$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa File: 39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (raw, json) Hash identifier: AqYQSmOaFFU+57yYeVj38YE/LwCEB1Faxn3CEJ/ZxAw= Subject key identifier: C2:F5:17:3B:1D:48:5C:78:7D:17:DE:FA:2C:7E:73:00:10:C1:CB:06 Certificate issuer: /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Certificate serial: 010D0C9F4328584A4970566F8317A53A70A6A740 Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 2602:f6fc::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:56:6f:83:17:a5:3a:70:a6:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=9be81306-1ded-49d4-a3de-9e8766c537de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:ef:fd:64:5a:ce:53:4e:1d:a4:c3:3e:1d: e7:a5:3e:b3:65:17:7a:36:ac:0c:fa:6e:52:c5:e6: d6:7a:3c:e1:c0:a1:0b:d8:55:7e:e4:20:ec:49:91: 0f:50:27:ba:52:f3:27:c1:dd:65:e9:fd:5f:b0:45: f0:a6:92:de:31:f3:1e:88:1b:43:f1:97:6e:4d:3d: c1:cb:bf:10:75:ea:75:03:d6:56:21:a7:fd:77:0c: e3:18:f7:f4:8c:1e:14:ac:96:24:6e:af:6b:cc:92: 55:4b:3f:6a:4c:73:6c:df:c8:f8:f2:6e:f8:32:f4: 86:74:9d:cc:d8:e7:02:62:0d:f9:58:d0:0e:32:62: 88:0c:6a:27:e4:ed:0d:99:29:57:22:1f:3a:1d:78: 5f:5e:f9:03:9e:84:61:ae:a2:ac:55:ff:ad:86:8d: 2d:d6:7e:6b:7c:2a:64:87:bf:85:e5:48:a1:d8:3f: e6:fc:d1:d6:ce:b0:aa:57:c9:8b:49:b4:af:0b:56: 20:6f:94:81:ac:61:be:a2:6b:13:72:86:f7:78:86: 92:92:39:34:e3:d6:5d:69:d1:30:0c:f8:8e:28:5c: 81:68:da:6a:0a:5e:f5:8d:0a:10:1d:02:ff:3e:21: 6a:f2:43:15:b2:38:f9:d3:82:5a:1c:29:89:a8:ce: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F5:17:3B:1D:48:5C:78:7D:17:DE:FA:2C:7E:73:00:10:C1:CB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl X509v3 Authority Key Identifier: keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6fc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:7c:bc:3f:09:7c:dd:48:a7:10:6b:f8:c8:0e:34:d2:44: e9:ad:7d:38:82:f8:fb:ff:d8:d4:19:24:cf:69:f6:30:28:41: 81:1b:89:0a:72:f9:22:12:eb:2c:64:4f:ca:61:53:5e:f8:0e: 7c:35:81:f9:6f:27:28:47:52:1d:57:fe:66:7f:40:04:dd:19: 62:dd:49:ad:33:cc:3e:04:c2:ae:81:20:0d:1c:8c:c3:7c:0f: 16:b7:ba:46:3d:34:7a:0e:6a:69:a3:59:f1:45:8b:00:86:ea: 4c:4e:0d:8b:2d:4b:57:f7:c5:72:6a:45:cd:40:75:72:da:fb: 7f:48:c2:91:cd:64:93:13:79:21:31:08:e8:f0:40:f5:3e:1d: f9:66:e8:9f:99:e3:61:2d:0d:1c:14:60:21:a1:24:54:97:56: d1:e5:d4:cc:d2:d0:77:e0:e4:e2:43:6a:5f:8e:d4:63:7b:3e: 82:ad:ed:3a:ea:f3:33:50:5c:d4:5a:ea:26:b7:f4:19:d5:0d: 32:47:00:a2:52:48:97:a0:de:72:7d:3d:42:56:ab:c5:dd:d4: 29:4f:1b:bc:8a:86:96:c2:ea:3d:b0:95:bf:61:49:af:64:81: 53:b5:18:70:9e:97:da:2d:f6:91:c1:58:83:a9:df:d8:83:4b: a3:0d:92:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpJcFZvgxelOnCmp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlMjY4NmMtZjJjNy00ZTQ2LWJmYjMtODVhNzhmNjAy OTg0MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWJlODEzMDYtMWRlZC00OWQ0LWEzZGUtOWU4NzY2YzUzN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO7v/WRazlNOHaTDPh3npT6zZRd6NqwM+m5S xebWejzhwKEL2FV+5CDsSZEPUCe6UvMnwd1l6f1fsEXwppLeMfMeiBtD8ZduTT3B y78Qdep1A9ZWIaf9dwzjGPf0jB4UrJYkbq9rzJJVSz9qTHNs38j48m74MvSGdJ3M 2OcCYg35WNAOMmKIDGon5O0NmSlXIh86HXhfXvkDnoRhrqKsVf+tho0t1n5rfCpk h7+F5Uih2D/m/NHWzrCqV8mLSbSvC1Ygb5SBrGG+omsTcob3eIaSkjk049ZdadEw DPiOKFyBaNpqCl71jQoQHQL/PiFq8kMVsjj504JaHCmJqM6TswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFML1FzsdSFx4fRfe+ix+cwAQwcsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZGUy Njg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3OGY2MDI5ODQvMzlkMzdiYWItZTljYy0z ZmVjLTg2ZWYtYTdkYWY0OTE1MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGRlMjY4NmMtZjJjNy00ZTQ2LWJm YjMtODVhNzhmNjAyOTg0LzhkZTI2ODZjLWYyYzctNGU0Ni1iZmIzLTg1YTc4ZjYw Mjk4NC5jcmwwHwYDVR0jBBgwFoAUJor28S5xh4BDwjiwVVQTlktluAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZGUyNjg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3 OGY2MDI5ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2/AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHRV8vD8JfN1IpxBr+MgONNJE6a19OIL4+//Y1Bkkz2n2MChBgRuJ CnL5IhLrLGRPymFTXvgOfDWB+W8nKEdSHVf+Zn9ABN0ZYt1JrTPMPgTCroEgDRyM w3wPFre6Rj00eg5qaaNZ8UWLAIbqTE4Niy1LV/fFcmpFzUB1ctr7f0jCkc1kkxN5 ITEI6PBA9T4d+Wbon5njYS0NHBRgIaEkVJdW0eXUzNLQd+Dk4kNqX47UY3s+gq3t OurzM1Bc1FrqJrf0GdUNMkcAolJIl6Decn09Qlarxd3UKU8bvIqGlsLqPbCVv2FJ r2SBU7UYcJ6X2i32kcFYg6nf2INLow2Sdg== -----END CERTIFICATE-----Generated at Sun Jun 29 01:50:10 2025 by rpki-client