$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa File: c005238f-e667-357a-9bf5-bdf33e9305cc.roa (raw, json) Hash identifier: GCl8KinNg/p54X8uenOkEtrlTtGEZHTtwO3TgWwUDTQ= Subject key identifier: DB:27:D2:65:31:B6:88:F3:62:46:C8:1C:AC:E3:ED:EB:96:CC:CD:05 Certificate issuer: /CN=cda047c8-1dc9-4cca-b1de-b651af254414 Certificate serial: 010D0C9F4328584A920637C55CCCB0FCCC8F2B00 Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 36832 IP address blocks: 2602:f91d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:37:c5:5c:cc:b0:fc:cc:8f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414 Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=3041e959-4dc0-4be4-bcd2-5a861ed753cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:b9:d7:6a:97:70:31:77:9d:16:64:3a:04: 66:9e:47:62:4c:9d:6c:51:32:20:d7:02:36:ae:42: 89:07:93:d8:05:b4:ea:0b:43:dd:1d:22:52:5f:2c: 64:b8:4d:47:01:e6:f3:14:d6:7a:32:a3:00:72:99: f6:5a:d8:05:a6:d3:ae:b2:64:af:e8:a2:a4:2e:8a: ad:3f:08:f1:84:36:0b:dd:79:2b:22:50:23:ca:a1: 4d:8b:2a:d2:8c:3c:e5:a3:a1:d3:89:fe:61:58:20: 0b:e0:70:09:43:53:24:61:9e:70:86:c3:5b:e8:34: c6:53:c9:f5:00:c4:f1:87:e6:75:a7:18:53:60:d2: 4c:e1:84:15:07:85:8c:47:9c:0c:79:5c:b4:48:81: 98:c9:6c:ef:06:a0:d3:ff:70:db:95:94:ca:52:38: 21:e4:6e:34:90:58:a0:30:72:5c:55:50:d6:f3:30: e8:9a:7b:56:6f:76:e5:ff:a6:78:8c:ef:5a:7f:61: a1:40:4d:13:e7:41:40:b8:d1:f4:8e:6e:72:d8:9e: f0:f9:ea:82:11:29:fe:0a:40:10:e7:3e:66:58:f3: 4a:d5:a7:b4:2c:34:60:5d:66:3b:a9:ad:5f:20:0e: 77:01:b9:34:5e:13:73:10:43:47:13:78:1c:f2:29: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:D2:65:31:B6:88:F3:62:46:C8:1C:AC:E3:ED:EB:96:CC:CD:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl X509v3 Authority Key Identifier: keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer sbgp-ipAddrBlock: critical IPv6: 2602:f91d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:88:1a:af:a4:57:02:de:2f:68:1b:68:1a:d0:25:36:69:2e: 8e:5b:be:44:cf:9d:42:59:e0:81:db:0f:f8:92:9d:66:97:a9: 20:08:2c:1b:dd:4a:5a:34:53:c0:43:3b:09:0e:65:02:17:f3: dd:3d:25:a8:49:57:e3:fe:eb:71:82:70:f0:48:de:79:16:77: a8:62:20:9f:32:e4:64:41:d8:08:d8:a6:ae:cd:88:42:0f:1a: bb:9a:ac:2d:ba:16:22:a3:23:73:84:69:6c:05:ba:08:75:dc: e7:75:f3:8a:bb:15:43:c9:0c:e6:c4:ec:2b:f3:90:8f:de:fc: 7b:69:b5:cf:3b:c5:9e:b7:3c:1d:1e:8d:0b:59:ad:06:7a:31: 4b:7e:e2:db:be:a6:ee:a8:dd:0b:26:6e:84:81:88:9b:9c:cd: fe:96:3a:2f:87:2d:cf:70:39:d0:67:9e:49:b5:54:46:05:38: be:5c:bd:c6:89:29:76:70:17:cf:cd:1e:1e:51:47:4c:86:8c: af:52:25:07:18:81:6c:d0:a3:4d:77:66:3c:e0:78:b3:1a:e6: 1f:28:f9:82:28:34:e3:37:1e:c7:f3:e7:f9:ee:29:52:97:73: 86:5a:4a:b4:f4:8e:85:ed:04:78:25:5b:46:4a:02:c7:04:ff: 4e:8d:8c:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqSBjfFXMyw/MyPKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RhMDQ3YzgtMWRjOS00Y2NhLWIxZGUtYjY1MWFmMjU0 NDE0MB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MzA0MWU5NTktNGRjMC00YmU0LWJjZDItNWE4NjFlZDc1M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTG512qXcDF3nRZkOgRmnkdiTJ1sUTIg1wI2 rkKJB5PYBbTqC0PdHSJSXyxkuE1HAebzFNZ6MqMAcpn2WtgFptOusmSv6KKkLoqt PwjxhDYL3XkrIlAjyqFNiyrSjDzlo6HTif5hWCAL4HAJQ1MkYZ5whsNb6DTGU8n1 AMTxh+Z1pxhTYNJM4YQVB4WMR5wMeVy0SIGYyWzvBqDT/3DblZTKUjgh5G40kFig MHJcVVDW8zDomntWb3bl/6Z4jO9af2GhQE0T50FAuNH0jm5y2J7w+eqCESn+CkAQ 5z5mWPNK1ae0LDRgXWY7qa1fIA53Abk0XhNzEENHE3gc8ilKkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNsn0mUxtojzYkbIHKzj7euWzM0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZGEw NDdjOC0xZGM5LTRjY2EtYjFkZS1iNjUxYWYyNTQ0MTQvYzAwNTIzOGYtZTY2Ny0z NTdhLTliZjUtYmRmMzNlOTMwNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2RhMDQ3YzgtMWRjOS00Y2NhLWIx ZGUtYjY1MWFmMjU0NDE0L2NkYTA0N2M4LTFkYzktNGNjYS1iMWRlLWI2NTFhZjI1 NDQxNC5jcmwwHwYDVR0jBBgwFoAUxUc+nSdGzFRAMovpdIw90ZMoguowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZGEwNDdjOC0xZGM5LTRjY2EtYjFkZS1iNjUx YWYyNTQ0MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5HQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAxogar6RXAt4vaBtoGtAlNmkujlu+RM+dQlnggdsP+JKdZpepIAgs G91KWjRTwEM7CQ5lAhfz3T0lqElX4/7rcYJw8EjeeRZ3qGIgnzLkZEHYCNimrs2I Qg8au5qsLboWIqMjc4RpbAW6CHXc53XzirsVQ8kM5sTsK/OQj978e2m1zzvFnrc8 HR6NC1mtBnoxS37i276m7qjdCyZuhIGIm5zN/pY6L4ctz3A50GeeSbVURgU4vly9 xokpdnAXz80eHlFHTIaMr1IlBxiBbNCjTXdmPOB4sxrmHyj5gig04zcex/Pn+e4p UpdzhlpKtPSOhe0EeCVbRkoCxwT/To2MVw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:56 2025 by rpki-client