$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa File: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (raw, json) Hash identifier: IUZhZ1sHs9FUDZRxzDtHfMDfojHkF8DzeuxbfVtxEaY= Subject key identifier: 82:71:E0:9E:F9:B3:01:9B:FD:43:18:D9:74:3A:E6:DE:52:51:3E:53 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584A8BD6DABEFC6E4DB8A44429C0 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa Signing time: Thu 17 Jul 2025 07:51:02 +0000 ROA not before: Thu 17 Jul 2025 07:51:02 +0000 ROA not after: Wed 15 Oct 2025 07:51:02 +0000 asID: 140666 IP address blocks: 2602:fa80:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:d6:da:be:fc:6e:4d:b8:a4:44:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Jul 17 07:51:02 2025 GMT Not After : Oct 15 07:51:02 2025 GMT Subject: CN=08e38d97-0017-44ad-893b-686d4f60fc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:05:65:e9:e7:84:b7:cd:3b:3a:03:87:43: 19:e6:ec:2f:91:2f:73:08:48:85:ec:bd:1d:9f:4f: f5:97:31:3d:70:20:fa:6a:26:67:b5:e9:55:8b:a6: bb:a3:d3:85:80:57:68:cc:36:e9:35:92:9b:8a:a9: 39:36:5f:f3:93:10:22:78:de:dc:ce:fb:21:0e:0b: 2c:3f:c5:12:ff:09:d4:c6:5a:06:d6:ac:18:fc:31: eb:a2:86:ab:b6:9a:60:19:ee:4c:63:58:ed:44:6f: 12:bc:84:e6:6b:4b:c7:21:d1:6b:ba:cd:ba:30:e6: c2:48:bc:b3:9c:98:75:9d:f6:3c:38:01:47:40:f2: 63:02:72:15:d9:d0:20:ec:b8:ca:96:77:19:91:30: 00:65:0e:1b:17:40:2a:60:5b:51:a4:61:09:51:06: fc:72:32:e8:21:a0:39:b4:8e:cc:de:49:4b:72:f8: b2:27:e1:d2:d3:aa:51:10:d8:bb:6d:9f:30:1b:e8: cc:67:58:e4:1f:04:60:e7:ca:b3:a7:6c:5f:7a:79: fe:de:47:4a:e9:fa:a5:7e:bd:08:13:9f:39:44:2d: 82:91:f1:c8:c7:ed:18:e2:49:88:21:13:c6:12:fe: 78:f5:85:25:74:17:8f:e2:68:3e:bf:43:84:38:f4: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:E0:9E:F9:B3:01:9B:FD:43:18:D9:74:3A:E6:DE:52:51:3E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:61:e9:67:b8:85:35:83:10:11:ac:fd:2b:04:7a:15:37:18: 26:22:84:cd:de:8a:77:3f:bd:6a:6d:d8:e9:7e:7a:ad:44:51: 0d:bf:0c:93:87:df:3f:69:c7:6c:b7:f7:19:8c:74:1c:7a:90: 77:1b:69:1b:e5:1c:d2:ae:c8:f9:43:ff:fd:63:c9:1d:03:95: 5b:94:c4:67:38:81:bf:b8:78:18:f5:13:5e:b2:ce:a0:a7:fc: 9f:5b:44:a8:4f:d1:73:4e:90:66:c9:48:dc:89:e6:f6:ce:17: ef:cf:64:71:80:86:e9:dc:2f:f9:e2:0c:01:4c:47:b4:38:70: 41:9c:85:f3:e1:c7:86:8e:bc:db:f7:8b:2c:55:e1:23:97:63: 62:96:4b:7e:61:3c:e5:54:72:39:db:99:95:0a:c7:63:d6:85: e3:6c:80:83:89:6d:f3:0c:a7:4e:b6:a3:79:8a:e7:5e:ea:ca: e6:a5:8d:71:2a:2f:ca:8a:93:d0:33:73:fb:80:83:db:20:4e: 48:e1:ba:af:b4:fe:e6:ab:b4:58:f6:6f:42:cc:db:20:3a:ab: ab:2c:33:d0:25:11:18:6b:90:5b:ff:45:09:cd:e1:6f:6c:80: 8d:8a:29:56:7d:b4:ce:25:f3:36:66:90:51:1e:04:ac:eb:c7: 02:2c:6b:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqL1tq+/G5NuKREKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDcxNzA3NTEwMloXDTI1MTAxNTA3NTEwMlowLzEtMCsGA1UEAxMk MDhlMzhkOTctMDAxNy00NGFkLTg5M2ItNjg2ZDRmNjBmYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKgFZennhLfNOzoDh0MZ5uwvkS9zCEiF7L0d n0/1lzE9cCD6aiZntelVi6a7o9OFgFdozDbpNZKbiqk5Nl/zkxAieN7czvshDgss P8US/wnUxloG1qwY/DHrooartppgGe5MY1jtRG8SvITma0vHIdFrus26MObCSLyz nJh1nfY8OAFHQPJjAnIV2dAg7LjKlncZkTAAZQ4bF0AqYFtRpGEJUQb8cjLoIaA5 tI7M3klLcviyJ+HS06pRENi7bZ8wG+jMZ1jkHwRg58qzp2xfenn+3kdK6fqlfr0I E585RC2CkfHIx+0Y4kmIIRPGEv549YUldBeP4mg+v0OEOPQOzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIJx4J75swGb/UMY2XQ65t5SUT5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYmUwNjMyODktMmU2OS0z YWNmLWFkNjItYjQyYTFhYTFkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHph6We4hTWDEBGs/SsEehU3GCYihM3einc/vWpt2Ol+eq1EUQ2/ DJOH3z9px2y39xmMdBx6kHcbaRvlHNKuyPlD//1jyR0DlVuUxGc4gb+4eBj1E16y zqCn/J9bRKhP0XNOkGbJSNyJ5vbOF+/PZHGAhuncL/niDAFMR7Q4cEGchfPhx4aO vNv3iyxV4SOXY2KWS35hPOVUcjnbmZUKx2PWheNsgIOJbfMMp062o3mK517qyual jXEqL8qKk9Azc/uAg9sgTkjhuq+0/uartFj2b0LM2yA6q6ssM9AlERhrkFv/RQnN 4W9sgI2KKVZ9tM4l8zZmkFEeBKzrxwIsa3A= -----END CERTIFICATE-----Generated at Mon Jul 21 00:05:42 2025 by rpki-client