$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa File: 49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa (raw, json) Hash identifier: mtDNDHH2kWjEFMCy+o7fy1LI/XZl8HLB+nLOP91GFbE= Subject key identifier: D0:4D:1C:60:73:71:32:6B:47:02:2F:9C:95:5A:D7:2A:FE:41:84:3B Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584A49707405C34953964D2576C0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 27385 IP address blocks: 2602:fdaa:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:05:c3:49:53:96:4d:25:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=71cb7f2f-0f89-4e22-b614-c3b78da7a8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:ea:17:4a:e0:0e:b5:c8:4b:ce:81:d4:c8: a9:38:8e:64:38:71:62:b1:11:72:d7:45:a1:6f:3e: 9e:db:18:59:9f:aa:d1:1f:44:46:59:6e:70:f7:3b: 95:f6:57:a6:9c:5b:c7:41:cf:76:ed:f3:ac:e2:ac: dd:a7:52:94:4a:16:ce:ed:5c:85:06:48:83:7e:b3: b9:d7:54:85:2d:58:50:01:1b:9d:3f:c7:d2:6d:63: 4d:93:46:79:04:17:2c:b3:d5:ff:24:b1:23:58:c9: 29:c9:e0:1a:c1:bc:9c:e8:f6:f4:56:be:f7:58:6c: 1f:88:78:1e:37:b1:59:54:91:5f:ea:48:95:8a:43: fe:27:82:6a:99:69:fd:5c:98:f0:86:ee:00:79:b5: 24:ed:5e:5d:75:58:9d:ca:76:8c:77:9a:b5:f5:97: 8d:46:a1:8f:c1:74:4a:0c:80:d9:77:69:dd:a1:29: 15:0b:b1:bf:b8:8e:d9:08:e5:43:ad:b3:f9:cb:39: ad:0f:2f:be:6b:5f:62:67:b7:79:94:f1:80:74:87: ce:5b:72:6b:0a:a8:4d:ff:db:bf:c5:79:80:5d:c9: 3d:7d:5f:7f:e0:33:ec:a0:b9:f9:da:3f:36:6c:d7: 94:6b:23:7b:58:d6:9a:42:9c:ad:5f:bc:ac:90:a4: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4D:1C:60:73:71:32:6B:47:02:2F:9C:95:5A:D7:2A:FE:41:84:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:36:f2:76:57:61:1a:1e:be:d8:fb:b1:29:f8:46:ad:70:9c: 56:8d:42:cd:04:2d:a3:ca:15:9f:84:21:66:08:a4:24:19:a5: 7d:02:91:d5:57:60:97:93:93:44:5f:12:b1:df:b6:57:e4:2c: 97:02:f1:cf:cb:a2:28:e8:74:11:96:af:f2:33:6b:53:7b:32: 5d:ef:8f:51:53:e5:54:35:d8:79:4b:59:37:40:69:8a:47:5b: 0d:21:9c:f3:06:d1:59:a3:4f:df:cf:8f:05:8f:92:f0:f6:d5: 1b:81:9f:b7:3d:6f:5a:ea:93:b3:4e:ed:bc:4a:b9:aa:14:24: 2a:20:f3:29:88:24:cf:6a:60:4c:db:36:08:3d:01:5f:52:9b: 66:b0:36:0b:a1:16:9c:cd:7b:34:b2:c0:09:63:7b:89:c5:8b: 02:4e:2b:fe:b4:aa:b5:9c:a0:ef:91:6f:a4:0f:3c:de:ac:56: 8a:80:73:04:2e:f6:53:60:49:c9:3a:5a:c7:22:6c:37:8b:6e: 85:4a:24:16:77:ac:d1:27:97:45:6d:37:93:63:b5:9d:92:96: c9:c6:8b:2b:25:12:d0:00:8f:a4:b7:fe:71:5b:bc:aa:de:13: b2:7f:b9:75:f9:50:0d:1f:b6:78:e9:93:ad:15:be:c5:e6:2e: c3:65:d8:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJcHQFw0lTlk0ldsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NzFjYjdmMmYtMGY4OS00ZTIyLWI2MTQtYzNiNzhkYTdhOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDLqF0rgDrXIS86B1MipOI5kOHFisRFy10Wh bz6e2xhZn6rRH0RGWW5w9zuV9lemnFvHQc927fOs4qzdp1KUShbO7VyFBkiDfrO5 11SFLVhQARudP8fSbWNNk0Z5BBcss9X/JLEjWMkpyeAawbyc6Pb0Vr73WGwfiHge N7FZVJFf6kiVikP+J4JqmWn9XJjwhu4AebUk7V5ddVidynaMd5q19ZeNRqGPwXRK DIDZd2ndoSkVC7G/uI7ZCOVDrbP5yzmtDy++a19iZ7d5lPGAdIfOW3JrCqhN/9u/ xXmAXck9fV9/4DPsoLn52j82bNeUayN7WNaaQpytX7yskKTdGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNBNHGBzcTJrRwIvnJVa1yr+QYQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvNDllNWE5ZWEtODJhOC0z ZWZmLTkxZDktOGVmZmM4ZGMxN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJE28nZXYRoevtj7sSn4Rq1wnFaNQs0ELaPKFZ+EIWYIpCQZpX0C kdVXYJeTk0RfErHftlfkLJcC8c/LoijodBGWr/Iza1N7Ml3vj1FT5VQ12HlLWTdA aYpHWw0hnPMG0VmjT9/PjwWPkvD21RuBn7c9b1rqk7NO7bxKuaoUJCog8ymIJM9q YEzbNgg9AV9Sm2awNguhFpzNezSywAlje4nFiwJOK/60qrWcoO+Rb6QPPN6sVoqA cwQu9lNgSck6WscibDeLboVKJBZ3rNEnl0VtN5NjtZ2SlsnGiyslEtAAj6S3/nFb vKreE7J/uXX5UA0ftnjpk60VvsXmLsNl2AI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:32:57 2025 by rpki-client