$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1628c4aa-9911-3ab9-8ea3-26a756180d35.roa File: 1628c4aa-9911-3ab9-8ea3-26a756180d35.roa (raw, json) Hash identifier: ZF2dtwZIQj49SmbnYhTJ4CGC3NxKiipStSxQiCPF2Ls= Subject key identifier: 6F:72:5C:FF:5F:5F:68:03:FB:60:FF:6F:3A:C5:B3:BB:14:8D:AE:00 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584A03A55090CB166AD124E91C80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1628c4aa-9911-3ab9-8ea3-26a756180d35.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 396982 IP address blocks: 2602:800:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:50:90:cb:16:6a:d1:24:e9:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=c54de49c-dcc5-439d-af6c-a8c1b91368df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:86:fb:f6:ef:c2:e8:f2:2a:d9:0c:0d:6c: 42:fc:bd:83:63:67:0a:0f:d0:71:86:d3:ba:22:2c: 09:37:29:f6:0b:42:d9:24:02:48:2e:c1:e2:e5:4f: a8:8a:8a:b9:5e:29:6a:bb:96:71:d1:86:bd:cc:3a: 16:9f:03:d9:12:1a:da:f5:fe:d3:1f:ec:94:41:27: 67:fa:23:aa:f5:63:1c:34:53:ef:39:b0:f4:d6:f4: 5d:b4:8b:01:27:be:00:5e:33:f6:6f:98:39:04:4f: 5d:c0:28:ea:55:4d:52:74:40:de:41:c6:12:e2:aa: af:07:63:f5:f7:89:f9:51:89:c1:78:34:09:fd:ac: 42:48:c8:8e:1f:84:8b:36:7b:a2:58:55:10:90:6b: 2b:af:09:55:52:17:9c:7d:40:f2:2b:4b:f4:b5:88: 79:ad:29:4b:54:5a:9c:82:24:3e:24:3c:a4:93:43: 24:a0:8c:3b:9a:a8:36:99:08:38:1f:1d:8c:87:d5: f4:14:ec:fd:16:e2:51:7c:7b:ce:57:36:23:1f:a3: 5a:2d:8b:e4:02:71:bd:7d:cc:ab:94:c1:e6:ca:86: f1:22:4b:21:3a:fb:11:cb:1d:f0:c6:e1:f2:f7:11: e4:7b:c0:ee:1e:de:b7:d1:2f:1b:fb:ad:69:59:65: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:5C:FF:5F:5F:68:03:FB:60:FF:6F:3A:C5:B3:BB:14:8D:AE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1628c4aa-9911-3ab9-8ea3-26a756180d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:2001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:34:97:ef:5b:00:99:3c:40:93:b5:b3:cb:e7:81:b4:06:2b: 9d:25:93:25:9b:8f:fb:4d:0c:8c:d0:b4:90:dc:5e:e3:ce:ee: b8:48:57:c3:28:a6:8c:9b:d9:32:72:03:3d:be:76:0b:d9:5b: 61:23:70:f1:be:82:32:31:12:fc:a3:1a:2f:4d:13:0b:aa:7b: fa:95:2f:73:1f:0c:86:a3:e5:a5:a7:04:62:14:86:fc:23:6b: a3:84:d0:2a:5e:86:bd:9a:2f:46:fd:c2:c4:09:e5:b7:e1:96: 24:00:d0:26:91:a1:75:49:7f:27:cf:94:e9:e8:bb:99:80:30: b2:7c:8d:1a:7d:c5:bd:b4:24:49:21:9b:68:21:f1:85:bc:cd: 78:3e:bc:8b:9e:04:47:6c:4b:9b:33:56:a8:0f:6c:a7:98:ce: 10:74:b9:df:a9:a0:84:a1:f9:f2:d0:24:7b:cf:f8:64:e1:19: 22:5d:ac:04:a4:b9:6e:04:89:b0:a8:08:96:6c:c1:48:d5:07: e2:1c:f0:2b:98:e0:8a:fc:f6:1e:9f:92:ae:94:d2:b8:d7:2c: cf:20:bb:7a:c4:e7:0b:e6:55:61:03:00:5b:88:e9:89:74:63: 40:1a:58:05:26:ec:e7:c0:ae:54:43:85:80:8f:07:c4:e2:22: 95:e9:42:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpVCQyxZq0STpHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YzU0ZGU0OWMtZGNjNS00MzlkLWFmNmMtYThjMWI5MTM2OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+qG+/bvwujyKtkMDWxC/L2DY2cKD9BxhtO6 IiwJNyn2C0LZJAJILsHi5U+oioq5Xilqu5Zx0Ya9zDoWnwPZEhra9f7TH+yUQSdn +iOq9WMcNFPvObD01vRdtIsBJ74AXjP2b5g5BE9dwCjqVU1SdEDeQcYS4qqvB2P1 94n5UYnBeDQJ/axCSMiOH4SLNnuiWFUQkGsrrwlVUhecfUDyK0v0tYh5rSlLVFqc giQ+JDykk0MkoIw7mqg2mQg4Hx2Mh9X0FOz9FuJRfHvOVzYjH6NaLYvkAnG9fcyr lMHmyobxIkshOvsRyx3wxuHy9xHke8DuHt630S8b+61pWWVI0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9yXP9fX2gD+2D/bzrFs7sUja4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMTYyOGM0YWEtOTkxMS0z YWI5LThlYTMtMjZhNzU2MTgwZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIACAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABo0l+9bAJk8QJO1s8vngbQGK50lkyWbj/tNDIzQtJDcXuPO7rhI V8Mopoyb2TJyAz2+dgvZW2EjcPG+gjIxEvyjGi9NEwuqe/qVL3MfDIaj5aWnBGIU hvwja6OE0Cpehr2aL0b9wsQJ5bfhliQA0CaRoXVJfyfPlOnou5mAMLJ8jRp9xb20 JEkhm2gh8YW8zXg+vIueBEdsS5szVqgPbKeYzhB0ud+poISh+fLQJHvP+GThGSJd rASkuW4EibCoCJZswUjVB+Ic8CuY4Ir89h6fkq6U0rjXLM8gu3rE5wvmVWEDAFuI 6Yl0Y0AaWAUm7OfArlRDhYCPB8TiIpXpQk4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:07:53 2025 by rpki-client