$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/f57d7e84-eace-3b4f-b404-7aafb17c030e.roa File: f57d7e84-eace-3b4f-b404-7aafb17c030e.roa (raw, json) Hash identifier: 4nS21qFu9dv1Kdt6kDTg1TksF4IIytvox5wsTdXzigk= Subject key identifier: 39:22:67:6B:4C:2E:FB:87:13:94:F6:3F:5B:E3:3B:46:D3:5D:E2:66 Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f Certificate serial: 010D0C9F4328584A5E605B1F8AFC350714F93F40 Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/f57d7e84-eace-3b4f-b404-7aafb17c030e.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 2602:f689:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:1f:8a:fc:35:07:14:f9:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=dca479d2-9d2e-4730-a0fc-959a6ca27eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:6b:11:e9:01:b7:51:2e:1e:fc:3d:19:2b: 7c:2b:2b:c8:49:36:56:ed:8c:25:16:03:f8:4a:d5: 21:db:04:e7:88:2e:f9:77:da:38:1b:95:8f:0c:75: 11:c3:e3:91:8b:e0:9a:1b:c9:86:4a:fb:64:1a:e8: 20:48:73:44:9e:d6:c4:a4:52:d8:9c:65:a0:c4:f1: 3d:95:9b:23:29:0e:4d:1a:2d:a1:e3:f3:d9:e5:11: c9:72:d0:97:53:35:47:4d:cf:66:94:fa:78:26:9a: bf:ae:7f:59:76:46:f7:13:81:66:83:82:87:33:51: f4:c8:b5:b2:2c:ee:ea:94:d4:96:03:4e:f3:43:92: 12:b8:bf:df:bd:9e:39:a7:c8:bc:94:cc:e1:e7:98: 7d:b4:f8:e8:29:53:35:42:60:42:1d:46:99:f9:03: 31:98:03:35:57:78:70:56:db:4d:22:39:b4:51:cd: 41:ff:e4:33:0a:68:53:81:0b:d8:66:09:d9:ac:7d: 44:e8:0e:c0:bd:a8:ec:fa:57:27:46:cf:46:4e:2c: ab:02:43:e0:a7:08:6b:c4:9e:28:76:1f:84:fb:fc: 39:b3:0b:5c:6a:b0:f5:8b:20:d2:ff:9f:47:f1:c5: e7:2b:25:ce:fe:22:9c:b8:51:d3:65:be:73:00:aa: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:67:6B:4C:2E:FB:87:13:94:F6:3F:5B:E3:3B:46:D3:5D:E2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/f57d7e84-eace-3b4f-b404-7aafb17c030e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl X509v3 Authority Key Identifier: keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f689:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9b:84:b1:a7:1f:27:15:65:81:7c:72:83:e6:e7:4d:2f:0e: 39:c7:3a:05:9f:9c:53:64:e5:d7:39:53:a0:2a:ce:08:e2:21: dc:eb:e7:3d:b1:ac:2f:a0:ba:22:02:ca:7e:77:2c:99:b7:31: b5:59:90:d5:b7:8a:f7:89:0d:f7:62:38:b4:b1:07:ec:43:35: 64:61:43:32:5b:c7:73:27:46:e4:a8:c4:83:ca:7a:a0:89:ec: 76:90:d7:bf:92:f9:b8:d3:c6:f8:6e:a5:7e:76:dd:ca:22:1d: a5:a2:78:c6:7e:27:f6:a8:3f:04:52:fc:fb:fd:d6:e7:2f:62: 30:26:db:ff:14:cc:05:95:81:e9:7f:ac:4a:c1:2f:c1:19:d0: d0:e1:68:46:49:6b:44:94:89:e3:57:dd:3d:d6:1e:4c:32:8b: 98:9f:12:e8:b7:a4:82:72:98:8d:ba:3c:36:27:26:69:ca:10: db:2c:3e:8b:f5:f0:65:5d:ab:8f:a5:ee:ec:f3:a2:2d:dc:3c: 59:9d:92:fd:b5:6d:9d:0c:a4:2c:32:b2:e5:f1:8e:bf:ed:8f: a6:f2:9c:bb:1e:01:13:96:31:20:d0:fd:27:95:65:ea:61:f3: 4e:82:20:af:1d:0a:35:df:cb:e0:0e:52:8d:79:e4:ac:02:20: ec:12:81:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpeYFsfivw1BxT5P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTE3ZjAtMDMwYy00ZmNhLThhN2YtYzM1MDE3ODMw ZjhmMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGNhNDc5ZDItOWQyZS00NzMwLWEwZmMtOTU5YTZjYTI3ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga5rEekBt1EuHvw9GSt8KyvISTZW7YwlFgP4 StUh2wTniC75d9o4G5WPDHURw+ORi+CaG8mGSvtkGuggSHNEntbEpFLYnGWgxPE9 lZsjKQ5NGi2h4/PZ5RHJctCXUzVHTc9mlPp4Jpq/rn9Zdkb3E4Fmg4KHM1H0yLWy LO7qlNSWA07zQ5ISuL/fvZ45p8i8lMzh55h9tPjoKVM1QmBCHUaZ+QMxmAM1V3hw VttNIjm0Uc1B/+QzCmhTgQvYZgnZrH1E6A7Avajs+lcnRs9GTiyrAkPgpwhrxJ4o dh+E+/w5swtcarD1iyDS/59H8cXnKyXO/iKcuFHTZb5zAKquQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkiZ2tMLvuHE5T2P1vjO0bTXeJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgx MTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUwMTc4MzBmOGYvZjU3ZDdlODQtZWFjZS0z YjRmLWI0MDQtN2FhZmIxN2MwMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4MTE3ZjAtMDMwYy00ZmNhLThh N2YtYzM1MDE3ODMwZjhmLzM5ODExN2YwLTAzMGMtNGZjYS04YTdmLWMzNTAxNzgz MGY4Zi5jcmwwHwYDVR0jBBgwFoAU0zqWn+U3hLo1c9gddq3vnpZd4cIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgxMTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUw MTc4MzBmOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL2iQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECbhLGnHycVZYF8coPm500vDjnHOgWfnFNk5dc5U6AqzgjiIdzr 5z2xrC+guiICyn53LJm3MbVZkNW3iveJDfdiOLSxB+xDNWRhQzJbx3MnRuSoxIPK eqCJ7HaQ17+S+bjTxvhupX523coiHaWieMZ+J/aoPwRS/Pv91ucvYjAm2/8UzAWV gel/rErBL8EZ0NDhaEZJa0SUieNX3T3WHkwyi5ifEui3pIJymI26PDYnJmnKENss Pov18GVdq4+l7uzzoi3cPFmdkv21bZ0MpCwysuXxjr/tj6bynLseAROWMSDQ/SeV Zeph806CIK8dCjXfy+AOUo155KwCIOwSgQo= -----END CERTIFICATE-----Generated at Tue Jul 1 17:05:56 2025 by rpki-client