:dd:13:d5:3d:8e:c8:e5:2f:5e:63:55:c1:b0:04:36:8f: 67:72:b3:c0:d5:f7:3f:35:a6:47:2b:5f:43:66:b1:c4:d8:f9: 09:d4:9c:83:a4:ea:73:f2:16:25:74:f6:a6:b5:37:76:92:10: 40:38:04:64:1c:0a:35:60:04:5e:ef:22:93:98:5f:97:1b:3a: 54:2a:ed:03:44:58:5a:9d:93:17:de:38:3c:1e:85:a3:c8:49: 23:a5:8f:4e:70:3f:d4:dc:96:67:f9:52:5e:48:e6:6b:64:2a: fc:56:df:2f:88:a6:18:fb:39:19:c6:eb:a0:bb:31:34:73:86: 50:08:2e:ad:a7:1d:44:78:22:51:7b:ea:42:98:e0:71:11:1a: aa:ae:cc:d2:14:19:fc:f3:36:d0:8f:ff:96:9a:fa:2c:b1:bc: 87:60:ce:b3:24:58:a9:17:ff:f6:21:22:e6:1a:cf:c9:3d:4f: 3d:3b:a4:86:07:fe:a1:5d:75:b1:6e:4c:fe:a1:6a:ab:c1:1f: 02:6b:69:3c:73:aa:f2:a4:43:4d:d2:29:39:49:84:4c:18:56: bb:6c:f5:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0SconsIyAu2YXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTE0ZTNmOGItYzY3Ni00MTg4LWI5N2EtNDczMzlhMzZjODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYpinT04/d68m3Dm5hKENWMlJPmVpSrlspFL cdekvlF4/dPrYqMt8BUNKaP0ytpuWxrPqV/3eOwQ8j7XY4UjCWCA9TX7CABVxekT 2iN5gML5fLjHhr+WfybKULb1XUlebEnC1XUigFMkqKkIuXwsDEYz6EHH99oxviGg BoeGezWYXOKLQXY4eEDrPc5i6+e+4jKY/6G9jYe59Bwgxt0iL2G9XqTPrWxldesU bcWChfz+AN9+/oFVFYyNxUZva+/pM2udMjb7YKb9znh9AaXe+go5WevvoJXpHPee pzleXK+FhxcD+kGMkiRxJP++gw/SxVMsriSwRg1WiPzj/xvN5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIWOpFtEUs+BuKGqz1foET8b+jn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMzRmZmQxZjctZjc4ZC0z Yjc4LWFiNWQtNDhmYTRmZDM2NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAi95e4C0dY5/skI1CYfHVfFVNJjhP2nTWSa3Ts4Klk3LWVMXRq 3RPVPY7I5S9eY1XBsAQ2j2dys8DV9z81pkcrX0NmscTY+QnUnIOk6nPyFiV09qa1 N3aSEEA4BGQcCjVgBF7vIpOYX5cbOlQq7QNEWFqdkxfeODwehaPISSOlj05wP9Tc lmf5Ul5I5mtkKvxW3y+Iphj7ORnG66C7MTRzhlAILq2nHUR4IlF76kKY4HERGqqu zNIUGfzzNtCP/5aa+iyxvIdgzrMkWKkX//YhIuYaz8k9Tz07pIYH/qFddbFuTP6h aqvBHwJraTxzqvKkQ03SKTlJhEwYVrts9V0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:23 2025 by rpki-client