$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa File: 1298d51a-f11e-30fd-9b81-309e6723fa54.roa (raw, json) Hash identifier: AtrFVyRSPhfVzOlJciQ6ElNKCY2dOH1svVft7XO6OAY= Subject key identifier: 0E:45:03:64:77:D4:8A:36:71:75:48:DA:E1:EF:CA:CD:CE:A7:A6:41 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F4328584A7D15F11FEFE4B1AD92FCC400 Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 23506 IP address blocks: 2602:f704:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f1:1f:ef:e4:b1:ad:92:fc:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=71c8ecb3-d2db-4f35-a4bd-1d592ca39ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:15:e4:20:c4:17:a4:57:9b:3e:ba:fb:e2: d5:4b:bb:d3:49:db:f0:53:d8:3c:39:4c:53:a9:3d: 22:59:6c:f4:64:e9:72:e4:01:19:6d:bf:0f:92:0c: f9:de:68:33:30:b6:c6:d5:14:93:ae:00:c9:eb:df: 7c:57:8f:fa:32:ee:8a:42:8f:3a:6c:ab:70:32:0b: 2e:69:27:06:84:33:26:ea:3a:45:e6:04:7a:c0:ad: 42:0c:3f:0f:b6:75:b9:9d:f5:07:41:fc:42:f3:ef: af:07:75:63:3a:4a:69:7e:e4:61:a2:d5:5e:1f:4f: db:7c:bf:64:66:a8:af:9e:4e:d2:8a:bf:a8:f5:49: 98:e8:8d:a5:7e:c0:ef:02:79:f3:95:ca:7e:20:25: bb:26:29:b4:48:ac:a2:68:46:0f:f5:4a:2b:94:f1: 23:4c:89:9a:c1:a4:c5:fe:a1:19:d5:6c:cc:b2:da: 55:08:42:5d:6c:1c:1e:a9:12:ab:ea:32:40:5d:31: 2e:ff:b2:e3:17:d4:72:64:ff:cb:20:47:b7:54:45: 11:be:f9:a1:96:b5:02:df:a7:cf:cf:61:6e:6c:56: 21:b8:b9:7d:fc:96:2c:59:8c:99:87:a0:d2:05:b4: 28:6a:f1:4d:11:ab:c5:14:4e:ca:84:4a:cc:41:b0: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:03:64:77:D4:8A:36:71:75:48:DA:E1:EF:CA:CD:CE:A7:A6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f704:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d3:2c:46:19:b3:9e:bc:42:a4:32:29:8a:6c:0c:9d:2c:89: ec:7c:a6:e3:45:53:fb:a2:e7:40:3d:64:90:56:80:1c:3d:96: da:2f:c8:f5:86:a4:fb:94:70:f0:3c:5e:e7:c1:ce:c7:98:d6: 58:b8:f8:53:8b:94:69:73:e0:58:53:36:b1:bb:9e:44:08:34: 2c:34:51:49:e2:e9:2c:44:fc:55:d5:64:23:9f:ce:3e:97:f0: cf:2b:48:34:1a:5e:28:ed:94:3e:c5:0c:62:2c:36:1f:0a:36: 9b:59:e7:9a:b2:f0:ed:8b:0f:94:5c:57:8c:d4:5a:98:09:41: 9a:5a:39:b2:f2:e6:aa:c7:44:eb:f4:21:49:b5:58:b7:f0:fa: d0:d2:10:d1:8f:67:87:cb:c5:53:a0:8d:35:9c:ba:c9:c2:59: 12:10:49:d1:0e:64:2b:c7:06:10:c0:b8:36:4a:ae:d5:33:77: 88:5a:a6:3e:7a:4c:23:a9:95:32:9d:10:29:42:ad:a5:77:81: 80:29:81:57:9b:bb:ef:0d:ec:38:5b:53:06:1a:3d:5f:45:3b: d4:3c:8f:e8:11:b4:c8:6c:44:b8:96:0d:0f:db:2a:73:7d:06: be:3f:ed:29:e3:90:d4:56:10:13:66:cf:ca:f8:bc:cc:b9:67: 38:f8:03:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp9FfEf7+SxrZL8xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NzFjOGVjYjMtZDJkYi00ZjM1LWE0YmQtMWQ1OTJjYTM5Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYIV5CDEF6RXmz66++LVS7vTSdvwU9g8OUxT qT0iWWz0ZOly5AEZbb8Pkgz53mgzMLbG1RSTrgDJ6998V4/6Mu6KQo86bKtwMgsu aScGhDMm6jpF5gR6wK1CDD8PtnW5nfUHQfxC8++vB3VjOkppfuRhotVeH0/bfL9k Zqivnk7Sir+o9UmY6I2lfsDvAnnzlcp+ICW7Jim0SKyiaEYP9UorlPEjTImawaTF /qEZ1WzMstpVCEJdbBweqRKr6jJAXTEu/7LjF9RyZP/LIEe3VEURvvmhlrUC36fP z2FubFYhuLl9/JYsWYyZh6DSBbQoavFNEavFFE7KhErMQbAqLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA5FA2R31Io2cXVI2uHvys3Op6ZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvMTI5OGQ1MWEtZjExZS0z MGZkLTliODEtMzA5ZTY3MjNmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3BAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANNMsRhmznrxCpDIpimwMnSyJ7Hym40VT+6LnQD1kkFaAHD2W2i/I 9Yak+5Rw8Dxe58HOx5jWWLj4U4uUaXPgWFM2sbueRAg0LDRRSeLpLET8VdVkI5/O PpfwzytINBpeKO2UPsUMYiw2Hwo2m1nnmrLw7YsPlFxXjNRamAlBmlo5svLmqsdE 6/QhSbVYt/D60NIQ0Y9nh8vFU6CNNZy6ycJZEhBJ0Q5kK8cGEMC4Nkqu1TN3iFqm PnpMI6mVMp0QKUKtpXeBgCmBV5u77w3sOFtTBho9X0U71DyP6BG0yGxEuJYND9sq c30Gvj/tKeOQ1FYQE2bPyvi8zLlnOPgDOA== -----END CERTIFICATE-----Generated at Tue Jul 29 18:56:57 2025 by rpki-client