$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa File: 4c33b29b-7d74-35de-896d-e8663c41392f.roa (raw, json) Hash identifier: OGcyitEIwqZU0YRZju/0SB578kW8EmUdm63XGyhxZro= Subject key identifier: DC:F9:FA:1E:16:6F:8F:A5:CB:FC:7B:8B:AE:27:41:BA:B3:DF:59:20 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584AD23BBBF25EF7829CFC3D8CC0 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 2602:277:d02::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bb:f2:5e:f7:82:9c:fc:3d:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=0b8b7d23-0d4c-4ef3-b6d5-22efc6304516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:da:e7:7d:16:aa:b7:57:59:2d:33:25:41: d9:dc:3b:60:f5:f7:10:a0:09:c6:e6:e8:ed:59:15: 60:68:a8:66:b1:d8:10:04:c4:03:8d:b6:9a:80:cd: 8d:54:fb:db:29:f4:ba:de:ea:40:62:27:95:37:48: 5d:ee:1b:0b:90:fa:fb:1e:d5:e5:e5:8b:d0:5c:6b: c4:e7:34:7f:0f:46:2f:21:88:fa:7c:72:a7:9e:78: 09:22:21:c3:55:e4:32:ec:9a:4d:45:c6:1a:af:2f: 46:be:b9:01:a8:63:97:ce:e3:3c:b3:c0:c8:66:bb: dc:e0:c2:ea:96:c4:25:cc:54:bb:61:c0:a2:8f:5c: a2:da:dc:1a:1f:28:bb:ec:94:38:31:45:5f:2e:af: 86:f6:76:9e:bb:2f:a9:f6:70:73:9c:31:96:3e:3c: d3:24:ba:c7:a4:95:ce:54:eb:4d:bc:95:43:6f:49: e1:28:3a:98:29:f8:23:39:d3:11:14:01:9e:b8:d8: c1:aa:34:df:f9:d8:3f:82:50:81:2d:3d:12:20:63: 0c:b6:da:bf:a1:b1:1a:9a:58:40:40:91:f6:05:b3: 91:61:a9:47:96:3d:5c:07:35:20:54:e1:9f:8c:e3: 27:3d:46:b2:6b:8b:20:1c:07:53:6a:32:90:aa:23: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F9:FA:1E:16:6F:8F:A5:CB:FC:7B:8B:AE:27:41:BA:B3:DF:59:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:d02::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:46:0b:4c:80:6c:1c:0a:b7:03:2c:05:33:07:63:3d:55:02: 9f:d9:d2:7c:b5:52:bd:25:80:48:5f:5e:0a:1a:e9:80:b9:7c: bf:36:56:f4:4c:e4:a9:75:22:6d:2b:db:b2:38:2b:ef:34:38: 14:f7:f9:38:0b:73:13:75:cd:b8:75:c4:e9:35:92:7e:97:62: 22:82:36:9f:e5:a5:d4:de:ad:18:9c:c3:51:5e:7e:25:0c:ff: 9b:cb:31:e0:a3:59:4d:08:e2:ac:30:a7:c7:86:53:4a:cd:bb: ac:f1:b0:35:c3:44:62:82:67:2e:4a:88:5d:c1:85:8e:8d:cd: 71:30:60:00:3f:05:40:33:aa:83:84:db:40:75:86:43:cb:68: ad:69:f9:7b:2f:ef:7c:3d:d2:cd:5d:63:95:89:d8:99:68:ae: 71:4f:2d:13:28:40:28:e2:3d:01:97:c3:b1:af:a9:4d:97:2d: 77:f9:34:6b:65:32:58:77:f9:54:62:de:b1:e6:42:c4:38:09: 9c:12:9b:74:0c:6b:ec:a8:43:96:df:ed:15:34:90:29:a5:f1: 6b:e4:b0:4e:16:0b:04:a7:8a:0f:6e:8f:31:d7:68:91:69:2a: ff:65:44:83:de:95:4e:d7:a3:3b:b8:3b:e0:ed:00:b3:6c:3e: 0a:12:14:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSO7vyXveCnPw9jMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MGI4YjdkMjMtMGQ0Yy00ZWYzLWI2ZDUtMjJlZmM2MzA0NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHDa530WqrdXWS0zJUHZ3Dtg9fcQoAnG5ujt WRVgaKhmsdgQBMQDjbaagM2NVPvbKfS63upAYieVN0hd7hsLkPr7HtXl5YvQXGvE 5zR/D0YvIYj6fHKnnngJIiHDVeQy7JpNRcYary9GvrkBqGOXzuM8s8DIZrvc4MLq lsQlzFS7YcCij1yi2twaHyi77JQ4MUVfLq+G9naeuy+p9nBznDGWPjzTJLrHpJXO VOtNvJVDb0nhKDqYKfgjOdMRFAGeuNjBqjTf+dg/glCBLT0SIGMMttq/obEamlhA QJH2BbORYalHlj1cBzUgVOGfjOMnPUaya4sgHAdTajKQqiPh4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNz5+h4Wb4+ly/x7i64nQbqz31kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvNGMzM2IyOWItN2Q3NC0z NWRlLTg5NmQtZTg2NjNjNDEzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw0C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9GC0yAbBwKtwMsBTMHYz1VAp/Z0ny1Ur0lgEhfXgoa6YC5fL82 VvRM5Kl1Im0r27I4K+80OBT3+TgLcxN1zbh1xOk1kn6XYiKCNp/lpdTerRicw1Fe fiUM/5vLMeCjWU0I4qwwp8eGU0rNu6zxsDXDRGKCZy5KiF3BhY6NzXEwYAA/BUAz qoOE20B1hkPLaK1p+Xsv73w90s1dY5WJ2JlornFPLRMoQCjiPQGXw7GvqU2XLXf5 NGtlMlh3+VRi3rHmQsQ4CZwSm3QMa+yoQ5bf7RU0kCml8WvksE4WCwSnig9ujzHX aJFpKv9lRIPelU7Xozu4O+DtALNsPgoSFJE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:26 2025 by rpki-client