$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/ad7dbcad-9a35-336e-9d2e-dd8d751f1048.roa File: ad7dbcad-9a35-336e-9d2e-dd8d751f1048.roa (raw, json) Hash identifier: LvXpp6wrtSWC95O/oNHC8Rhl5YihC+XlFe2pLmCj85c= Subject key identifier: 67:66:32:90:DE:8A:31:A4:C2:5F:CD:C1:CF:B9:14:36:6F:22:38:AE Certificate issuer: /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7 Certificate serial: 010D0C9F4328584A374AC1EB61429077D0FFF200 Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/ad7dbcad-9a35-336e-9d2e-dd8d751f1048.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 214483 IP address blocks: 2602:f756:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c1:eb:61:42:90:77:d0:ff:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=78d5f0b9-c2a1-4b91-b05f-733f7355f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:10:58:2a:bd:66:b6:a9:20:9a:3e:bf:29: 94:d4:02:18:bd:9a:b7:e1:2d:03:8b:d4:2a:36:d6: c6:09:dd:0e:a8:4d:42:15:a6:2d:07:ea:75:ac:a6: eb:4a:dd:5a:63:1e:d4:84:69:2c:a3:0f:2c:9b:5d: f5:3e:f6:ab:63:d1:aa:e2:f3:da:88:9a:f3:17:63: 8f:b7:9f:3f:b0:79:f4:ad:76:18:c9:6e:db:47:03: 9e:cd:93:2b:b8:87:c7:59:7a:d5:e2:59:14:eb:d1: 59:2b:b8:4b:e9:7c:4f:dc:b7:21:d7:19:10:63:22: 3d:f4:0a:4c:39:17:18:d0:0e:ea:59:8d:16:5d:ed: 8c:07:46:26:e5:22:49:07:83:12:89:c6:bd:72:ff: 6a:c4:db:e1:1b:36:40:6c:5b:b7:f2:f7:65:5f:75: 45:c7:36:83:79:e5:76:93:a5:d4:b2:1f:14:a8:78: ed:e4:de:88:02:e5:47:ec:f2:f3:8b:10:55:c7:2c: fc:9a:43:36:c5:73:8f:99:25:b2:1c:32:e4:e5:08: ce:6f:0d:68:8b:8f:28:c2:ea:53:9b:80:77:1e:45: cf:ab:0c:88:74:cf:e8:01:55:21:ce:47:f9:e8:ef: 66:a2:cd:20:d1:13:a1:10:be:00:69:68:ca:7b:88: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:32:90:DE:8A:31:A4:C2:5F:CD:C1:CF:B9:14:36:6F:22:38:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/ad7dbcad-9a35-336e-9d2e-dd8d751f1048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl X509v3 Authority Key Identifier: keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f756:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d7:0d:73:e3:de:80:be:ea:e7:42:8a:e4:49:01:a8:85:52: 67:f0:f1:06:45:4e:af:fb:9b:44:8c:8c:47:1c:80:c5:94:42: fa:3e:ee:be:fb:f2:01:af:e8:b2:d6:03:ce:f5:1b:78:a7:c7: e1:31:9f:11:2b:e3:b9:5c:e1:42:07:dc:ba:9b:73:25:10:04: 64:7c:5f:13:5a:e0:8a:c9:1d:99:f7:52:f2:18:6c:b1:b3:37: c5:49:f6:8f:73:d7:79:91:9f:16:74:ff:e8:f3:6e:02:6b:6b: 25:62:79:a5:56:69:20:e7:f1:13:f1:1c:e7:00:74:9e:e5:84: c8:40:76:da:b1:ed:d0:6f:3f:8f:66:77:a9:fe:67:33:11:6d: ea:0f:62:85:ff:19:13:09:98:f1:f2:eb:7d:47:ea:f9:ae:ff: c3:5e:84:fc:a5:fb:1b:5c:29:67:d7:23:21:66:b7:92:79:4a: c6:6a:89:25:ff:38:ce:32:66:e1:85:b7:b7:e7:fe:e9:9f:9f: a1:6d:45:78:f9:74:45:c1:ba:90:ce:3c:90:cd:fc:49:03:8c: 44:8d:ce:bc:0c:28:6b:6e:9a:d4:f4:51:9c:7b:f6:c4:8b:c1: 92:08:00:a3:43:84:a0:73:48:4f:4a:a3:2f:68:2f:00:4c:5c: 07:4c:c9:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo3SsHrYUKQd9D/8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiYmEwZTAtZmI3Yi00OWU1LWJjZjgtNTQ5NGExZjRj ZGU3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NzhkNWYwYjktYzJhMS00YjkxLWIwNWYtNzMzZjczNTVmODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnEQWCq9ZrapIJo+vymU1AIYvZq34S0Di9Qq NtbGCd0OqE1CFaYtB+p1rKbrSt1aYx7UhGksow8sm131PvarY9Gq4vPaiJrzF2OP t58/sHn0rXYYyW7bRwOezZMruIfHWXrV4lkU69FZK7hL6XxP3Lch1xkQYyI99ApM ORcY0A7qWY0WXe2MB0Ym5SJJB4MSica9cv9qxNvhGzZAbFu38vdlX3VFxzaDeeV2 k6XUsh8UqHjt5N6IAuVH7PLzixBVxyz8mkM2xXOPmSWyHDLk5QjObw1oi48owupT m4B3HkXPqwyIdM/oAVUhzkf56O9mos0g0ROhEL4AaWjKe4iWmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdmMpDeijGkwl/Nwc+5FDZvIjiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Ji YTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0YTFmNGNkZTcvYWQ3ZGJjYWQtOWEzNS0z MzZlLTlkMmUtZGQ4ZDc1MWYxMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdiYmEwZTAtZmI3Yi00OWU1LWJj ZjgtNTQ5NGExZjRjZGU3L2M3YmJhMGUwLWZiN2ItNDllNS1iY2Y4LTU0OTRhMWY0 Y2RlNy5jcmwwHwYDVR0jBBgwFoAUHcEwUKNSLTycF61s8O5VgkIzk/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2JiYTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0 YTFmNGNkZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3VgAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrXDXPj3oC+6udCiuRJAaiFUmfw8QZFTq/7m0SMjEccgMWUQvo+ 7r778gGv6LLWA871G3inx+ExnxEr47lc4UIH3LqbcyUQBGR8XxNa4IrJHZn3UvIY bLGzN8VJ9o9z13mRnxZ0/+jzbgJrayVieaVWaSDn8RPxHOcAdJ7lhMhAdtqx7dBv P49md6n+ZzMRbeoPYoX/GRMJmPHy631H6vmu/8NehPyl+xtcKWfXIyFmt5J5SsZq iSX/OM4yZuGFt7fn/umfn6FtRXj5dEXBupDOPJDN/EkDjESNzrwMKGtumtT0UZx7 9sSLwZIIAKNDhKBzSE9Koy9oLwBMXAdMybk= -----END CERTIFICATE-----Generated at Sun Jun 29 06:30:40 2025 by rpki-client