$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa File: 3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa (raw, json) Hash identifier: 786ETam9n2YD/nOjgh3h6xithFObx6jGUVyJ/bdBRDk= Subject key identifier: F1:A6:F6:CA:7D:63:1D:15:C8:7B:51:32:00:F0:E8:F5:D3:8C:04:C4 Certificate issuer: /CN=c04d5752-0429-45a3-a347-607b7dc70707 Certificate serial: 010D0C9F4328584A94D0D522CA28FC6DEFC47380 Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 32668 IP address blocks: 2602:f86a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d5:22:ca:28:fc:6d:ef:c4:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=6743d44b-32e9-405c-8474-f288c03dde6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:e9:59:d0:d0:06:3d:9a:c5:3c:06:0a:aa: 71:72:e9:cf:3d:c5:97:a6:eb:75:2e:45:07:25:14: ba:0d:3f:f0:fd:a2:5d:37:b9:5c:88:48:c5:99:3c: a9:73:e6:08:c2:ba:a3:01:53:fe:7c:14:1a:88:cf: cc:93:d4:c1:d7:c3:b5:ce:aa:71:ef:ca:1a:0b:1b: 28:3a:9e:17:34:2d:56:98:ae:71:cd:00:a2:dd:a6: 9e:43:12:bc:44:6e:f6:c8:f6:1e:cb:3b:00:42:99: 97:62:b2:d5:06:40:f9:3b:4e:1f:53:4c:57:3c:b3: 04:3c:b7:c0:a8:e5:6f:c9:a7:01:4e:fe:8a:b7:bf: 8a:c6:cc:f9:b6:a4:09:53:43:1b:ab:e9:bc:f9:c5: 66:86:07:6a:eb:e2:b0:39:44:ea:1c:01:34:a4:3e: 3b:ea:4d:62:f9:64:4e:16:ed:4a:fd:ba:6e:ef:08: 0a:68:88:dd:91:dd:ed:e0:a6:5a:e3:fb:68:56:98: 2f:bb:10:3c:a2:41:09:bc:3b:c1:32:bc:93:ac:dd: 24:d8:76:00:3d:9a:77:bd:e0:1f:f7:cf:f3:46:18: fb:5d:1f:2d:cd:90:fb:d3:a5:38:e0:58:96:c2:62: f0:32:0b:93:0b:ba:62:43:e3:91:06:c7:41:33:e0: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A6:F6:CA:7D:63:1D:15:C8:7B:51:32:00:F0:E8:F5:D3:8C:04:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl X509v3 Authority Key Identifier: keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer sbgp-ipAddrBlock: critical IPv6: 2602:f86a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d2:26:9a:98:eb:5e:5a:81:4d:16:92:d2:b0:3b:0a:44:a3: 5b:11:1c:37:6b:7d:46:0b:25:dd:f7:c7:28:fd:e1:82:f6:e2: be:d6:57:5f:38:be:ef:b5:1d:14:86:4d:e4:c3:28:04:07:30: 64:96:5d:42:63:29:ef:4b:a4:a3:59:00:a2:32:2d:e9:79:48: f1:04:84:9d:68:fb:5b:e0:23:5a:a9:0d:58:57:af:6b:7d:51: ec:9c:8d:da:4b:f2:ac:21:b2:69:d7:5e:69:8b:c4:12:76:dc: e5:e5:44:75:38:fc:3e:e0:bb:b8:0d:0d:82:49:92:82:37:a5: 96:01:d8:04:00:1b:72:71:e5:83:ee:8f:21:fc:75:8e:39:f6: db:c6:46:60:81:94:0d:47:db:44:91:99:09:b1:19:8f:d5:9a: 32:64:6b:05:24:92:65:19:ce:1b:45:dd:df:7e:49:8f:b9:07: 2d:d8:81:6f:9e:c7:29:c3:2b:62:d6:1c:a5:b2:90:a9:74:a0: 81:66:99:bc:a9:70:4e:17:4e:a8:26:eb:67:17:82:de:17:ba: de:ed:16:f9:e1:b9:87:36:b8:e3:87:89:4f:72:82:ae:a1:27: bf:b1:56:14:be:39:56:d8:57:8a:5a:69:af:69:da:fc:7e:c2: 86:40:81:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqU0NUiyij8be/Ec4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA0ZDU3NTItMDQyOS00NWEzLWEzNDctNjA3YjdkYzcw NzA3MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk Njc0M2Q0NGItMzJlOS00MDVjLTg0NzQtZjI4OGMwM2RkZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG7pWdDQBj2axTwGCqpxcunPPcWXput1LkUH JRS6DT/w/aJdN7lciEjFmTypc+YIwrqjAVP+fBQaiM/Mk9TB18O1zqpx78oaCxso Op4XNC1WmK5xzQCi3aaeQxK8RG72yPYeyzsAQpmXYrLVBkD5O04fU0xXPLMEPLfA qOVvyacBTv6Kt7+Kxsz5tqQJU0Mbq+m8+cVmhgdq6+KwOUTqHAE0pD476k1i+WRO Fu1K/bpu7wgKaIjdkd3t4KZa4/toVpgvuxA8okEJvDvBMryTrN0k2HYAPZp3veAf 98/zRhj7XR8tzZD706U44FiWwmLwMguTC7piQ+ORBsdBM+CLHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGm9sp9Yx0VyHtRMgDw6PXTjATEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRk NTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdiN2RjNzA3MDcvM2RmZTUxNGUtZmRjOC0z YTNlLThhODAtNWRiM2U1ZTZjY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzA0ZDU3NTItMDQyOS00NWEzLWEz NDctNjA3YjdkYzcwNzA3L2MwNGQ1NzUyLTA0MjktNDVhMy1hMzQ3LTYwN2I3ZGM3 MDcwNy5jcmwwHwYDVR0jBBgwFoAUmr/CVGbfc/TN/iRP/aoQnhN7Cw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRkNTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdi N2RjNzA3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4agAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfSJpqY615agU0WktKwOwpEo1sRHDdrfUYLJd33xyj94YL24r7W V184vu+1HRSGTeTDKAQHMGSWXUJjKe9LpKNZAKIyLel5SPEEhJ1o+1vgI1qpDVhX r2t9UeycjdpL8qwhsmnXXmmLxBJ23OXlRHU4/D7gu7gNDYJJkoI3pZYB2AQAG3Jx 5YPujyH8dY459tvGRmCBlA1H20SRmQmxGY/VmjJkawUkkmUZzhtF3d9+SY+5By3Y gW+exynDK2LWHKWykKl0oIFmmbypcE4XTqgm62cXgt4Xut7tFvnhuYc2uOOHiU9y gq6hJ7+xVhS+OVbYV4paaa9p2vx+woZAgQ4= -----END CERTIFICATE-----Generated at Sat Jul 26 07:07:08 2025 by rpki-client