$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/41352898-d5e8-3cd6-80c9-473f5956cdca.roa File: 41352898-d5e8-3cd6-80c9-473f5956cdca.roa (raw, json) Hash identifier: bd1Q7uR2kyYnQg9yfOA0B2B8slEijOAtwRUIXHbdDvI= Subject key identifier: A4:CF:16:98:A4:2A:FE:D9:38:C8:76:2F:DE:10:D4:EA:78:F0:52:11 Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584A3A1590DA4FA45840998B7200 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/41352898-d5e8-3cd6-80c9-473f5956cdca.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 203888 IP address blocks: 2602:f9df:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:90:da:4f:a4:58:40:99:8b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=95e9a4ef-c99e-4bd1-af63-1a6435393be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:d5:bd:81:45:77:6e:22:e3:a4:90:4a:ca: 0b:fd:13:26:55:3a:da:a9:e6:c6:75:e6:a0:c1:0f: 20:b4:a2:b3:99:96:35:58:e2:51:c4:01:35:7c:e6: a3:33:0c:37:10:f4:bb:9e:fb:b5:8e:0b:dd:5c:10: 2d:23:2b:01:4f:84:bb:e2:6c:e7:e5:50:03:ee:db: f1:2e:0a:a1:88:bc:eb:9a:de:17:b1:82:cb:89:ac: 15:1c:90:fd:93:2b:60:2e:8f:65:37:8f:63:9b:da: 72:bf:1d:c4:49:41:63:99:37:6a:c2:35:7a:b7:86: 9c:6c:9b:18:2a:cc:44:91:69:71:6d:5b:7e:c9:a0: c2:f6:ca:58:70:70:ef:19:2e:06:ba:5b:1d:ce:ed: d0:44:36:d9:42:07:a6:67:b1:f2:57:ac:e0:5a:74: 1b:67:a6:13:7c:7d:e3:c9:f2:57:05:f0:6e:f5:00: 9c:51:f2:85:a9:dd:a2:66:92:0b:55:50:f8:c6:b9: 7c:06:a8:36:83:6e:78:68:f2:3a:92:ba:9d:16:3a: a2:ad:7d:6a:b3:f5:a1:c2:7d:cd:88:50:f5:fa:c1: ed:6b:da:19:a5:89:59:af:d7:cd:67:36:0b:16:43: 13:60:3c:8c:df:85:b4:2f:25:78:38:93:f1:1a:a7: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CF:16:98:A4:2A:FE:D9:38:C8:76:2F:DE:10:D4:EA:78:F0:52:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/41352898-d5e8-3cd6-80c9-473f5956cdca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9df:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:88:ea:31:a6:24:d0:0e:2b:ee:6a:c7:0a:f4:03:6c:63:6c: a3:29:9f:b0:2e:69:f3:ab:6f:19:ab:07:10:f8:da:3b:14:25: 52:c6:49:36:05:13:1b:dc:e6:e2:9d:83:bc:90:88:80:03:20: d9:b1:7b:f8:9f:56:1b:57:6a:ff:b0:d5:6c:29:97:55:42:52: 43:05:db:9f:6a:10:38:9a:70:38:14:2d:25:d8:d5:05:6e:cd: cc:9f:8b:ae:34:52:e7:c4:ef:1d:01:7b:ba:aa:1d:4e:8d:9e: ab:b3:dc:69:25:81:7d:5c:ad:2c:62:d5:d7:ad:4e:42:ff:82: f0:cb:7f:be:2e:37:eb:b9:56:e0:1c:4d:0d:82:6a:50:cd:33: ac:68:96:3c:99:4b:8b:12:f2:63:2c:2d:d4:7a:37:f7:11:48: 44:7a:fa:bc:20:8a:ce:1f:e2:45:39:a4:bb:30:b8:7a:11:3c: 32:44:92:93:a5:0a:b3:69:04:9d:27:da:f1:a4:a8:d9:c0:57: 32:10:97:f8:cb:09:d2:08:63:c3:7b:c4:70:62:b3:5e:88:c7: 9d:4e:33:5e:a0:cd:87:de:86:ed:89:d9:c1:e7:bf:73:fd:38: 34:95:86:75:c7:2c:a2:32:df:ae:53:e0:d1:b3:6c:81:5b:4b: d0:aa:97:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6FZDaT6RYQJmLcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTVlOWE0ZWYtYzk5ZS00YmQxLWFmNjMtMWE2NDM1MzkzYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+PVvYFFd24i46SQSsoL/RMmVTraqebGdeag wQ8gtKKzmZY1WOJRxAE1fOajMww3EPS7nvu1jgvdXBAtIysBT4S74mzn5VAD7tvx LgqhiLzrmt4XsYLLiawVHJD9kytgLo9lN49jm9pyvx3ESUFjmTdqwjV6t4acbJsY KsxEkWlxbVt+yaDC9spYcHDvGS4Gulsdzu3QRDbZQgemZ7HyV6zgWnQbZ6YTfH3j yfJXBfBu9QCcUfKFqd2iZpILVVD4xrl8Bqg2g254aPI6krqdFjqirX1qs/Whwn3N iFD1+sHta9oZpYlZr9fNZzYLFkMTYDyM34W0LyV4OJPxGqcIMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTPFpikKv7ZOMh2L94Q1Op48FIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvNDEzNTI4OTgtZDVlOC0z Y2Q2LTgwYzktNDczZjU5NTZjZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL53wAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaI6jGmJNAOK+5qxwr0A2xjbKMpn7AuafOrbxmrBxD42jsUJVLG STYFExvc5uKdg7yQiIADINmxe/ifVhtXav+w1Wwpl1VCUkMF259qEDiacDgULSXY 1QVuzcyfi640UufE7x0Be7qqHU6Nnquz3GklgX1crSxi1detTkL/gvDLf74uN+u5 VuAcTQ2CalDNM6xoljyZS4sS8mMsLdR6N/cRSER6+rwgis4f4kU5pLswuHoRPDJE kpOlCrNpBJ0n2vGkqNnAVzIQl/jLCdIIY8N7xHBis16Ix51OM16gzYfehu2J2cHn v3P9ODSVhnXHLKIy365T4NGzbIFbS9Cql80= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:42 2025 by rpki-client