$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa File: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (raw, json) Hash identifier: QydP9HfMhRmCr8z5zZjY2BCXPYmwzwc4KIo7+v1ng7Q= Subject key identifier: 52:90:B7:20:42:49:BB:F9:96:27:58:7C:BE:06:62:C6:71:A9:92:97 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584AD7D115E458FE14E7B74C6180 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 401502 IP address blocks: 2602:f783::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:15:e4:58:fe:14:e7:b7:4c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=9f863db2-c543-41e2-9d72-9f80334340bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:b2:b1:12:11:27:ca:97:07:40:d8:cf:8c: eb:21:f6:05:f7:23:1b:f3:5e:29:e6:e6:07:ec:b0: a0:9a:14:b9:f3:22:2a:4a:f1:e2:5f:83:ab:e4:ce: 01:9e:6d:e0:f0:15:af:98:f9:00:a0:97:f2:f9:2f: 5e:e5:16:35:0b:92:1d:e0:9d:76:8c:0a:9f:58:7e: e3:40:46:61:1b:d6:4e:1b:c6:cb:db:ce:62:0b:2d: a8:7b:4d:5c:3f:6e:31:62:ff:99:49:8d:3d:80:04: 24:de:4a:66:b2:ec:85:22:77:1d:f6:0b:39:ba:f8: 66:ee:36:36:8c:14:d6:bb:81:6a:33:7e:1b:57:2d: 95:4f:27:ec:e6:cc:6b:57:ae:27:42:f3:f3:f8:09: 05:52:b2:a6:9d:bd:9e:57:42:6f:1a:00:16:e0:bd: c0:74:3e:54:b9:ac:fe:47:12:af:04:3a:e7:16:cd: 06:c1:6d:66:ad:56:07:e2:a4:dd:0a:96:29:55:78: 00:7a:cb:0a:28:c9:51:f8:25:11:c5:6d:ca:32:0c: 69:fe:1b:b3:4f:e9:f7:9a:a0:17:df:c6:88:44:f5: 69:03:9c:46:bb:e3:11:36:d0:d0:52:50:ea:ab:b5: d8:69:9f:b8:f7:02:88:9b:be:a3:25:cc:a7:b0:b0: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:B7:20:42:49:BB:F9:96:27:58:7C:BE:06:62:C6:71:A9:92:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f783::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5c:3c:98:b0:f0:84:a7:c6:36:7d:42:37:4a:d2:47:bf:fd: 8a:59:9b:06:65:22:96:f3:db:dc:c7:ed:15:88:e2:a0:22:67: ea:19:d5:43:e6:ee:46:5a:cc:d2:11:83:7a:54:ee:e5:79:19: 19:85:84:26:0d:19:38:c6:cc:ca:09:62:49:0c:71:14:ce:15: f8:c9:9b:c6:40:14:fd:2d:eb:13:75:12:db:37:9b:9a:82:d0: 88:8e:02:a2:6d:59:37:1e:1f:e8:de:7d:aa:39:5b:66:2a:60: cc:fe:f5:dd:ec:6b:42:dc:db:9a:bb:b0:f7:29:e3:08:c4:58: e6:05:25:9e:d8:90:7a:9a:f5:45:58:77:2c:74:8b:1d:fd:7f: 67:e7:55:ca:ea:53:9d:ce:8d:fc:b9:9e:77:11:65:3d:f8:cf: 4d:f8:8a:c8:e4:da:0e:84:7d:6c:d3:a4:a7:27:1d:f9:9d:e8: 35:51:8e:c1:e1:35:77:ee:95:89:aa:a8:a1:75:13:13:44:32: e2:f7:c0:d7:b9:62:13:eb:7b:38:11:2c:2c:91:b6:ec:38:aa: f8:fb:de:f2:2f:2b:c8:d5:f6:3e:f5:37:1f:7f:f2:ba:72:15: bd:6c:e5:62:8c:cd:bb:31:7b:b3:10:4b:24:61:f7:3a:07:b4: 8b:d0:36:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErX0RXkWP4U57dMYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OWY4NjNkYjItYzU0My00MWUyLTlkNzItOWY4MDMzNDM0MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwCysRIRJ8qXB0DYz4zrIfYF9yMb814p5uYH 7LCgmhS58yIqSvHiX4Or5M4Bnm3g8BWvmPkAoJfy+S9e5RY1C5Id4J12jAqfWH7j QEZhG9ZOG8bL285iCy2oe01cP24xYv+ZSY09gAQk3kpmsuyFIncd9gs5uvhm7jY2 jBTWu4FqM34bVy2VTyfs5sxrV64nQvPz+AkFUrKmnb2eV0JvGgAW4L3AdD5Uuaz+ RxKvBDrnFs0GwW1mrVYH4qTdCpYpVXgAessKKMlR+CURxW3KMgxp/huzT+n3mqAX 38aIRPVpA5xGu+MRNtDQUlDqq7XYaZ+49wKIm76jJcynsLBVywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFKQtyBCSbv5lidYfL4GYsZxqZKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvMzc0MjUwOWUtMjQxMS0z OGQwLWFiZTYtNmNkZjEzNjA1ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3gwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAlw8mLDwhKfGNn1CN0rSR7/9ilmbBmUilvPb3MftFYjioCJn6hnV Q+buRlrM0hGDelTu5XkZGYWEJg0ZOMbMygliSQxxFM4V+MmbxkAU/S3rE3US2zeb moLQiI4Com1ZNx4f6N59qjlbZipgzP713exrQtzbmruw9ynjCMRY5gUlntiQepr1 RVh3LHSLHf1/Z+dVyupTnc6N/LmedxFlPfjPTfiKyOTaDoR9bNOkpycd+Z3oNVGO weE1d+6ViaqooXUTE0Qy4vfA17liE+t7OBEsLJG27Diq+Pve8i8ryNX2PvU3H3/y unIVvWzlYozNuzF7sxBLJGH3Oge0i9A23Q== -----END CERTIFICATE-----Generated at Sat Aug 23 17:01:24 2025 by rpki-client