$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa File: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json) Hash identifier: TvMIUZYp0pfQgH9vW9mH+aQxvfqKmbOQYP0je9P+igk= Subject key identifier: 1E:7F:43:F2:CA:4F:B1:1F:97:6E:9B:D4:81:27:B6:23:DB:73:93:A1 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584A5600553A3A3ADAB80F3CE280 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 46733 IP address blocks: 2602:f9f4:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:55:3a:3a:3a:da:b8:0f:3c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=b52ac3ac-dd11-458f-bf52-e1b9428d6b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:9f:5d:b8:1c:81:25:18:39:3d:6f:2d:31: b4:e3:62:ba:17:d9:2d:fa:49:7c:4f:78:2b:95:dd: a7:8c:c1:cb:49:f8:3e:17:89:0f:63:18:7d:2d:85: e6:6f:bf:b8:cd:ae:cc:03:ff:fb:9f:60:43:e8:6a: f4:78:47:c3:0e:d1:ee:03:0b:72:5a:44:10:d3:e0: 4b:0b:5c:00:c4:a2:bc:d3:41:02:d9:bd:99:59:52: 9a:d2:cb:78:9f:39:57:ee:0a:f7:4c:85:b6:33:5d: 89:3d:81:96:e5:35:0c:0d:90:dd:13:07:ba:f2:b5: 84:99:d6:28:6e:0b:e1:14:44:64:31:b2:8e:54:ff: cd:07:b6:9e:32:52:c4:30:b5:48:eb:27:b3:9f:6d: 7c:3f:ef:3e:32:d1:7b:99:5d:09:9a:1b:92:ec:98: b8:f9:2c:5f:65:61:09:cc:02:a9:72:b5:79:d9:16: fe:90:c3:05:0d:d9:ed:c4:f1:36:1d:42:93:4d:04: a0:5e:7c:b7:71:42:8c:bc:57:ca:5e:51:13:b9:fc: 8a:da:39:55:46:5d:09:e2:c8:b3:8b:e2:16:94:93: 77:b4:07:61:bf:56:b4:fd:d3:70:4b:d6:60:d2:6b: 29:4a:25:96:bb:d9:53:d0:be:46:12:77:0a:40:ca: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:43:F2:CA:4F:B1:1F:97:6E:9B:D4:81:27:B6:23:DB:73:93:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:49:f6:5f:a8:f0:e2:8e:a0:60:b5:09:22:da:08:37:d7:e2: f3:ba:bb:1d:b3:7a:25:ea:42:e9:8f:a2:b0:1c:27:1f:dd:79: 6c:b1:e5:78:ef:64:0e:d9:53:01:82:e6:10:72:37:02:73:42: bb:eb:63:31:75:03:cb:af:ac:b8:ae:ac:41:51:6b:ac:98:d6: 57:9b:2d:5e:f2:78:67:55:90:d3:a0:54:d6:2d:ff:12:cd:0e: 84:41:79:52:21:77:f5:ab:32:3b:4c:c2:47:00:9b:7b:e0:ff: e6:98:a9:59:97:94:ea:95:c6:fc:c1:38:4e:b2:38:c8:6b:65: c9:3e:c1:26:4a:48:e8:e6:85:a8:55:1b:59:3d:fb:26:9c:63: a9:3b:2d:04:c4:6c:4f:7a:bb:41:e9:77:b0:a8:77:56:6f:87: bc:84:ec:5a:c8:4d:6d:61:10:8b:72:27:a9:e1:33:a1:ed:26: c8:c6:c2:ad:2b:60:1b:be:11:cf:c3:be:d2:45:60:e5:59:c4: a9:4d:b0:cb:ef:72:fc:2c:fc:3c:75:d5:84:2e:39:0a:d5:e7: 94:0d:80:67:2b:97:44:89:d2:60:17:a3:48:b3:6d:ba:e3:76: dd:77:b6:bd:63:92:ca:db:28:cb:b3:9b:ea:f1:cd:58:c2:68: 2d:4f:f9:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpWAFU6OjrauA884oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk YjUyYWMzYWMtZGQxMS00NThmLWJmNTItZTFiOTQyOGQ2YjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSKfXbgcgSUYOT1vLTG042K6F9kt+kl8T3gr ld2njMHLSfg+F4kPYxh9LYXmb7+4za7MA//7n2BD6Gr0eEfDDtHuAwtyWkQQ0+BL C1wAxKK800EC2b2ZWVKa0st4nzlX7gr3TIW2M12JPYGW5TUMDZDdEwe68rWEmdYo bgvhFERkMbKOVP/NB7aeMlLEMLVI6yezn218P+8+MtF7mV0JmhuS7Ji4+SxfZWEJ zAKpcrV52Rb+kMMFDdntxPE2HUKTTQSgXny3cUKMvFfKXlETufyK2jlVRl0J4siz i+IWlJN3tAdhv1a0/dNwS9Zg0mspSiWWu9lT0L5GEncKQMrphwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5/Q/LKT7Efl26b1IEntiPbc5OhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBJ9l+o8OKOoGC1CSLaCDfX4vO6ux2zeiXqQumPorAcJx/deWyx 5XjvZA7ZUwGC5hByNwJzQrvrYzF1A8uvrLiurEFRa6yY1lebLV7yeGdVkNOgVNYt /xLNDoRBeVIhd/WrMjtMwkcAm3vg/+aYqVmXlOqVxvzBOE6yOMhrZck+wSZKSOjm hahVG1k9+yacY6k7LQTEbE96u0Hpd7Cod1Zvh7yE7FrITW1hEItyJ6nhM6HtJsjG wq0rYBu+Ec/DvtJFYOVZxKlNsMvvcvws/Dx11YQuOQrV55QNgGcrl0SJ0mAXo0iz bbrjdt13tr1jksrbKMuzm+rxzVjCaC1P+Z8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:15 2025 by rpki-client