$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa File: b8428946-1e88-3bc3-9f06-263a19c73513.roa (raw, json) Hash identifier: 6Msy0mKMj9JufaHWXKPz3Kr1eq2MyEYxaSq3Q4vwUMU= Subject key identifier: 0E:97:36:28:D6:03:72:DB:CE:D9:39:4A:A8:08:03:14:DB:42:C7:67 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584A8576020F43D2669C709428C0 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 206018 IP address blocks: 2602:fc09:f70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:02:0f:43:d2:66:9c:70:94:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=747a94d9-f6c7-435b-9d40-5a3a3982c5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:51:d3:29:b5:5b:a4:34:9a:81:dd:ed:8d: 07:7b:66:73:69:ef:4b:79:43:77:66:63:79:58:58: 98:14:51:1e:36:34:aa:07:93:c7:95:7b:6c:c3:05: 09:da:78:eb:91:5e:c5:08:e0:8c:ec:26:96:f2:3f: 9c:bf:95:da:94:f5:3f:51:23:92:44:26:18:89:4e: c2:f9:76:f1:69:74:37:8c:38:a9:f0:50:c6:b8:97: 0c:cd:79:a6:fe:aa:68:6b:df:43:0d:ba:4b:70:90: 62:65:92:2c:01:d8:ed:91:fa:23:88:aa:42:66:84: c8:53:21:fa:41:32:a3:92:95:62:b7:5f:47:30:3b: 9b:c8:a4:83:f0:5b:e5:37:0a:fc:30:9f:ba:23:a7: 26:a4:8b:ff:80:24:48:d8:06:1e:90:d0:b1:67:7c: 22:ed:09:7a:2c:f3:15:9b:35:a4:36:ee:26:7a:55: bd:71:39:02:9a:61:72:c1:3f:61:38:bc:44:b1:44: 1d:e7:31:a0:1f:a7:d7:f6:7a:a5:b8:4f:dc:fe:03: ba:b5:fc:f2:7c:98:da:df:39:be:2e:89:12:50:e5: 16:84:8f:42:8b:e9:b0:e7:71:e5:bb:51:dd:37:e7: e0:1c:fa:83:b5:8c:8a:ea:42:0e:91:d2:98:7f:39: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:36:28:D6:03:72:DB:CE:D9:39:4A:A8:08:03:14:DB:42:C7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0f:60:8a:06:d8:a1:55:17:3c:96:ea:c3:e1:85:5f:ee:e5: df:a3:9f:4c:c9:17:ce:9b:2a:08:de:87:d7:56:d9:88:18:c3: f1:92:e3:ae:fc:49:13:c7:00:a4:57:48:3a:38:ef:db:81:54: 86:f6:6b:5b:38:c1:29:1b:38:2a:50:aa:48:fd:87:a3:69:7a: ad:03:d9:6f:93:59:cd:48:1d:c3:c9:96:be:68:83:bb:2e:3f: cf:d5:6a:93:2d:88:21:e5:dc:08:85:0b:50:06:d5:4b:28:fe: ee:05:96:fa:c0:bc:dd:10:91:c6:91:98:93:3e:e1:78:55:d3: fe:eb:54:d4:4e:ea:dc:a0:0a:c7:cd:08:ca:df:6f:92:27:9b: 91:0d:fe:10:30:cd:7c:0f:35:e0:ef:46:e0:02:ce:df:fe:8a: 54:08:07:fd:bf:6f:70:61:ab:37:93:e1:2c:63:70:2d:25:cf: ce:fa:71:fb:74:6d:b7:04:86:a1:52:18:a2:dd:57:63:98:65: e5:39:12:53:d1:07:b7:5a:b9:71:98:d9:ad:67:e0:f6:ca:d0: cb:8d:e4:b0:47:ff:69:9c:d6:ff:0a:81:29:40:9a:9b:97:19: ef:bf:30:f3:90:48:2f:66:56:f2:9d:e5:5f:b4:05:bd:5c:c5: af:79:76:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFdgIPQ9JmnHCUKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NzQ3YTk0ZDktZjZjNy00MzViLTlkNDAtNWEzYTM5ODJjNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj9R0ym1W6Q0moHd7Y0He2Zzae9LeUN3ZmN5 WFiYFFEeNjSqB5PHlXtswwUJ2njrkV7FCOCM7CaW8j+cv5XalPU/USOSRCYYiU7C +XbxaXQ3jDip8FDGuJcMzXmm/qpoa99DDbpLcJBiZZIsAdjtkfojiKpCZoTIUyH6 QTKjkpVit19HMDubyKSD8FvlNwr8MJ+6I6cmpIv/gCRI2AYekNCxZ3wi7Ql6LPMV mzWkNu4melW9cTkCmmFywT9hOLxEsUQd5zGgH6fX9nqluE/c/gO6tfzyfJja3zm+ LokSUOUWhI9Ci+mw53Hlu1HdN+fgHPqDtYyK6kIOkdKYfzmVQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6XNijWA3Lbztk5SqgIAxTbQsdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvYjg0Mjg5NDYtMWU4OC0z YmMzLTlmMDYtMjYzYTE5YzczNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ9w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYPYIoG2KFVFzyW6sPhhV/u5d+jn0zJF86bKgjeh9dW2YgYw/GS 4678SRPHAKRXSDo479uBVIb2a1s4wSkbOCpQqkj9h6Npeq0D2W+TWc1IHcPJlr5o g7suP8/VapMtiCHl3AiFC1AG1Uso/u4FlvrAvN0QkcaRmJM+4XhV0/7rVNRO6tyg CsfNCMrfb5Inm5EN/hAwzXwPNeDvRuACzt/+ilQIB/2/b3BhqzeT4SxjcC0lz876 cft0bbcEhqFSGKLdV2OYZeU5ElPRB7dauXGY2a1n4PbK0MuN5LBH/2mc1v8KgSlA mpuXGe+/MPOQSC9mVvKd5V+0Bb1cxa95dg8= -----END CERTIFICATE-----Generated at Sat Jul 26 19:07:02 2025 by rpki-client