$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/a023014f-fa83-3ff6-a6c8-c4bad550b797.roa File: a023014f-fa83-3ff6-a6c8-c4bad550b797.roa (raw, json) Hash identifier: tRblR0GqdPXkdDxitLhulgZ7Y9djBGX4WlpJFS7YhRs= Subject key identifier: D9:08:F6:2D:DA:27:CA:90:E6:75:5A:E4:1E:34:6B:A0:9B:40:70:B4 Certificate issuer: /CN=30cf23fd-5611-4c02-ad2d-058c4a722295 Certificate serial: 010D0C9F4328584AEEE91C7401BAAA156FD0C400 Authority key identifier: A2:DC:16:E2:A0:96:EB:3F:A0:EC:BC:11:64:51:0A:0B:01:76:D3:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/a023014f-fa83-3ff6-a6c8-c4bad550b797.roa Signing time: Thu 21 Aug 2025 19:32:50 +0000 ROA not before: Thu 21 Aug 2025 19:32:50 +0000 ROA not after: Wed 19 Nov 2025 20:32:50 +0000 asID: 55039 IP address blocks: 2602:f59f::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/30cf23fd-5611-4c02-ad2d-058c4a722295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/30cf23fd-5611-4c02-ad2d-058c4a722295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:e9:1c:74:01:ba:aa:15:6f:d0:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30cf23fd-5611-4c02-ad2d-058c4a722295 Validity Not Before: Aug 21 19:32:50 2025 GMT Not After : Nov 19 20:32:50 2025 GMT Subject: CN=09fa62cc-ff88-4503-ab9d-1571bbc939dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5b:cd:fd:35:81:8d:95:8a:4d:b8:bf:8b:87: fa:d5:f0:bc:b5:93:1d:76:bc:01:a5:88:16:ae:d7: e9:15:c6:a5:94:b2:7c:61:d6:85:97:16:b3:e5:8c: b5:f0:ff:12:8e:e6:85:19:56:c0:bc:f1:5f:a8:3b: a0:8d:21:fc:e7:4d:e6:3f:32:f6:31:c3:af:09:09: 2a:6d:33:df:e4:0c:28:30:e3:4e:f3:f1:0f:60:8f: 95:08:4d:d8:00:27:ee:17:f2:cc:bb:ff:92:25:3b: e8:a2:a9:e3:91:a1:a6:f6:97:89:18:9f:6e:7b:6a: ee:de:4c:62:29:0f:a9:f7:32:01:9b:bc:31:5d:7d: 89:df:bd:69:69:84:6c:3b:08:18:ad:44:b0:9a:ba: fe:5c:69:65:23:50:00:bf:df:ab:94:f7:b5:08:35: a3:ca:61:39:08:4b:9b:f6:45:d1:78:91:d2:65:16: 8c:1f:a3:59:2e:40:7a:27:19:51:1c:bc:de:b5:77: 50:db:63:80:c4:87:f1:e0:a0:d9:31:63:e1:78:d0: 94:9b:a4:fe:18:3b:ab:ba:ff:f3:db:82:ec:00:c8: e2:bd:bf:e7:8b:65:05:6b:61:3e:6a:07:96:6b:45: b1:6f:87:33:f7:ab:1e:a4:8f:18:cd:44:96:7c:8a: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:F6:2D:DA:27:CA:90:E6:75:5A:E4:1E:34:6B:A0:9B:40:70:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/a023014f-fa83-3ff6-a6c8-c4bad550b797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295/30cf23fd-5611-4c02-ad2d-058c4a722295.crl X509v3 Authority Key Identifier: keyid:A2:DC:16:E2:A0:96:EB:3F:A0:EC:BC:11:64:51:0A:0B:01:76:D3:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30cf23fd-5611-4c02-ad2d-058c4a722295.cer sbgp-ipAddrBlock: critical IPv6: 2602:f59f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0d:75:8b:ae:88:d0:62:ee:82:6c:8a:c7:78:25:a3:90:8c: b1:21:70:29:86:86:fc:17:91:25:b4:21:6a:a1:a7:62:b4:6f: 4e:51:dd:f1:65:9a:a0:82:12:13:81:93:20:d5:f7:5e:ec:b9: e6:00:02:bf:7a:e1:74:d8:20:4b:ea:1d:03:30:86:ad:6f:fc: d5:f5:2c:1b:5a:77:8c:b1:74:27:1d:ed:b6:18:7a:61:db:3a: c5:cf:c9:6b:33:43:59:4e:fb:03:1c:70:4a:a3:da:56:73:98: c3:98:c0:40:3c:24:07:9e:e7:d2:70:45:9b:2b:39:5a:6d:24: 99:71:54:a3:45:eb:b0:4d:b3:5b:fb:c4:c5:06:32:a9:d2:ce: 5a:27:ce:95:f7:11:0a:21:8b:7d:43:bf:e3:a0:ee:0e:b6:e8: 82:4f:7e:75:31:31:04:fd:63:b2:f5:ad:56:86:ed:3f:4e:da: 8c:a5:03:2d:79:e5:6e:85:fb:1e:32:07:91:37:43:96:d3:7a: cc:c8:7a:4a:4f:ae:25:81:3e:06:de:91:6b:c1:ba:81:a9:b9: fc:1e:ca:c3:0e:f7:cc:e8:06:7d:3d:1b:08:63:7f:7d:19:65: 8c:9e:d4:31:46:d1:93:0c:9a:a4:b1:0c:cb:12:56:27:41:10: c7:dd:73:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEru6Rx0AbqqFW/QxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBjZjIzZmQtNTYxMS00YzAyLWFkMmQtMDU4YzRhNzIy Mjk1MB4XDTI1MDgyMTE5MzI1MFoXDTI1MTExOTIwMzI1MFowLzEtMCsGA1UEAxMk MDlmYTYyY2MtZmY4OC00NTAzLWFiOWQtMTU3MWJiYzkzOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FvN/TWBjZWKTbi/i4f61fC8tZMddrwBpYgW rtfpFcallLJ8YdaFlxaz5Yy18P8SjuaFGVbAvPFfqDugjSH8503mPzL2McOvCQkq bTPf5AwoMONO8/EPYI+VCE3YACfuF/LMu/+SJTvooqnjkaGm9peJGJ9ue2ru3kxi KQ+p9zIBm7wxXX2J371paYRsOwgYrUSwmrr+XGllI1AAv9+rlPe1CDWjymE5CEub 9kXReJHSZRaMH6NZLkB6JxlRHLzetXdQ22OAxIfx4KDZMWPheNCUm6T+GDuruv/z 24LsAMjivb/ni2UFa2E+ageWa0Wxb4cz96sepI8YzUSWfIrFGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNkI9i3aJ8qQ5nVa5B40a6CbQHC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMGNm MjNmZC01NjExLTRjMDItYWQyZC0wNThjNGE3MjIyOTUvYTAyMzAxNGYtZmE4My0z ZmY2LWE2YzgtYzRiYWQ1NTBiNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzBjZjIzZmQtNTYxMS00YzAyLWFk MmQtMDU4YzRhNzIyMjk1LzMwY2YyM2ZkLTU2MTEtNGMwMi1hZDJkLTA1OGM0YTcy MjI5NS5jcmwwHwYDVR0jBBgwFoAUotwW4qCW6z+g7LwRZFEKCwF20/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMGNmMjNmZC01NjExLTRjMDItYWQyZC0wNThj NGE3MjIyOTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1nwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADQ11i66I0GLugmyKx3glo5CMsSFwKYaG/BeRJbQhaqGnYrRvTlHd 8WWaoIISE4GTINX3Xuy55gACv3rhdNggS+odAzCGrW/81fUsG1p3jLF0Jx3tthh6 Yds6xc/JazNDWU77AxxwSqPaVnOYw5jAQDwkB57n0nBFmys5Wm0kmXFUo0XrsE2z W/vExQYyqdLOWifOlfcRCiGLfUO/46DuDrbogk9+dTExBP1jsvWtVobtP07ajKUD LXnlboX7HjIHkTdDltN6zMh6Sk+uJYE+Bt6Ra8G6gam5/B7Kww73zOgGfT0bCGN/ fRlljJ7UMUbRkwyapLEMyxJWJ0EQx91znA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:59 2025 by rpki-client