$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa File: 575aa4d8-88aa-34d0-80b3-35c82af29649.roa (raw, json) Hash identifier: /pOJDssqVwr8ezq3smeaVvCFRhrmnI0GGY5FXlyr31E= Subject key identifier: B6:B8:53:A1:DE:84:BB:0F:2C:42:F7:08:93:E7:C7:A1:5C:0B:A6:43 Certificate issuer: /CN=9b2dd4d6-06da-4602-9071-aee92968f31a Certificate serial: 010D0C9F4328584A5600578DFBDD90329602D900 Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 400596 IP address blocks: 2602:f758::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:57:8d:fb:dd:90:32:96:02:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=4e6ed3ad-efbd-46aa-898b-0e59d6a9a673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:38:3c:e7:63:9c:8c:41:75:62:dc:1e:e1: 7f:94:e3:ff:da:fd:dd:c8:e3:0a:67:80:68:46:e5: e6:8d:9e:d6:29:20:18:14:70:d5:db:4b:c1:76:93: 19:09:0e:73:5b:96:9d:37:29:74:27:2a:36:76:f5: a3:c1:49:72:be:65:6e:b8:c5:15:ae:65:f4:7e:63: aa:d3:e5:a0:17:46:7a:3a:8d:f8:72:b1:0b:b8:9f: dd:04:51:c6:36:18:4d:0e:23:42:98:c4:5e:7d:62: 2d:62:22:80:2d:ea:22:db:7a:1d:2e:3a:f1:c4:d9: 81:5b:ad:72:66:22:4c:73:80:a4:7d:9a:2e:5d:b3: 10:13:fb:0a:42:b5:2c:78:c2:a0:dc:ac:7d:cb:e1: 7a:8c:83:b8:d3:64:99:5b:74:86:c0:e6:09:97:62: 6a:0e:27:e3:53:e0:be:9c:79:ed:3b:34:c0:d4:fe: a0:5c:b4:43:a0:17:d1:4d:d5:84:f5:b5:18:67:99: db:80:de:a6:4a:a2:83:f4:f1:8e:0a:8e:78:bf:9f: ec:1f:6d:88:a7:dd:54:dd:1b:a3:bb:a7:2d:f1:bb: 0e:4d:1a:c4:9e:c6:97:40:b5:ec:90:6a:f4:d7:11: ab:4e:e9:df:96:07:e5:87:da:8e:4a:70:23:75:e8: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:53:A1:DE:84:BB:0F:2C:42:F7:08:93:E7:C7:A1:5C:0B:A6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl X509v3 Authority Key Identifier: keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f758::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:94:06:dd:75:98:8f:30:1b:83:a6:b3:f6:55:09:6f:d9:a2: 14:14:16:ee:40:8b:09:49:1a:a6:09:a4:f2:55:c2:6b:8c:a9: a3:75:66:d2:12:0d:4d:bf:f0:d7:93:d2:da:93:b2:c4:c8:d5: 73:8e:d8:c8:d6:76:89:97:85:71:57:13:39:06:88:e9:98:d9: f8:c9:2c:fd:de:d0:c2:9d:05:73:97:8f:56:cb:f1:2f:69:cb: 55:1d:67:85:61:bd:18:61:66:f2:a5:c8:3e:f3:c7:58:fd:ab: 09:d6:59:82:b9:ca:36:a4:f0:64:78:29:fc:bc:d8:a3:f8:77: f3:8c:37:96:1b:54:89:d8:dc:a7:f2:8b:c1:08:ec:80:24:b8: ea:26:3d:34:78:07:b6:32:fa:d9:77:0d:f1:23:83:92:71:24: 22:11:5f:01:33:91:af:dd:a4:ab:e2:77:7f:64:55:4e:3f:3e: fd:2c:fb:74:2f:53:d7:dc:39:b0:2c:78:3f:b2:a5:4d:bd:51: e8:4a:61:e1:05:ef:f2:2d:1d:20:27:a3:88:8c:95:70:73:5a: da:ac:7a:c8:fb:f3:bb:34:56:7f:cb:1f:e3:c7:62:ac:54:14: 45:0a:69:6f:5d:d0:58:b3:4c:30:4f:04:dd:ba:d3:62:54:64: ea:2b:46:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpWAFeN+92QMpYC2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm MzFhMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk NGU2ZWQzYWQtZWZiZC00NmFhLTg5OGItMGU1OWQ2YTlhNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmic4POdjnIxBdWLcHuF/lOP/2v3dyOMKZ4Bo RuXmjZ7WKSAYFHDV20vBdpMZCQ5zW5adNyl0Jyo2dvWjwUlyvmVuuMUVrmX0fmOq 0+WgF0Z6Oo34crELuJ/dBFHGNhhNDiNCmMRefWItYiKALeoi23odLjrxxNmBW61y ZiJMc4CkfZouXbMQE/sKQrUseMKg3Kx9y+F6jIO402SZW3SGwOYJl2JqDifjU+C+ nHntOzTA1P6gXLRDoBfRTdWE9bUYZ5nbgN6mSqKD9PGOCo54v5/sH22Ip91U3Ruj u6ct8bsOTRrEnsaXQLXskGr01xGrTunflgflh9qOSnAjdegAcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLa4U6HehLsPLEL3CJPnx6FcC6ZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvNTc1YWE0ZDgtODhhYS0z NGQwLTgwYjMtMzVjODJhZjI5NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4 ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5 Mjk2OGYzMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3WAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABpQG3XWYjzAbg6az9lUJb9miFBQW7kCLCUkapgmk8lXCa4ypo3Vm 0hINTb/w15PS2pOyxMjVc47YyNZ2iZeFcVcTOQaI6ZjZ+Mks/d7Qwp0Fc5ePVsvx L2nLVR1nhWG9GGFm8qXIPvPHWP2rCdZZgrnKNqTwZHgp/LzYo/h384w3lhtUidjc p/KLwQjsgCS46iY9NHgHtjL62XcN8SODknEkIhFfATORr92kq+J3f2RVTj8+/Sz7 dC9T19w5sCx4P7KlTb1R6Eph4QXv8i0dICejiIyVcHNa2qx6yPvzuzRWf8sf48di rFQURQppb13QWLNMME8E3brTYlRk6itGDQ== -----END CERTIFICATE-----Generated at Tue Jul 1 02:45:41 2025 by rpki-client