$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5a71b34-942c-3d35-994f-ee28fd1b4f00.roa File: b5a71b34-942c-3d35-994f-ee28fd1b4f00.roa (raw, json) Hash identifier: WjZfMV9nuA4Syp+JSYIsiRLf6cU2a9oBabhuLW6JTC0= Subject key identifier: 03:EE:2A:71:04:4A:95:11:DC:51:C9:7E:FF:E3:60:3A:91:D2:8C:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A4C3B1E6C54BB34281F612780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5a71b34-942c-3d35-994f-ee28fd1b4f00.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 12076 IP address blocks: 2602:fd5e:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1e:6c:54:bb:34:28:1f:61:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=f34aec2f-ed90-4931-a201-1abde254802a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:b4:b4:24:fb:12:cd:36:d6:e4:78:18:6c: a3:4f:df:e7:24:3c:28:e2:6a:ab:8d:9d:17:16:39: 0f:c6:73:e8:71:8d:3d:58:7a:e3:6f:2c:7a:0d:87: 0d:a3:12:26:22:8d:b6:d1:0b:a8:e5:e9:50:35:28: 24:af:5d:f5:9b:fd:c0:7b:ad:04:22:fd:dc:fc:e1: e9:16:d8:52:ca:30:3d:d6:d5:6f:d1:13:fe:72:6f: 53:bc:ab:c5:63:71:5e:75:1d:41:de:eb:49:7a:11: b2:eb:b4:4c:ca:18:0c:ec:09:52:77:0c:aa:e4:f4: 30:cf:31:75:33:b1:d0:98:5e:96:e1:71:7e:42:be: 8d:8d:81:9e:2c:87:d2:fb:b6:0c:03:38:ca:67:06: 9a:fb:78:ce:26:b8:ed:d0:63:43:b6:d4:d4:ac:4a: d1:2d:75:eb:06:cc:56:b4:8e:dd:9f:d3:26:1e:be: 04:f0:9f:7d:ef:0c:e0:2e:51:32:8f:39:7d:d3:95: 2f:c3:24:48:a0:41:5f:d0:be:ae:48:21:b0:30:e7: c4:b4:5e:4f:db:61:0d:cc:ce:02:49:32:dd:ed:45: b7:e8:59:77:d0:db:e3:6c:69:ee:28:9e:56:32:e2: 74:06:f8:c3:57:5e:10:20:b9:b2:e0:ee:38:1f:40: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EE:2A:71:04:4A:95:11:DC:51:C9:7E:FF:E3:60:3A:91:D2:8C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5a71b34-942c-3d35-994f-ee28fd1b4f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd5e:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:73:a5:a4:c2:ee:00:99:f5:1e:b6:fb:f7:3a:1d:6d:db:68: d4:02:2e:cd:e7:f1:ad:a8:68:78:51:aa:4b:d9:c1:63:85:d0: 39:d1:e9:28:cf:db:34:88:ff:a0:55:62:53:14:e9:59:e8:02: da:47:80:bd:85:bb:c7:d8:92:ce:7a:d6:4d:a4:af:07:db:99: 5c:16:c4:15:7c:00:30:d3:80:7f:f6:58:bf:24:90:3d:82:7a: e7:46:67:aa:93:33:eb:06:b0:99:c2:10:c7:38:6b:43:54:e1: 04:61:f2:e5:2d:c9:ee:78:47:06:cd:31:3b:ec:4a:95:91:90: bf:30:12:6d:99:8b:b5:33:1c:f0:6a:7b:77:4b:0b:4e:aa:c2: 42:6b:1b:b5:2c:70:1e:d8:42:67:da:60:96:dc:84:ee:c0:c4: 05:ff:7c:98:f3:6f:86:78:0c:f9:04:fb:45:8b:59:5a:a1:15: 63:a7:99:c9:4c:59:d3:f9:53:7d:78:81:ec:da:01:4e:60:4c: eb:36:ea:21:57:4a:68:5f:84:0a:4b:7b:05:c8:d8:39:50:f2: 29:de:8d:a8:8e:41:4e:be:72:ed:25:01:57:57:41:ca:01:d4: 93:33:55:9b:cd:0c:c5:13:18:63:87:95:7e:d6:51:cb:2d:1f: ba:1f:48:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOx5sVLs0KB9hJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZjM0YWVjMmYtZWQ5MC00OTMxLWEyMDEtMWFiZGUyNTQ4MDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukS0tCT7Es021uR4GGyjT9/nJDwo4mqrjZ0X FjkPxnPocY09WHrjbyx6DYcNoxImIo220Quo5elQNSgkr131m/3Ae60EIv3c/OHp FthSyjA91tVv0RP+cm9TvKvFY3FedR1B3utJehGy67RMyhgM7AlSdwyq5PQwzzF1 M7HQmF6W4XF+Qr6NjYGeLIfS+7YMAzjKZwaa+3jOJrjt0GNDttTUrErRLXXrBsxW tI7dn9MmHr4E8J997wzgLlEyjzl905UvwyRIoEFf0L6uSCGwMOfEtF5P22ENzM4C STLd7UW36Fl30NvjbGnuKJ5WMuJ0BvjDV14QILmy4O44H0BzHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAPuKnEESpUR3FHJfv/jYDqR0oxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjVhNzFiMzQtOTQyYy0z ZDM1LTk5NGYtZWUyOGZkMWI0ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9XgAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdzpaTC7gCZ9R62+/c6HW3baNQCLs3n8a2oaHhRqkvZwWOF0DnR 6SjP2zSI/6BVYlMU6VnoAtpHgL2Fu8fYks561k2krwfbmVwWxBV8ADDTgH/2WL8k kD2CeudGZ6qTM+sGsJnCEMc4a0NU4QRh8uUtye54RwbNMTvsSpWRkL8wEm2Zi7Uz HPBqe3dLC06qwkJrG7UscB7YQmfaYJbchO7AxAX/fJjzb4Z4DPkE+0WLWVqhFWOn mclMWdP5U314gezaAU5gTOs26iFXSmhfhApLewXI2DlQ8inejaiOQU6+cu0lAVdX QcoB1JMzVZvNDMUTGGOHlX7WUcstH7ofSIM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:50 2025 by rpki-client