$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa File: c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa (raw, json) Hash identifier: 00wokVNmh8f2YjmyX7UrEJKiOjVomoBZ6aBqnRGZhKc= Subject key identifier: 98:19:5D:D2:AF:8E:BB:B2:DA:0F:D1:FD:21:2E:F3:A1:23:57:3F:4D Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584A8A3BFE2227F3720F8595A280 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa Signing time: Wed 16 Jul 2025 18:03:12 +0000 ROA not before: Wed 16 Jul 2025 18:03:12 +0000 ROA not after: Tue 14 Oct 2025 18:03:12 +0000 asID: 198304 IP address blocks: 2602:f92a:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:3b:fe:22:27:f3:72:0f:85:95:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Jul 16 18:03:12 2025 GMT Not After : Oct 14 18:03:12 2025 GMT Subject: CN=aaf5cd97-cbe0-4988-afa3-66fdd3e15551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:e6:5d:8e:0c:4a:c6:98:5f:a5:80:e0:1b: 2f:10:10:49:65:65:96:2c:3f:f4:ef:4c:6d:1d:6b: 37:80:74:07:93:70:7c:79:c6:88:66:08:78:7f:56: 0a:9c:0f:ac:47:7c:04:64:1c:49:4c:d4:c9:78:65: d0:40:44:09:ce:0f:bc:61:31:cd:9e:0b:89:48:ab: 86:3c:ca:25:0a:b1:e2:f0:ec:55:19:e7:88:6d:a0: 91:4a:ba:63:a5:95:92:b0:f7:a6:f9:58:bb:4a:b5: ef:e8:5b:90:47:c4:99:f7:79:aa:ca:44:cb:52:88: e1:09:50:1a:79:94:01:94:6a:0b:e6:64:51:2c:3d: 19:00:b2:2c:e7:34:51:a7:98:16:08:a3:fe:70:c7: da:5e:49:3a:d6:95:19:0a:92:01:33:18:c3:1e:8f: a0:25:cb:05:43:a6:89:36:90:60:27:2f:0b:dc:16: e9:e6:37:65:40:12:f7:7e:c3:b4:3e:20:d0:fe:ba: 0b:3f:7e:c0:87:a1:59:e6:1b:19:b5:83:8e:fe:02: f5:10:e0:e7:55:f9:f8:ca:22:48:f9:c3:81:50:bf: 69:5e:7a:78:65:91:00:f6:fa:ab:a4:9e:de:e1:0a: 71:99:9c:75:6f:de:e2:67:44:f1:5f:bb:66:b5:53: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:5D:D2:AF:8E:BB:B2:DA:0F:D1:FD:21:2E:F3:A1:23:57:3F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:28:96:25:87:78:1b:b5:86:1d:33:c3:43:c8:f9:18:b2:c5: fb:46:9f:51:2b:ee:53:4b:87:6c:3f:2f:cd:c9:e9:3a:02:3b: e7:75:02:fa:47:e5:07:32:6d:e6:a2:60:01:91:73:95:da:cd: 5a:48:b8:13:6b:22:8f:42:3b:e9:aa:62:f5:ea:59:e5:2b:0a: d8:9e:8b:72:0d:5a:76:1d:c3:7d:e1:c4:54:64:95:f7:c3:40: a1:51:0c:0b:86:73:95:72:6f:53:3f:ec:aa:18:58:8c:3c:70: 3c:e5:35:78:50:49:b1:b8:c8:e4:25:27:a0:5f:76:b5:5a:31: d9:1f:dc:e7:96:6d:38:4f:f6:d7:2f:c3:ff:40:4c:11:b2:bf: 85:6e:39:0e:f1:a5:c0:e5:e8:9e:fd:6a:05:e8:3b:7e:8e:8a: 70:c0:58:af:3e:bb:ae:b1:f6:99:57:3d:81:e3:3c:97:2d:b9: 19:fc:83:67:13:f1:c9:9e:9f:c2:2c:01:2d:40:a4:91:09:c6: 0f:ef:ec:da:ff:e9:f6:72:de:e5:18:14:a9:78:3b:93:19:75: 98:62:40:d1:1b:76:1f:aa:8f:4c:17:d1:c6:f0:d1:da:2b:d9: 28:45:f6:e3:9c:4a:5e:66:78:22:eb:57:e4:a5:1e:5c:7f:05: 73:ad:50:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqKO/4iJ/NyD4WVooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDcxNjE4MDMxMloXDTI1MTAxNDE4MDMxMlowLzEtMCsGA1UEAxMk YWFmNWNkOTctY2JlMC00OTg4LWFmYTMtNjZmZGQzZTE1NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OvmXY4MSsaYX6WA4BsvEBBJZWWWLD/070xt HWs3gHQHk3B8ecaIZgh4f1YKnA+sR3wEZBxJTNTJeGXQQEQJzg+8YTHNnguJSKuG PMolCrHi8OxVGeeIbaCRSrpjpZWSsPem+Vi7SrXv6FuQR8SZ93mqykTLUojhCVAa eZQBlGoL5mRRLD0ZALIs5zRRp5gWCKP+cMfaXkk61pUZCpIBMxjDHo+gJcsFQ6aJ NpBgJy8L3Bbp5jdlQBL3fsO0PiDQ/roLP37Ah6FZ5hsZtYOO/gL1EODnVfn4yiJI +cOBUL9pXnp4ZZEA9vqrpJ7e4QpxmZx1b97iZ0TxX7tmtVPDPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJgZXdKvjruy2g/R/SEu86EjVz9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzFjNGY5YWUtNGMzZC0z YzM0LWE1YjMtZjUwOGZkYzRlZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5KqAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATSiWJYd4G7WGHTPDQ8j5GLLF+0afUSvuU0uHbD8vzcnpOgI753UC +kflBzJt5qJgAZFzldrNWki4E2sij0I76api9epZ5SsK2J6Lcg1adh3DfeHEVGSV 98NAoVEMC4ZzlXJvUz/sqhhYjDxwPOU1eFBJsbjI5CUnoF92tVox2R/c55ZtOE/2 1y/D/0BMEbK/hW45DvGlwOXonv1qBeg7fo6KcMBYrz67rrH2mVc9geM8ly25GfyD ZxPxyZ6fwiwBLUCkkQnGD+/s2v/p9nLe5RgUqXg7kxl1mGJA0Rt2H6qPTBfRxvDR 2ivZKEX245xKXmZ4IutX5KUeXH8Fc61QuA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:23:53 2025 by rpki-client