$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa File: 10b14d09-bbe6-3825-990a-eede0fc019c2.roa (raw, json) Hash identifier: ocvNAQusALirYToUPUoI2q5d0yqTE7x4l6qwW8l+LSI= Subject key identifier: EE:49:C1:02:58:D8:0C:29:83:F6:8C:A5:A4:C8:AF:7D:0F:85:12:7E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F43285849E22539EEC21A6D1B866E3B80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 396982 IP address blocks: 2602:800:2000::/40 maxlen: 40 2602:800:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:39:ee:c2:1a:6d:1b:86:6e:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=8442a009-41c8-4b8b-8176-17be5a6147eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d9:f8:7a:99:46:b8:30:57:f0:0d:d3:f9:77: 03:cb:70:df:88:be:21:2a:0d:cb:1b:66:54:b2:9a: fc:78:28:ad:21:71:90:63:95:c0:2f:5e:7d:64:f1: 59:f6:69:79:38:f7:d6:cd:fa:8a:05:ba:91:d2:54: a7:b3:e4:83:85:f3:53:8a:3b:27:af:d1:b6:63:8e: 1f:f9:58:ee:c7:fe:0a:57:67:4a:4a:2b:45:85:0c: 48:24:8e:1d:d6:aa:a4:81:36:7c:3d:55:0c:37:07: c2:6e:e9:fc:05:25:58:cf:54:ed:a4:f6:e1:6e:c5: e3:60:b4:66:18:fa:ee:a0:eb:0c:1b:3b:fb:87:be: f3:8a:2a:c3:49:82:f7:4a:72:01:39:93:c6:ad:e9: 2a:73:cf:a3:2f:01:c7:b7:d0:d0:1c:a4:da:65:c2: 37:45:c4:ec:f7:c4:95:bc:b9:eb:7b:3f:14:a0:aa: 72:ae:d0:6e:49:59:ce:36:46:e3:3c:99:f3:24:a6: 97:e0:98:a6:c5:3f:f3:e8:be:62:d4:7c:de:02:d9: 85:a6:b0:8d:1a:c4:7b:6b:3a:7a:6d:62:43:2a:70: 1c:de:b3:ac:39:62:e1:9c:e4:d7:82:aa:d9:f8:7a: fc:f3:bf:e8:25:92:33:35:ad:99:d7:08:36:29:db: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:C1:02:58:D8:0C:29:83:F6:8C:A5:A4:C8:AF:7D:0F:85:12:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f3:a5:eb:79:98:72:18:e0:57:60:13:d4:26:71:e6:73:f4: 02:dd:ba:28:33:dd:b5:dd:7a:30:c9:85:64:15:32:10:b6:5c: 3a:37:4b:f6:c4:7c:1f:0b:7f:90:6a:32:5a:5b:aa:76:b5:ae: 2b:7a:1b:63:f2:49:8e:ff:72:31:d4:f3:fb:14:41:8c:ed:16: 0a:bc:84:6f:f8:f4:8b:cd:77:84:a6:51:0e:35:6c:08:ee:76: 25:2f:1b:81:a3:2b:a5:54:0d:a2:8b:be:46:2d:eb:7e:b9:a8: bd:0f:81:35:c5:84:a9:ef:a8:55:d0:3e:72:98:49:8f:ac:85: a3:4c:2c:f7:d9:c6:d0:92:4b:cc:7e:b6:33:f6:bb:ea:bf:f4: 86:e3:dc:54:be:94:e8:81:fb:07:75:9a:3a:ad:8c:69:43:1e: 98:99:df:21:97:e2:42:33:86:2b:8c:39:e3:1b:a1:ee:46:bd: af:9e:b7:1b:82:de:d0:77:9c:66:9b:2f:ba:ea:65:75:99:af: a6:53:6b:ae:c6:d3:97:4d:54:c3:1f:01:c4:f7:06:f6:89:a4: e4:11:22:90:aa:8f:f0:4f:36:69:4e:8c:de:05:b9:fc:0a:54: 43:af:14:4a:3d:3d:4d:98:14:56:60:09:4f:df:79:c2:a0:36: 4e:3e:b6:51 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEniJTnuwhptG4ZuO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ODQ0MmEwMDktNDFjOC00YjhiLTgxNzYtMTdiZTVhNjE0N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dn4eplGuDBX8A3T+XcDy3DfiL4hKg3LG2ZU spr8eCitIXGQY5XAL159ZPFZ9ml5OPfWzfqKBbqR0lSns+SDhfNTijsnr9G2Y44f +Vjux/4KV2dKSitFhQxIJI4d1qqkgTZ8PVUMNwfCbun8BSVYz1TtpPbhbsXjYLRm GPruoOsMGzv7h77ziirDSYL3SnIBOZPGrekqc8+jLwHHt9DQHKTaZcI3RcTs98SV vLnrez8UoKpyrtBuSVnONkbjPJnzJKaX4JimxT/z6L5i1HzeAtmFprCNGsR7azp6 bWJDKnAc3rOsOWLhnOTXgqrZ+Hr887/oJZIzNa2Z1wg2KdtJSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO5JwQJY2Awpg/aMpaTIr30PhRJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMTBiMTRkMDktYmJlNi0z ODI1LTk5MGEtZWVkZTBmYzAxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ/Ol63mYchjgV2AT1CZx5nP0At26KDPdtd16MMmFZBUyELZcOjdL 9sR8Hwt/kGoyWluqdrWuK3obY/JJjv9yMdTz+xRBjO0WCryEb/j0i813hKZRDjVs CO52JS8bgaMrpVQNoou+Ri3rfrmovQ+BNcWEqe+oVdA+cphJj6yFo0ws99nG0JJL zH62M/a76r/0huPcVL6U6IH7B3WaOq2MaUMemJnfIZfiQjOGK4w54xuh7ka9r563 G4Le0HecZpsvuupldZmvplNrrsbTl01Uwx8BxPcG9omk5BEikKqP8E82aU6M3gW5 /ApUQ68USj09TZgUVmAJT995wqA2Tj62UQ== -----END CERTIFICATE-----Generated at Tue Jul 1 18:02:15 2025 by rpki-client