$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa File: 3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa (raw, json) Hash identifier: g3YA09W6IkWU9XD9opvB5MmIrAOv3Ta0Njmfz+fIktw= Subject key identifier: F4:4B:4F:08:30:1F:1A:64:E8:D3:F6:C7:21:D6:45:F9:05:3B:C2:35 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584A62909A9F13B9D0DDFF202180 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 62553 IP address blocks: 2602:f71e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9a:9f:13:b9:d0:dd:ff:20:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=95d562ff-5698-4261-89e7-eae57099d570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:54:8e:1a:0f:7d:ca:34:a5:9a:89:ce:8f: 84:c1:cf:da:e4:31:94:98:66:c3:35:0b:7a:ec:24: c1:9e:55:f7:14:96:b8:ce:d0:5d:1e:d3:be:b4:44: 4b:38:af:65:d7:4f:ea:ab:4a:c9:fc:0b:16:ca:b2: c8:a4:4c:86:58:ea:0b:d8:23:d3:53:59:50:f1:96: fe:b5:7b:0e:ee:34:08:c7:6b:d3:fe:c3:e4:da:80: 3e:1c:06:d0:19:cf:cf:fd:4b:a3:31:62:46:1c:3e: 1f:1c:65:20:36:cf:b6:f9:25:ca:52:89:1c:7e:24: dd:c2:90:80:70:69:62:80:4c:0c:75:51:bd:ca:92: 09:c7:c9:d3:7c:cc:5e:0b:ca:1a:36:c6:6f:62:48: 70:e5:b8:68:18:c3:58:8b:0b:11:9a:b0:56:76:72: dd:08:85:7c:77:14:69:1e:37:07:c7:ce:15:ee:c4: e7:ce:d9:4f:69:f2:5b:77:c5:42:3f:f5:53:84:a1: d9:ca:9b:53:f3:5d:c0:fb:8a:a8:4a:d1:f9:01:dd: c2:99:23:05:7a:34:2a:16:5b:78:76:9c:5e:bc:e4: c4:d2:9a:f6:2f:41:49:58:d9:4a:ac:60:d5:0b:7b: b1:11:39:5b:d6:00:a1:f2:05:b1:f7:68:00:f7:14: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4B:4F:08:30:1F:1A:64:E8:D3:F6:C7:21:D6:45:F9:05:3B:C2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d6:c3:80:91:15:bb:8d:36:42:ed:dc:ff:dd:13:d1:64:1c: a0:0b:a4:c4:ea:3e:4a:95:59:dc:5e:c2:f0:f4:4b:f5:d7:35: ea:84:9d:34:f3:b0:b9:34:a3:ad:a5:33:cd:30:37:59:49:88: 4d:89:a0:5a:83:a3:ee:4f:c5:57:67:58:a6:43:cb:53:b8:2d: a2:cf:8d:31:39:a2:63:31:1a:92:69:78:12:5e:75:5f:c1:09: e0:2b:af:83:91:ff:4c:e7:40:42:e8:a9:0c:d9:ef:ac:d8:06: 59:34:32:32:8c:a5:97:91:1b:54:9f:ac:06:7d:51:33:33:7c: a3:0b:f9:c1:72:ab:e4:11:56:98:d9:00:20:98:36:36:e8:f0: 08:5f:ce:6f:e4:4b:b1:09:f8:85:2d:a1:7c:38:64:38:59:83: 7e:fc:e9:e0:62:96:b7:c5:f6:93:dc:43:95:c9:44:4a:39:d1: 4a:83:b0:f0:f9:3c:e9:ea:e9:3c:f1:21:d1:29:d5:cc:13:c3: 45:34:54:6f:34:f1:7f:bf:50:1c:96:c9:58:f4:b5:c3:1e:cd: 02:e9:48:20:e6:89:6e:2b:7f:55:31:fa:94:75:25:00:76:74: c0:7f:d6:98:96:47:58:b4:de:d6:a3:b6:5c:23:97:6a:92:05: 1a:5d:43:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpikJqfE7nQ3f8gIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OTVkNTYyZmYtNTY5OC00MjYxLTg5ZTctZWFlNTcwOTlkNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN5UjhoPfco0pZqJzo+Ewc/a5DGUmGbDNQt6 7CTBnlX3FJa4ztBdHtO+tERLOK9l10/qq0rJ/AsWyrLIpEyGWOoL2CPTU1lQ8Zb+ tXsO7jQIx2vT/sPk2oA+HAbQGc/P/UujMWJGHD4fHGUgNs+2+SXKUokcfiTdwpCA cGligEwMdVG9ypIJx8nTfMxeC8oaNsZvYkhw5bhoGMNYiwsRmrBWdnLdCIV8dxRp HjcHx84V7sTnztlPafJbd8VCP/VThKHZyptT813A+4qoStH5Ad3CmSMFejQqFlt4 dpxevOTE0pr2L0FJWNlKrGDVC3uxETlb1gCh8gWx92gA9xQWtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPRLTwgwHxpk6NP2xyHWRfkFO8I1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMzM4NmQyZWUtYTg1MC0z YWE5LWFlNDItM2I3NTQ4YjQ1M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3HgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbtbDgJEVu402Qu3c/90T0WQcoAukxOo+SpVZ3F7C8PRL9dc16oSd NPOwuTSjraUzzTA3WUmITYmgWoOj7k/FV2dYpkPLU7gtos+NMTmiYzEakml4El51 X8EJ4Cuvg5H/TOdAQuipDNnvrNgGWTQyMoyll5EbVJ+sBn1RMzN8owv5wXKr5BFW mNkAIJg2NujwCF/Ob+RLsQn4hS2hfDhkOFmDfvzp4GKWt8X2k9xDlclESjnRSoOw 8Pk86erpPPEh0SnVzBPDRTRUbzTxf79QHJbJWPS1wx7NAulIIOaJbit/VTH6lHUl AHZ0wH/WmJZHWLTe1qO2XCOXapIFGl1D5A== -----END CERTIFICATE-----Generated at Wed Jul 23 23:19:25 2025 by rpki-client