$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/5e508870-f6fc-365f-b6b5-ac846f364911.roa File: 5e508870-f6fc-365f-b6b5-ac846f364911.roa (raw, json) Hash identifier: dhbqOvFUUuYVs2S5f3IwfDD/EWT+aqzogEsVj2ZAuG0= Subject key identifier: 18:7B:2D:43:8F:DC:D9:91:90:66:B8:7B:A8:52:00:F5:48:E6:DD:39 Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Certificate serial: 010D0C9F4328584A411063FBC01098DB96D42E80 Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/5e508870-f6fc-365f-b6b5-ac846f364911.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 40124 IP address blocks: 2602:299:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:63:fb:c0:10:98:db:96:d4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=91cd07a5-e4e3-4a47-98f6-84f0cefcbf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:22:b5:32:31:05:5c:17:4a:b6:51:f1:57: 8e:93:9b:44:e1:65:38:51:f0:f4:ed:a6:d7:37:4b: b0:87:a4:ff:76:e7:0d:9d:33:16:a3:97:af:bf:66: de:9d:a7:3c:5e:a6:69:84:f9:b4:fe:0c:93:e6:fa: 56:e0:58:65:62:88:14:86:7c:9a:70:ef:ab:f8:89: 44:a7:56:87:0f:93:f8:67:56:9f:46:74:c0:cc:c8: 22:2f:88:fd:ab:54:41:54:58:1f:58:93:14:55:61: 24:c4:ee:63:13:58:f8:d1:ce:88:07:ba:e6:62:0f: a5:1d:28:be:4e:c4:aa:23:b0:f2:35:76:6b:9a:33: 08:4d:0a:61:0c:88:95:d5:09:3a:6a:ab:c0:85:e9: 62:5b:66:cb:37:0d:dd:fd:bb:8b:80:68:bb:3e:c6: 95:5d:84:52:5d:f3:71:97:3d:7b:9b:56:8f:28:bb: 66:4b:38:3c:63:80:b2:14:80:1c:a1:d1:46:0e:d3: f4:16:08:06:b0:c5:a7:20:3d:26:7d:35:4b:ad:fd: bb:9b:17:30:7c:e7:e6:7f:9a:e1:8a:1d:87:97:11: e9:8d:0b:14:77:94:3c:ac:4a:35:f2:62:ca:17:aa: d6:1b:22:ed:85:20:c7:df:44:ae:72:11:90:93:1e: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7B:2D:43:8F:DC:D9:91:90:66:B8:7B:A8:52:00:F5:48:E6:DD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/5e508870-f6fc-365f-b6b5-ac846f364911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl X509v3 Authority Key Identifier: keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:299:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:47:12:cf:7c:e1:75:1a:2a:6c:53:77:a2:5e:d5:01:e8:5f: c1:07:1d:c6:70:2c:a5:6e:a5:8d:56:66:9e:b5:41:95:b3:37: b8:d7:ca:9f:40:b2:1d:b7:ad:1b:a0:5b:c2:ef:ae:69:b6:ec: c2:70:7d:3b:fb:e1:85:cf:b7:71:48:84:ea:b0:31:29:c8:a9: 4e:62:0e:0d:79:ea:1a:72:48:03:c4:c1:67:47:ae:7f:28:76: 92:54:e2:54:e7:9a:86:1c:df:a7:1f:45:49:8b:99:1f:74:b2: 65:89:af:ad:7d:84:c2:56:6c:48:3e:bd:55:9d:48:a3:58:f7: 6b:6e:6c:36:31:6a:fe:4d:2d:b7:58:a0:40:32:49:e6:87:c1: 2f:86:f9:cb:a8:61:20:e4:91:a8:aa:a4:e5:78:05:44:25:90: 7e:dd:cf:64:30:3b:ab:a0:53:79:6f:a3:be:4a:1e:33:eb:11: 7c:bc:73:a4:af:ad:00:48:62:12:7a:f3:3b:35:75:f3:c3:28: ae:ff:c0:52:a1:6c:83:65:09:27:ce:ef:06:be:de:2e:c9:b6: 26:1b:be:45:72:18:15:28:16:31:33:85:e4:bf:f9:a1:9c:71: 64:ed:97:6a:97:ff:a5:63:45:93:00:97:22:71:2b:8f:11:9f: 1f:1a:51:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEGP7wBCY25bULoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl NmEwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk OTFjZDA3YTUtZTRlMy00YTQ3LTk4ZjYtODRmMGNlZmNiZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaMitTIxBVwXSrZR8VeOk5tE4WU4UfD07abX N0uwh6T/ducNnTMWo5evv2benac8XqZphPm0/gyT5vpW4FhlYogUhnyacO+r+IlE p1aHD5P4Z1afRnTAzMgiL4j9q1RBVFgfWJMUVWEkxO5jE1j40c6IB7rmYg+lHSi+ TsSqI7DyNXZrmjMITQphDIiV1Qk6aqvAheliW2bLNw3d/buLgGi7PsaVXYRSXfNx lz17m1aPKLtmSzg8Y4CyFIAcodFGDtP0FggGsMWnID0mfTVLrf27mxcwfOfmf5rh ih2HlxHpjQsUd5Q8rEo18mLKF6rWGyLthSDH30SuchGQkx5w1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBh7LUOP3NmRkGa4e6hSAPVI5t05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvNWU1MDg4NzAtZjZmYy0z NjVmLWI2YjUtYWM4NDZmMzY0OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICmQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5HEs984XUaKmxTd6Je1QHoX8EHHcZwLKVupY1WZp61QZWzN7jX yp9Ash23rRugW8Lvrmm27MJwfTv74YXPt3FIhOqwMSnIqU5iDg156hpySAPEwWdH rn8odpJU4lTnmoYc36cfRUmLmR90smWJr619hMJWbEg+vVWdSKNY92tubDYxav5N LbdYoEAySeaHwS+G+cuoYSDkkaiqpOV4BUQlkH7dz2QwO6ugU3lvo75KHjPrEXy8 c6SvrQBIYhJ68zs1dfPDKK7/wFKhbINlCSfO7wa+3i7JtiYbvkVyGBUoFjEzheS/ +aGccWTtl2qX/6VjRZMAlyJxK48Rnx8aUdo= -----END CERTIFICATE-----Generated at Mon Jun 30 09:02:20 2025 by rpki-client