$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa File: da3f2220-b78f-32a5-8116-6e612e47c9c6.roa (raw, json) Hash identifier: FD7qwct/9Hdf/iEePpT/epDR5H79Tm1PXFTGF/F8+58= Subject key identifier: 7C:0E:11:FD:DE:01:44:64:10:00:1F:56:D5:B7:01:5F:49:85:ED:30 Certificate issuer: /CN=29d35046-09f2-4630-973c-fde248a9c01c Certificate serial: 010D0C9F4328584A5B95AD66FA6AB7AFAB5A5E80 Authority key identifier: EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 395878 IP address blocks: 2602:f697:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:ad:66:fa:6a:b7:af:ab:5a:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35046-09f2-4630-973c-fde248a9c01c Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=31594923-0d14-471d-939e-3a405ded9a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:e5:21:81:76:88:c9:05:07:ce:0f:aa:f3: b0:8c:6e:11:4f:32:c0:46:9b:98:7b:b5:55:86:89: d0:be:b6:77:6c:db:d2:01:e5:a2:32:ad:46:b3:cf: 54:45:47:34:75:e1:4f:c7:08:0a:1e:72:f9:cf:9c: 22:f7:bd:3f:b3:4c:6d:a5:61:d6:b9:1c:59:41:92: 34:0d:c0:f2:a7:68:c3:cc:73:b4:75:ec:ef:bb:4c: 20:3a:af:5b:f6:31:5b:c5:91:d3:35:97:b8:b0:3a: eb:21:37:0f:19:e6:ea:5a:77:70:0c:97:3a:1b:4a: 3a:d7:cf:f9:52:2a:34:63:32:ea:e5:5a:90:ef:f5: 17:70:44:3c:0a:72:98:5f:bb:55:4e:1e:7e:b1:5e: ab:62:66:fc:36:27:9e:6a:7e:78:bc:43:c6:db:77: 07:be:23:7f:32:61:fc:e2:5e:3b:b0:ad:da:92:38: 3d:92:46:95:5f:8b:ec:13:08:e6:93:ad:9d:ef:e3: 3d:fa:33:32:b6:da:7e:b5:82:ec:a9:ea:5c:ba:b5: 6a:da:52:81:b0:90:d4:24:a5:52:1f:1a:65:40:58: 28:70:ee:f1:06:58:bf:47:31:e5:ca:cd:30:6e:3b: 11:7c:9a:8e:a5:f9:97:cd:f9:23:29:06:1f:0f:cc: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0E:11:FD:DE:01:44:64:10:00:1F:56:D5:B7:01:5F:49:85:ED:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/da3f2220-b78f-32a5-8116-6e612e47c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl X509v3 Authority Key Identifier: keyid:EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f697:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:aa:1a:9c:bc:4b:a4:1c:58:48:a5:01:36:1d:25:e2:93:27: 58:1e:32:a9:b0:7c:dc:f7:34:3b:b8:01:c5:b2:00:bd:12:ea: 54:d6:df:c5:fb:cd:b0:d3:ed:08:c2:6b:b3:96:29:45:18:b7: e0:11:0f:6b:a1:c6:48:12:79:28:1e:f5:32:47:33:ba:26:ab: 85:4c:e1:50:91:e2:87:d6:3b:d2:d4:b1:31:02:0b:2b:73:69: e1:46:15:f6:e5:8a:a7:b4:0c:53:f6:ff:4b:5b:d8:7c:ec:80: 52:08:d3:e5:6a:91:c0:54:6e:b9:a3:e0:8a:0f:18:aa:84:27: fb:87:ff:a1:89:22:99:92:f3:60:c9:a1:d3:87:59:d7:cd:62: 15:b3:5b:aa:3f:c3:88:82:dd:e4:64:75:f6:c5:73:1b:28:5d: 20:2d:87:b9:cd:23:2f:16:b0:f5:ed:c9:e5:b2:f3:06:f3:da: e8:75:03:df:7a:3b:5f:d5:83:27:66:cc:86:f9:8e:65:6e:b3: d9:05:c7:7a:87:e8:a2:0b:ac:fc:79:08:d2:fc:87:f5:4e:6d: 6a:28:6d:1c:25:ca:eb:2d:c4:a6:50:fb:56:bf:92:9a:2d:66: 62:37:f6:76:c3:8d:67:5e:4e:44:66:c1:a2:6a:76:f8:38:3b: 54:9e:42:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpbla1m+mq3r6taXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzUwNDYtMDlmMi00NjMwLTk3M2MtZmRlMjQ4YTlj MDFjMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MzE1OTQ5MjMtMGQxNC00NzFkLTkzOWUtM2E0MDVkZWQ5YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCblIYF2iMkFB84PqvOwjG4RTzLARpuYe7VV honQvrZ3bNvSAeWiMq1Gs89URUc0deFPxwgKHnL5z5wi970/s0xtpWHWuRxZQZI0 DcDyp2jDzHO0dezvu0wgOq9b9jFbxZHTNZe4sDrrITcPGebqWndwDJc6G0o618/5 Uio0YzLq5VqQ7/UXcEQ8CnKYX7tVTh5+sV6rYmb8Nieean54vEPG23cHviN/MmH8 4l47sK3akjg9kkaVX4vsEwjmk62d7+M9+jMyttp+tYLsqepcurVq2lKBsJDUJKVS HxplQFgocO7xBli/RzHlys0wbjsRfJqOpfmXzfkjKQYfD8zJKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHwOEf3eAURkEAAfVtW3AV9Jhe0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOWQz NTA0Ni0wOWYyLTQ2MzAtOTczYy1mZGUyNDhhOWMwMWMvZGEzZjIyMjAtYjc4Zi0z MmE1LTgxMTYtNmU2MTJlNDdjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjlkMzUwNDYtMDlmMi00NjMwLTk3 M2MtZmRlMjQ4YTljMDFjLzI5ZDM1MDQ2LTA5ZjItNDYzMC05NzNjLWZkZTI0OGE5 YzAxYy5jcmwwHwYDVR0jBBgwFoAU7wG/gnwaI+9MY2JlBXJiNlj7gcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOWQzNTA0Ni0wOWYyLTQ2MzAtOTczYy1mZGUy NDhhOWMwMWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2lwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqqGpy8S6QcWEilATYdJeKTJ1geMqmwfNz3NDu4AcWyAL0S6lTW 38X7zbDT7QjCa7OWKUUYt+ARD2uhxkgSeSge9TJHM7omq4VM4VCR4ofWO9LUsTEC CytzaeFGFfbliqe0DFP2/0tb2HzsgFII0+VqkcBUbrmj4IoPGKqEJ/uH/6GJIpmS 82DJodOHWdfNYhWzW6o/w4iC3eRkdfbFcxsoXSAth7nNIy8WsPXtyeWy8wbz2uh1 A996O1/VgydmzIb5jmVus9kFx3qH6KILrPx5CNL8h/VObWoobRwlyustxKZQ+1a/ kpotZmI39nbDjWdeTkRmwaJqdvg4O1SeQnc= -----END CERTIFICATE-----Generated at Fri Jul 4 06:17:43 2025 by rpki-client