$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa File: b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa (raw, json) Hash identifier: B9O1brM4NB5ORcgdRd0fsEDDC6kLoTTYY36G1qlpGlk= Subject key identifier: 0E:52:EB:17:C8:8C:01:15:52:64:AA:30:43:D3:98:E3:32:0A:D5:86 Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Certificate serial: 010D0C9F4328584A9D30FCE568A4098DA7CBA880 Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 11867 IP address blocks: 2602:f700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fc:e5:68:a4:09:8d:a7:cb:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=ca1740dd-c53c-47ba-b976-8ed1b1b9ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:a9:90:5c:fe:80:43:c9:dc:18:11:28:83: 9e:a2:10:3a:4e:dc:e8:2d:d1:3d:af:e8:38:b8:e8: 66:68:93:13:97:05:bf:26:af:12:69:1e:49:64:89: 59:05:1c:b4:b2:cc:1a:28:be:40:0f:ea:d2:71:4c: 26:f1:12:fb:b6:b7:3a:67:4e:37:6d:8c:e0:12:c7: 45:10:57:64:8c:64:63:3d:ea:5c:e8:0c:08:c3:e7: 01:ea:04:64:eb:f3:35:7c:04:34:d2:fb:e2:11:49: 4d:2f:a2:21:d3:e5:cf:56:e5:cc:b0:d3:cb:44:9c: 3b:df:d6:2a:8c:48:9c:10:84:ba:5f:8a:39:7b:81: f5:97:0a:21:25:c0:d8:a3:29:64:a7:63:3f:de:c6: ca:35:fe:cc:41:35:43:43:41:2a:3f:10:8e:5b:45: 96:cf:44:43:19:62:bd:43:7f:d1:2d:4e:69:31:41: 1c:6f:a3:bd:73:7e:84:8e:b4:f1:f7:10:25:2b:6d: 2b:f8:0e:7e:ce:28:57:b2:7c:11:86:56:32:5e:e2: 16:9e:94:d1:c7:48:d5:95:78:73:c3:e1:a0:18:51: 02:94:3c:2e:bb:ef:ae:6c:da:5c:cc:69:17:30:ea: cb:d1:4f:ee:36:c1:f2:77:09:82:da:57:92:ab:7f: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:EB:17:C8:8C:01:15:52:64:AA:30:43:D3:98:E3:32:0A:D5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/b37155a5-f8f1-31de-b2c5-6e8d11e01196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl X509v3 Authority Key Identifier: keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer sbgp-ipAddrBlock: critical IPv6: 2602:f700::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:11:1a:11:5c:a1:d3:3e:77:c7:47:32:f0:35:ce:ac:22: fd:9b:ab:ed:c6:75:0e:7e:a2:8b:be:a6:a1:07:5a:9e:a0:e2: ab:f9:ff:c6:74:1b:42:c9:27:5c:10:d6:6c:6a:fa:ae:fc:26: e1:e5:00:9c:3f:74:46:81:62:ca:ec:e0:b1:df:9f:c8:9e:19: 25:04:d5:51:a0:1a:56:fc:ae:59:47:8e:0e:11:88:4e:a9:2c: a7:c9:ae:b7:8d:8f:61:22:6b:85:6a:d9:57:c7:ca:a9:09:42: 01:95:02:48:1c:99:d4:97:d2:5c:f0:62:59:62:6e:ea:2a:78: bb:2f:b5:6e:59:d4:4c:09:7a:9a:b6:fe:58:bc:b2:2b:fa:f8: 33:9f:e7:3e:7c:87:67:8c:e2:70:02:8f:db:2b:7a:21:f7:ea: c0:90:9a:12:30:61:c4:1d:c4:05:09:6a:83:9d:c3:d8:db:40: a5:4e:e0:b8:8a:06:fc:e2:8d:82:81:19:78:4e:5d:49:cc:22: 2e:1d:61:8a:3b:e5:49:40:6b:f6:d7:45:ae:92:c3:bd:73:38: 80:da:3b:4b:e1:64:76:bf:b3:de:43:9c:83:49:cf:64:bd:8c: ca:45:ce:83:42:bf:10:b8:01:ec:a3:ac:8e:64:e8:68:6c:c7: 42:34:32:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqdMPzlaKQJjafLqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz ZjA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk Y2ExNzQwZGQtYzUzYy00N2JhLWI5NzYtOGVkMWIxYjlhYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyqpkFz+gEPJ3BgRKIOeohA6TtzoLdE9r+g4 uOhmaJMTlwW/Jq8SaR5JZIlZBRy0sswaKL5AD+rScUwm8RL7trc6Z043bYzgEsdF EFdkjGRjPepc6AwIw+cB6gRk6/M1fAQ00vviEUlNL6Ih0+XPVuXMsNPLRJw739Yq jEicEIS6X4o5e4H1lwohJcDYoylkp2M/3sbKNf7MQTVDQ0EqPxCOW0WWz0RDGWK9 Q3/RLU5pMUEcb6O9c36EjrTx9xAlK20r+A5+zihXsnwRhlYyXuIWnpTRx0jVlXhz w+GgGFEClDwuu++ubNpczGkXMOrL0U/uNsHydwmC2leSq38/5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA5S6xfIjAEVUmSqMEPTmOMyCtWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1 ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvYjM3MTU1YTUtZjhmMS0z MWRlLWIyYzUtNmU4ZDExZTAxMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw M2M4YjNmMDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+cERoRXKHTPnfHRzLwNc6sIv2bq+3GdQ5+oou+pqEHWp6g4qv5 /8Z0G0LJJ1wQ1mxq+q78JuHlAJw/dEaBYsrs4LHfn8ieGSUE1VGgGlb8rllHjg4R iE6pLKfJrreNj2Eia4Vq2VfHyqkJQgGVAkgcmdSX0lzwYllibuoqeLsvtW5Z1EwJ epq2/li8siv6+DOf5z58h2eM4nACj9sreiH36sCQmhIwYcQdxAUJaoOdw9jbQKVO 4LiKBvzijYKBGXhOXUnMIi4dYYo75UlAa/bXRa6Sw71zOIDaO0vhZHa/s95DnINJ z2S9jMpFzoNCvxC4AeyjrI5k6Ghsx0I0Mj4= -----END CERTIFICATE-----Generated at Sat Jul 26 19:00:03 2025 by rpki-client