$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/25b113c9-c697-36b0-bd01-55f4b2111952.roa File: 25b113c9-c697-36b0-bd01-55f4b2111952.roa (raw, json) Hash identifier: 1bMJsRrcT61P/u7Kqp5nK/ac5Ow3zwgvMzb9oFMU7g8= Subject key identifier: 27:25:D1:C5:4D:56:76:E7:7F:2B:89:09:DB:60:9D:6B:7D:F3:E0:6E Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584A3E45ACB643A4BA42FFA57480 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/25b113c9-c697-36b0-bd01-55f4b2111952.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 216435 IP address blocks: 2602:fa54::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:ac:b6:43:a4:ba:42:ff:a5:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=1902739f-91eb-4916-8750-91dfcf116404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:fa:18:6f:5a:4e:6b:55:67:1c:b0:d0:d8: ea:8f:f6:9b:1f:07:f2:51:13:46:9d:3f:ca:00:fe: 02:b2:af:66:3f:92:c4:86:b3:c6:3d:04:0b:45:98: 9d:c2:8f:51:dd:53:9d:ae:77:e0:ad:a1:66:6d:b8: 6d:8d:17:44:59:6c:de:cf:3b:f6:aa:d2:e1:3c:a9: fb:6c:e1:1b:aa:f6:9a:09:28:2c:0c:a2:0d:a7:58: a6:fc:6c:50:bf:d5:61:23:d7:68:9a:91:26:17:9d: 33:c8:3a:6c:6d:31:49:ef:56:19:b2:ec:00:6b:e5: 1a:3c:28:c1:a8:df:64:8d:fe:c3:09:7d:3f:b6:81: 6c:0e:a7:88:54:e3:ce:87:f9:d1:9c:82:22:b1:76: ae:08:dc:35:35:58:2d:ad:70:d4:2f:53:9b:35:a6: 3c:5e:52:14:fd:92:5c:29:e6:8b:22:c1:ca:ed:51: 62:5a:8a:bb:aa:66:af:b7:e7:94:10:60:80:22:85: 5d:43:60:54:be:e9:68:be:94:41:3f:0a:ee:a2:be: c1:62:4f:28:a0:03:6b:f8:c3:0f:40:bd:79:fc:23: 5d:00:e1:40:ca:e0:8b:1f:f9:1d:57:fa:06:b6:42: b7:a5:ae:89:10:c9:a5:df:8b:12:0c:22:bc:62:76: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:25:D1:C5:4D:56:76:E7:7F:2B:89:09:DB:60:9D:6B:7D:F3:E0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/25b113c9-c697-36b0-bd01-55f4b2111952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa54::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:20:05:7a:4f:33:43:df:12:39:87:80:a0:b9:d6:6d:80: a2:92:d3:48:c7:57:85:fd:53:81:50:b2:94:3a:0c:68:97:46: df:35:da:32:0d:31:42:df:b5:54:6a:fa:1c:90:52:83:3f:1e: 0f:13:40:9e:e3:c1:57:ca:11:3f:12:ec:58:73:90:59:67:37: d3:9f:4c:6c:f3:6f:01:c4:09:80:1e:a6:de:0d:f1:28:70:77: ea:16:42:aa:83:d8:86:d2:0d:ad:30:b4:48:43:70:d5:5d:1f: 77:00:a6:4d:6b:63:2d:7b:0e:cb:cb:29:45:03:16:e5:2a:ba: c3:0d:72:db:f6:24:52:cc:5b:12:fe:d6:7c:8b:3c:c7:ed:9a: 83:e8:cd:b9:6e:05:4d:e1:a4:cb:eb:4e:91:48:21:2d:e2:87: cc:69:0d:d1:f0:0b:22:38:30:94:da:b1:03:a1:30:74:40:66: 7a:92:76:e1:06:83:79:17:ae:6a:bd:0f:3d:8c:f5:fd:30:e9: 7e:0b:08:7b:5e:ca:73:ef:8c:a1:00:ed:2f:eb:1e:99:33:3d: df:68:fa:1e:ae:c0:80:86:c4:e3:d5:58:bc:77:e5:a3:b8:e6: 2e:c8:24:d7:a4:35:b5:53:5b:4d:24:31:df:f0:ed:b9:0f:8a: d9:8b:7a:37 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo+Ray2Q6S6Qv+ldIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MTkwMjczOWYtOTFlYi00OTE2LTg3NTAtOTFkZmNmMTE2NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcf6GG9aTmtVZxyw0Njqj/abHwfyURNGnT/K AP4Csq9mP5LEhrPGPQQLRZidwo9R3VOdrnfgraFmbbhtjRdEWWzezzv2qtLhPKn7 bOEbqvaaCSgsDKINp1im/GxQv9VhI9dompEmF50zyDpsbTFJ71YZsuwAa+UaPCjB qN9kjf7DCX0/toFsDqeIVOPOh/nRnIIisXauCNw1NVgtrXDUL1ObNaY8XlIU/ZJc KeaLIsHK7VFiWoq7qmavt+eUEGCAIoVdQ2BUvulovpRBPwruor7BYk8ooANr+MMP QL15/CNdAOFAyuCLH/kdV/oGtkK3pa6JEMml34sSDCK8YnZSSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCcl0cVNVnbnfyuJCdtgnWt98+BuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjViMTEzYzktYzY5Ny0z NmIwLWJkMDEtNTVmNGIyMTExOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6VAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM2ogBXpPM0PfEjmHgKC51m2AopLTSMdXhf1TgVCylDoMaJdG3zXa Mg0xQt+1VGr6HJBSgz8eDxNAnuPBV8oRPxLsWHOQWWc3059MbPNvAcQJgB6m3g3x KHB36hZCqoPYhtINrTC0SENw1V0fdwCmTWtjLXsOy8spRQMW5Sq6ww1y2/YkUsxb Ev7WfIs8x+2ag+jNuW4FTeGky+tOkUghLeKHzGkN0fALIjgwlNqxA6EwdEBmepJ2 4QaDeReuar0PPYz1/TDpfgsIe17Kc++MoQDtL+semTM932j6Hq7AgIbE49VYvHfl o7jmLsgk16Q1tVNbTSQx3/DtuQ+K2Yt6Nw== -----END CERTIFICATE-----Generated at Mon Jun 30 05:26:39 2025 by rpki-client