$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa File: da0869fc-7a2f-3359-ac12-16c14348d383.roa (raw, json) Hash identifier: cjO09nFV4LiUV1vqOeaxlvisA2DC8IKjFXDUTCiTwV0= Subject key identifier: B8:19:42:16:68:B3:45:79:D0:3A:5A:12:23:74:68:8B:97:FF:0C:F4 Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584A56004B73E33D0CF5A09E7B80 Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 399613 IP address blocks: 2602:f698::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4b:73:e3:3d:0c:f5:a0:9e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=c9bed068-f6ed-497b-9bd9-0bb96daa6b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:da:fc:6b:6d:62:af:ef:e7:07:ba:4a:16: 9a:6f:c1:98:2f:64:34:bd:d3:29:7d:39:33:65:13: 16:4c:82:25:27:82:4e:e0:37:3a:63:42:14:99:c6: 30:5b:cb:0e:b1:8b:8f:a0:84:47:1c:63:9e:00:22: 82:d6:de:cb:56:43:6e:63:ed:e2:05:0b:9f:9a:49: 8e:79:19:84:ac:f9:be:be:98:7a:f8:fc:cb:59:d6: 33:35:78:59:d9:56:c9:9d:fe:ab:f5:5b:b4:4b:5c: cd:f2:ba:80:da:1b:83:7f:32:7a:a1:12:43:20:e8: cd:ff:69:bb:d2:e2:4f:09:dc:b9:6f:34:80:90:c3: a3:f4:82:58:49:95:4f:de:4a:53:1f:70:cb:c9:56: fc:2a:3c:1b:fc:52:ea:ee:10:a7:1b:ca:3e:0f:81: 1f:46:93:cb:5e:93:49:1e:28:a1:d2:b8:ae:10:f3: e5:19:09:97:4a:1b:df:73:c8:dc:68:9a:59:ca:01: 2a:0a:3b:4e:f3:fe:a0:77:59:7b:1e:06:ad:9f:83: 4c:93:77:00:0d:8d:46:d1:9b:21:63:70:9f:2d:9e: d7:24:39:ac:7c:25:79:44:8d:b0:02:c7:52:2c:41: ce:56:2a:b0:d7:3b:a6:aa:7a:a0:0b:cc:6e:e4:02: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:42:16:68:B3:45:79:D0:3A:5A:12:23:74:68:8B:97:FF:0C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f698::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2f:33:22:33:f0:65:8f:5b:6f:6b:43:5b:0a:77:39:52:e2: 74:a6:97:ee:61:95:18:01:70:fe:46:ef:c2:9e:0d:a8:4e:3e: fc:69:1a:16:db:9d:6a:e8:20:b7:58:48:90:36:54:45:a5:4d: fb:2c:09:9e:58:ed:bf:bc:22:b6:3a:7c:71:49:44:5e:d0:c0: bc:16:ca:a5:94:76:1c:75:aa:57:9b:a9:00:ec:7e:96:a5:88: 79:f0:1f:97:a2:03:c2:e2:26:22:55:d3:18:43:18:7a:f6:f6: 29:45:0b:d9:69:74:a5:a8:d3:4a:2b:9c:6f:b0:ba:9c:e9:52: 5d:a2:ee:61:5a:a7:5c:c6:57:81:df:d4:bb:5c:e8:3a:fa:1b: 05:ec:c9:72:25:00:ff:5c:84:96:2e:a4:aa:ef:86:03:07:b3: ea:c1:98:89:53:0d:62:56:52:5d:14:66:4c:b5:14:c6:ec:c8: 1e:ca:73:41:30:2e:f5:ff:ff:b2:69:fa:e6:9e:b7:1e:ff:8b: 18:32:17:96:96:43:f3:26:b5:13:13:98:4a:e4:dd:b4:ae:30: d7:71:57:a2:41:08:24:27:66:fc:27:0c:b2:1b:3c:ec:94:72: 21:e8:c5:a5:38:0f:7e:a2:ad:79:b0:c5:ef:f1:89:f7:11:5a: 43:ea:8b:8f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpWAEtz4z0M9aCee4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk YzliZWQwNjgtZjZlZC00OTdiLTliZDktMGJiOTZkYWE2Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXa/GttYq/v5we6Shaab8GYL2Q0vdMpfTkz ZRMWTIIlJ4JO4Dc6Y0IUmcYwW8sOsYuPoIRHHGOeACKC1t7LVkNuY+3iBQufmkmO eRmErPm+vph6+PzLWdYzNXhZ2VbJnf6r9Vu0S1zN8rqA2huDfzJ6oRJDIOjN/2m7 0uJPCdy5bzSAkMOj9IJYSZVP3kpTH3DLyVb8Kjwb/FLq7hCnG8o+D4EfRpPLXpNJ Hiih0riuEPPlGQmXShvfc8jcaJpZygEqCjtO8/6gd1l7Hgatn4NMk3cADY1G0Zsh Y3CfLZ7XJDmsfCV5RI2wAsdSLEHOViqw1zumqnqgC8xu5AKh0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLgZQhZos0V50DpaEiN0aIuX/wz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvZGEwODY5ZmMtN2EyZi0z MzU5LWFjMTItMTZjMTQzNDhkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2mAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXi8zIjPwZY9bb2tDWwp3OVLidKaX7mGVGAFw/kbvwp4NqE4+/Gka Ftudauggt1hIkDZURaVN+ywJnljtv7witjp8cUlEXtDAvBbKpZR2HHWqV5upAOx+ lqWIefAfl6IDwuImIlXTGEMYevb2KUUL2Wl0pajTSiucb7C6nOlSXaLuYVqnXMZX gd/Uu1zoOvobBezJciUA/1yEli6kqu+GAwez6sGYiVMNYlZSXRRmTLUUxuzIHspz QTAu9f//smn65p63Hv+LGDIXlpZD8ya1ExOYSuTdtK4w13FXokEIJCdm/CcMshs8 7JRyIejFpTgPfqKtebDF7/GJ9xFaQ+qLjw== -----END CERTIFICATE-----Generated at Mon Jun 30 14:13:50 2025 by rpki-client