$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa File: 11c8c619-516a-3b58-aebf-93589cfa4504.roa (raw, json) Hash identifier: F9DWcm1m4hU9VpbXCcw+bkOj7IBSDUkZYe0OXyiaYmQ= Subject key identifier: E7:E6:65:F3:B4:A2:63:58:7F:4F:66:1B:05:06:E6:56:FF:0A:66:91 Certificate issuer: /CN=0e425ca6-d583-4845-b329-c74ded17c483 Certificate serial: 010D0C9F4328584A7085F4C30F5A55E0F3408280 Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 20200 IP address blocks: 2602:f7b5:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f4:c3:0f:5a:55:e0:f3:40:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=69510444-d13f-4531-b874-2ba78baf1b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:91:71:01:7e:83:8e:af:94:96:60:e9:fc: 06:4c:35:27:3e:b3:16:02:60:df:20:f6:94:7c:de: 6b:84:4f:43:69:85:6d:0c:34:a9:a2:7f:29:42:fd: 02:ad:e6:7d:99:02:25:e6:c0:68:c8:da:8e:35:61: 3b:e8:8b:fe:16:b6:bb:24:04:4a:93:51:5b:64:c1: a2:27:5d:80:ad:a6:85:3e:c9:e8:66:a8:3d:2d:67: c9:79:44:79:34:d5:2b:f0:20:9c:c2:b4:8c:e8:01: 17:12:ba:43:94:95:f8:47:48:c5:e5:85:88:3b:42: ba:03:8b:2f:45:db:be:63:d0:4b:d4:52:a9:c7:98: 47:a5:ee:a1:ce:c9:16:37:6d:63:16:b7:06:e5:72: cb:f9:a5:06:dc:7f:76:1d:28:7f:51:96:ca:37:10: 27:9c:16:04:96:6f:05:52:f4:de:90:f8:4c:3f:45: 39:b4:8d:d9:95:f5:68:29:38:f8:ef:4f:25:37:72: 41:b8:c8:a4:ec:bb:07:6d:62:63:b0:ef:9d:ba:8d: 22:59:ba:3a:7a:db:1d:3f:5d:35:46:e3:9b:eb:65: d5:16:2f:73:d6:94:5a:1d:80:fe:5f:65:bb:cf:f6: fe:69:9b:2c:7a:39:96:24:5b:29:d3:55:69:00:48: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:65:F3:B4:A2:63:58:7F:4F:66:1B:05:06:E6:56:FF:0A:66:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl X509v3 Authority Key Identifier: keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b5:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:dc:d2:a1:50:aa:a5:9b:f7:6b:53:62:64:37:38:6a:2d:83: af:72:f2:dc:9f:58:a7:b5:52:2f:55:9b:ae:e3:a7:e1:e8:e2: 26:a9:ed:e6:18:dd:45:b9:43:83:32:02:2f:94:d1:f1:8f:51: 62:d6:48:ea:cb:0e:29:7e:ce:42:d0:06:2d:7b:bd:a8:b3:05: 03:ba:39:99:08:75:92:10:93:cf:b8:fb:e6:60:a3:ea:47:9b: ff:1e:e8:0d:52:1b:3a:0d:e7:e1:3a:a3:d6:a7:94:d8:57:75: 13:48:7f:a9:85:5e:8e:a5:af:70:ec:81:b9:1e:9d:6b:e7:56: ad:45:46:77:fa:86:ee:c9:ec:f4:59:76:dd:0b:36:cb:50:17: f1:d6:99:72:0f:c5:69:a8:8d:7e:78:06:12:e2:f0:2c:e5:48: 79:95:ee:81:c0:01:62:f4:22:7d:51:f4:72:1b:e9:36:a3:86: 9f:4b:2b:ed:06:bd:81:1e:c1:1b:9f:00:f8:ad:32:ed:0c:fe: e6:0b:02:2d:26:9e:f3:d7:a4:6c:9a:4a:b7:64:d9:36:29:ec: bb:73:87:ea:5f:3a:6d:ab:8d:06:3e:67:c2:50:f6:2e:e4:d7: 8c:df:4c:87:ff:82:ba:11:94:0a:6d:ad:bd:ce:07:d6:5d:0d: cb:21:f4:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpwhfTDD1pV4PNAgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0MjVjYTYtZDU4My00ODQ1LWIzMjktYzc0ZGVkMTdj NDgzMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk Njk1MTA0NDQtZDEzZi00NTMxLWI4NzQtMmJhNzhiYWYxYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWRcQF+g46vlJZg6fwGTDUnPrMWAmDfIPaU fN5rhE9DaYVtDDSpon8pQv0CreZ9mQIl5sBoyNqONWE76Iv+Fra7JARKk1FbZMGi J12AraaFPsnoZqg9LWfJeUR5NNUr8CCcwrSM6AEXErpDlJX4R0jF5YWIO0K6A4sv Rdu+Y9BL1FKpx5hHpe6hzskWN21jFrcG5XLL+aUG3H92HSh/UZbKNxAnnBYElm8F UvTekPhMP0U5tI3ZlfVoKTj4708lN3JBuMik7LsHbWJjsO+duo0iWbo6etsdP101 RuOb62XVFi9z1pRaHYD+X2W7z/b+aZssejmWJFsp01VpAEjg7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfmZfO0omNYf09mGwUG5lb/CmaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQy NWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRkZWQxN2M0ODMvMTFjOGM2MTktNTE2YS0z YjU4LWFlYmYtOTM1ODljZmE0NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGU0MjVjYTYtZDU4My00ODQ1LWIz MjktYzc0ZGVkMTdjNDgzLzBlNDI1Y2E2LWQ1ODMtNDg0NS1iMzI5LWM3NGRlZDE3 YzQ4My5jcmwwHwYDVR0jBBgwFoAUqrP7ga5ZlVGHBQocTRtwPJLcwQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQyNWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRk ZWQxN2M0ODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3tQD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALvc0qFQqqWb92tTYmQ3OGotg69y8tyfWKe1Ui9Vm67jp+Ho4iap 7eYY3UW5Q4MyAi+U0fGPUWLWSOrLDil+zkLQBi17vaizBQO6OZkIdZIQk8+4++Zg o+pHm/8e6A1SGzoN5+E6o9anlNhXdRNIf6mFXo6lr3DsgbkenWvnVq1FRnf6hu7J 7PRZdt0LNstQF/HWmXIPxWmojX54BhLi8CzlSHmV7oHAAWL0In1R9HIb6Tajhp9L K+0GvYEewRufAPitMu0M/uYLAi0mnvPXpGyaSrdk2TYp7Ltzh+pfOm2rjQY+Z8JQ 9i7k14zfTIf/groRlAptrb3OB9ZdDcsh9KA= -----END CERTIFICATE-----Generated at Sun Jul 27 14:55:51 2025 by rpki-client