$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa File: 645b79c9-f64a-3042-8dde-9d45f5df07ec.roa (raw, json) Hash identifier: kI+08+StDcRLiJHL49sQQh3Ll45nTwcEZQonaflPaA4= Subject key identifier: 59:62:81:D0:18:BA:E6:40:DD:D8:7E:09:7E:16:C2:E2:B8:50:FD:E9 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584AF5213CBE3CEBB7F8467F7C40 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399976 IP address blocks: 2602:80c:2020::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:3c:be:3c:eb:b7:f8:46:7f:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f234ff4b-c182-4077-8e83-c8ff37f5b5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:b3:ae:a2:43:ff:7b:7b:2b:44:38:31:2f: 15:0a:8f:46:0f:2a:87:fa:0b:54:5b:95:2d:75:fa: 98:a8:13:4f:e7:0e:b8:a6:bc:d6:a0:b8:25:7a:96: 26:08:a5:dc:1b:92:31:99:c5:ef:ee:d9:4a:27:cd: 46:7b:87:2d:23:9b:78:f9:77:6d:0c:41:aa:38:5e: 1c:4b:73:49:f7:59:03:31:f5:b5:7e:0f:46:f3:9c: 88:ff:4a:a8:4d:5f:34:02:94:c7:67:bc:71:f3:99: 20:2f:56:07:98:f7:9b:07:ed:33:df:82:6e:2e:01: a0:fe:3b:c0:46:e9:4b:80:71:83:be:98:0b:12:b9: 82:d3:bf:58:51:08:70:0a:11:5a:5a:67:19:88:52: e6:39:18:a8:f4:c9:2b:a8:76:8c:e5:15:d8:3f:8b: 0a:e5:d3:f9:7b:27:b2:2a:3e:c7:ea:1f:8e:47:f5: a4:ae:b3:66:ce:de:f3:a4:d4:a6:68:cf:5e:cc:97: 58:29:57:99:56:bf:0c:6d:af:55:3e:f5:be:f9:73: ec:17:f2:bd:a0:06:c4:51:f1:7a:1c:8f:3a:ef:ec: d4:61:03:b2:11:d9:25:35:c5:af:c7:fd:5b:2d:51: c8:d9:f5:38:4a:ef:75:53:c0:3f:e7:74:f5:ae:f9: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:62:81:D0:18:BA:E6:40:DD:D8:7E:09:7E:16:C2:E2:B8:50:FD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/645b79c9-f64a-3042-8dde-9d45f5df07ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:2020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:38:4c:31:07:85:63:a2:00:b8:a3:91:f3:40:63:78:ac:76: c0:79:fd:4c:05:c2:92:f0:7c:8e:81:48:bf:64:9f:b8:b3:83: 94:a6:36:0e:9f:ad:ea:0a:de:b1:58:a2:47:dd:2f:69:82:19: 30:b4:e7:c2:a1:45:04:c0:4d:d3:93:04:cd:7a:55:06:d6:8e: cf:80:c0:dd:30:97:fc:ad:14:43:e7:c7:4d:35:cc:00:ef:76: bd:8e:22:54:68:94:1a:eb:c2:88:23:6d:b4:2a:ee:42:5c:46: 9f:0a:c5:ea:53:c9:75:5d:54:67:5a:df:c9:d5:15:a7:ac:9e: a7:ff:be:18:06:66:87:9f:88:9c:5e:a0:0c:df:e3:a0:c0:a0: fc:26:f0:e2:db:e5:ef:61:0e:ba:8b:a8:0d:c5:c4:a3:55:8e: ba:97:a4:e7:cc:84:f2:0e:c1:0b:98:f1:d4:62:2d:a8:1e:93: 2b:55:51:ce:0e:41:c9:3e:b9:57:f3:8f:96:9b:4f:ac:42:87: 28:dc:bd:5f:e4:c2:42:c8:d1:20:5b:8f:15:1f:10:57:43:9c: 1f:5d:0c:13:c3:9a:c0:de:91:5d:14:e4:28:fc:f3:0e:73:9e: d5:e3:83:4f:dd:ce:48:9a:b9:a1:2c:bd:eb:5c:be:c9:27:42: 9c:65:87:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITy+POu3+EZ/fEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjIzNGZmNGItYzE4Mi00MDc3LThlODMtYzhmZjM3ZjViNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh+zrqJD/3t7K0Q4MS8VCo9GDyqH+gtUW5Ut dfqYqBNP5w64przWoLglepYmCKXcG5IxmcXv7tlKJ81Ge4ctI5t4+XdtDEGqOF4c S3NJ91kDMfW1fg9G85yI/0qoTV80ApTHZ7xx85kgL1YHmPebB+0z34JuLgGg/jvA RulLgHGDvpgLErmC079YUQhwChFaWmcZiFLmORio9MkrqHaM5RXYP4sK5dP5eyey Kj7H6h+OR/WkrrNmzt7zpNSmaM9ezJdYKVeZVr8Mba9VPvW++XPsF/K9oAbEUfF6 HI867+zUYQOyEdklNcWvx/1bLVHI2fU4Su91U8A/53T1rvkexwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFligdAYuuZA3dh+CX4WwuK4UP3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNjQ1Yjc5YzktZjY0YS0z MDQyLThkZGUtOWQ0NWY1ZGYwN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHI4TDEHhWOiALijkfNAY3isdsB5/UwFwpLwfI6BSL9kn7izg5Sm Ng6freoK3rFYokfdL2mCGTC058KhRQTATdOTBM16VQbWjs+AwN0wl/ytFEPnx001 zADvdr2OIlRolBrrwogjbbQq7kJcRp8KxepTyXVdVGda38nVFaesnqf/vhgGZoef iJxeoAzf46DAoPwm8OLb5e9hDrqLqA3FxKNVjrqXpOfMhPIOwQuY8dRiLagekytV Uc4OQck+uVfzj5abT6xChyjcvV/kwkLI0SBbjxUfEFdDnB9dDBPDmsDekV0U5Cj8 8w5zntXjg0/dzkiauaEsvetcvsknQpxlh8M= -----END CERTIFICATE-----Generated at Mon Aug 25 19:29:41 2025 by rpki-client