$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa File: f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa (raw, json) Hash identifier: ZVBV9/rw1q5utx+sMv7ve/6o0MWpoKSF+rxjxQ+fP28= Subject key identifier: 4A:90:4F:63:6D:96:6C:AD:C6:2B:28:A8:A7:EB:F8:C9:BD:C9:78:77 Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F4328584A49706FE3087FEF6E5F078400 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 31867 IP address blocks: 2602:fd6f:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6f:e3:08:7f:ef:6e:5f:07:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=c13e500f-98c8-447e-bb94-751b794c4be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:60:1e:8a:69:3d:61:81:a7:30:4d:a0:8c: 2c:32:10:1d:89:f5:0e:08:29:a7:22:4e:1c:24:2a: 0e:6f:fb:be:a3:49:9c:30:4b:16:96:1b:3d:ad:f0: df:35:39:79:92:d2:50:14:2b:2b:83:08:79:8c:32: ec:c3:4e:b2:94:14:d4:e7:1a:8f:73:7b:c4:9d:b1: 5b:b0:d1:7b:be:cc:cd:d0:3a:c4:7a:39:16:ec:95: 5f:2e:4e:44:4e:44:17:6a:e4:55:43:73:e1:c5:1b: 76:d7:87:33:ee:11:8a:32:46:68:fe:e3:86:d8:92: 9f:09:b3:44:35:c1:3a:2e:e1:d1:cb:c2:a2:aa:6e: 0d:21:67:19:f8:24:63:7c:d3:2a:5a:23:c6:f4:de: 5e:25:ff:03:fe:b0:a9:95:06:be:b8:87:2e:0d:62: 1e:d1:08:26:12:e4:17:c9:70:e0:55:9b:66:8b:e8: 69:46:89:55:27:a4:28:da:b3:ba:3e:41:3b:4c:8b: cd:be:f3:7a:d9:44:0d:23:8c:3a:27:68:37:de:53: 57:6e:3a:a5:78:48:27:c5:12:cf:3e:44:f6:14:9f: ba:fd:8c:99:0f:ba:ed:01:55:5a:16:b4:40:94:c8: 2a:3a:2d:24:84:5d:fe:bc:55:bf:5b:a0:d0:d2:e0: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:4F:63:6D:96:6C:AD:C6:2B:28:A8:A7:EB:F8:C9:BD:C9:78:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd6f:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:47:77:c1:d4:30:db:9b:b9:8f:f7:7e:e1:71:f3:6f:d5:0f: 74:cf:25:96:e8:8f:ee:9f:06:f5:28:41:e9:81:15:57:ab:45: 05:72:44:55:ff:b2:41:0e:e3:73:8b:20:0a:d1:6a:a6:fe:18: 27:e2:bb:35:7c:e4:aa:bf:25:c0:43:2e:9e:7c:bb:9e:52:08: c2:36:41:d2:1c:15:31:76:f5:b2:11:2b:c9:0a:23:6f:a8:ed: 1a:48:70:b2:fb:6f:fb:14:9c:e3:f0:70:64:a7:99:e9:f1:18: 5e:fe:91:ba:a5:75:5a:5b:c1:b4:51:3f:89:f4:89:85:07:5a: 34:e1:af:cd:ae:8d:de:e9:82:c5:89:4f:e0:1a:b8:82:c4:4b: 21:94:52:84:b8:a1:bb:13:25:05:51:c1:5f:f9:17:3e:b0:bd: ea:25:68:c9:33:51:e6:ae:b8:e4:b7:95:0a:10:6b:55:c7:84: b8:3c:8e:c3:ca:24:2a:d9:76:73:b0:d4:92:38:c9:c3:00:93: bd:93:cc:8b:ed:e9:70:8f:ce:c5:7f:0b:81:56:60:a8:ad:57: ab:1d:11:02:8f:fc:1f:fd:aa:9b:06:e7:31:5d:d8:82:c1:9d: 1d:73:e7:46:80:32:f3:f2:43:d6:73:72:3e:1b:6e:75:15:49: 50:09:dd:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJcG/jCH/vbl8HhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzEzZTUwMGYtOThjOC00NDdlLWJiOTQtNzUxYjc5NGM0YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittgHoppPWGBpzBNoIwsMhAdifUOCCmnIk4c JCoOb/u+o0mcMEsWlhs9rfDfNTl5ktJQFCsrgwh5jDLsw06ylBTU5xqPc3vEnbFb sNF7vszN0DrEejkW7JVfLk5ETkQXauRVQ3PhxRt214cz7hGKMkZo/uOG2JKfCbNE NcE6LuHRy8Kiqm4NIWcZ+CRjfNMqWiPG9N5eJf8D/rCplQa+uIcuDWIe0QgmEuQX yXDgVZtmi+hpRolVJ6Qo2rO6PkE7TIvNvvN62UQNI4w6J2g33lNXbjqleEgnxRLP PkT2FJ+6/YyZD7rtAVVaFrRAlMgqOi0khF3+vFW/W6DQ0uDXTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqQT2NtlmytxisoqKfr+Mm9yXh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZjc2M2NkODUtMzIzYi0z ZDg4LThjMWUtYTc5NTU0ZGMzYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9bwAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZHd8HUMNubuY/3fuFx82/VD3TPJZboj+6fBvUoQemBFVerRQVy RFX/skEO43OLIArRaqb+GCfiuzV85Kq/JcBDLp58u55SCMI2QdIcFTF29bIRK8kK I2+o7RpIcLL7b/sUnOPwcGSnmenxGF7+kbqldVpbwbRRP4n0iYUHWjThr82ujd7p gsWJT+AauILESyGUUoS4obsTJQVRwV/5Fz6wveolaMkzUeauuOS3lQoQa1XHhLg8 jsPKJCrZdnOw1JI4ycMAk72TzIvt6XCPzsV/C4FWYKitV6sdEQKP/B/9qpsG5zFd 2ILBnR1z50aAMvPyQ9Zzcj4bbnUVSVAJ3dM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:35:48 2025 by rpki-client