$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa File: dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa (raw, json) Hash identifier: Gkl6pCJcy7asFpAIPLwwZJ0OF5o+ajxw3tx1E8c49co= Subject key identifier: F5:A0:89:8B:45:62:E4:B9:C0:05:58:32:C1:74:63:19:76:6C:61:56 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584A6DBB3A0F617087568B727900 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 26930 IP address blocks: 2602:ffc5:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3a:0f:61:70:87:56:8b:72:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=13b41231-1fef-4c50-9200-f4048b6f4715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:f2:4e:0b:0d:e7:8d:23:03:da:8a:74:15: 8b:56:2c:f1:3d:e3:bd:28:15:14:6d:22:eb:47:97: 0c:55:b2:de:39:23:3e:d0:a0:d8:20:05:56:7c:22: 6a:48:bf:a8:37:5a:5e:24:2b:c7:28:c5:e9:b7:d5: e5:06:90:92:c3:0e:91:64:fa:ee:1b:12:81:a6:8b: 51:85:54:e3:07:a6:8b:16:db:45:d0:24:11:63:d8: b7:b5:08:05:17:75:e4:bc:ce:bc:18:8a:cd:6a:9f: 11:c8:d1:f7:a8:20:0b:f7:6e:b0:09:b7:da:1b:b0: 64:80:a2:6d:eb:88:0d:22:4a:82:cd:5e:93:b4:36: 2c:bd:c8:32:0e:4e:27:46:e5:e2:29:ad:b4:e7:9c: bc:21:99:fa:2c:d1:76:40:a6:69:eb:4c:13:26:d3: 15:1d:eb:d7:d9:03:c7:c0:83:3c:0a:43:52:64:a3: d4:c2:ab:1f:2f:c3:3f:df:5e:27:11:c1:be:1f:eb: 0c:65:ed:53:f0:a1:3f:f2:fb:e0:33:60:4a:57:e8: 90:a4:59:9a:c4:7b:88:47:58:78:c5:eb:f9:8e:2a: c8:9a:b1:be:7d:22:b2:f2:43:40:be:43:65:a8:35: 07:22:94:da:18:ce:81:d3:b9:00:80:ba:d3:d9:34: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:89:8B:45:62:E4:B9:C0:05:58:32:C1:74:63:19:76:6C:61:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffc5:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:da:7e:04:21:33:61:9e:3d:b4:d0:ff:4a:d4:f9:ed:4d:1b: 78:9c:f4:86:eb:48:d7:41:57:98:e3:0e:cf:1f:2d:ac:eb:6b: ba:3d:24:21:f5:b7:1a:86:7d:62:bb:66:6b:49:f6:90:bf:a5: 60:11:e6:48:c1:61:e1:96:89:02:9d:df:3c:2f:38:1b:d2:20: 21:87:d9:80:dc:cf:50:fb:aa:90:51:f1:c6:20:f8:bc:41:a7: f7:33:d7:85:0a:e6:15:7e:dd:f9:98:74:36:69:20:e1:64:02: 9b:f7:13:30:f8:eb:dc:6f:d3:29:d9:4b:04:10:3f:50:87:1e: 27:66:13:f5:31:be:1a:98:47:dc:21:d3:4a:ff:6c:73:0a:81: 5e:7b:26:06:f3:96:71:f6:15:59:65:d2:9a:dc:4d:6f:27:8c: cd:56:19:fb:07:ae:74:84:70:7d:50:72:e1:ce:10:09:5a:dc: b1:0c:d3:94:19:d3:fa:e8:91:58:77:eb:21:b5:91:ca:9b:6b: f7:27:0b:62:c8:b0:bc:6c:1b:ac:e6:77:28:cd:2f:a1:3d:02: bc:f5:fc:36:45:ff:c1:df:fc:cf:d3:e2:23:7f:b9:ac:30:af: e9:af:9e:b4:19:da:cf:e1:95:d7:aa:ba:a0:59:b5:33:dd:82: f0:10:ff:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEptuzoPYXCHVotyeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MTNiNDEyMzEtMWZlZi00YzUwLTkyMDAtZjQwNDhiNmY0NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHyTgsN540jA9qKdBWLVizxPeO9KBUUbSLr R5cMVbLeOSM+0KDYIAVWfCJqSL+oN1peJCvHKMXpt9XlBpCSww6RZPruGxKBpotR hVTjB6aLFttF0CQRY9i3tQgFF3XkvM68GIrNap8RyNH3qCAL926wCbfaG7BkgKJt 64gNIkqCzV6TtDYsvcgyDk4nRuXiKa2055y8IZn6LNF2QKZp60wTJtMVHevX2QPH wIM8CkNSZKPUwqsfL8M/314nEcG+H+sMZe1T8KE/8vvgM2BKV+iQpFmaxHuIR1h4 xev5jirImrG+fSKy8kNAvkNlqDUHIpTaGM6B07kAgLrT2TS6cQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPWgiYtFYuS5wAVYMsF0Yxl2bGFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZGNjMzhhMTYtNGQ2ZC0z NTk3LWE3NmItZTdlNzJjNGFmNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL/xQUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoNp+BCEzYZ49tND/StT57U0beJz0hutI10FXmOMOzx8trOtruj0k IfW3GoZ9Yrtma0n2kL+lYBHmSMFh4ZaJAp3fPC84G9IgIYfZgNzPUPuqkFHxxiD4 vEGn9zPXhQrmFX7d+Zh0Nmkg4WQCm/cTMPjr3G/TKdlLBBA/UIceJ2YT9TG+GphH 3CHTSv9scwqBXnsmBvOWcfYVWWXSmtxNbyeMzVYZ+weudIRwfVBy4c4QCVrcsQzT lBnT+uiRWHfrIbWRyptr9ycLYsiwvGwbrOZ3KM0voT0CvPX8NkX/wd/8z9PiI3+5 rDCv6a+etBnaz+GV16q6oFm1M92C8BD/1g== -----END CERTIFICATE-----Generated at Thu Jul 10 12:52:54 2025 by rpki-client