$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afa9a68b-79d9-3654-a8b9-8ed9e0ce4428.roa File: afa9a68b-79d9-3654-a8b9-8ed9e0ce4428.roa (raw, json) Hash identifier: AtxryDGfWzJe979tslE2ALuYYmvfgAf+ln+IwjByHAM= Subject key identifier: 3F:8E:4E:6E:3C:F7:A9:32:AA:DF:70:47:60:E9:2D:7B:7F:27:66:64 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584AF5213D113346EA542130A500 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afa9a68b-79d9-3654-a8b9-8ed9e0ce4428.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399976 IP address blocks: 2602:80c:2024::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:3d:11:33:46:ea:54:21:30:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7bfaac08-a5fe-4136-a765-b6241b446ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:31:8a:2e:4a:e9:ae:e9:46:da:46:60:bd: 54:45:4f:7f:f4:60:c1:f3:20:1d:96:72:c6:01:b6: 96:bb:0a:63:60:f7:82:b6:13:d9:92:51:2f:94:57: 1a:d2:b6:01:f2:0f:9c:12:80:03:99:28:25:2a:32: 9d:35:94:9d:f3:14:97:5b:cc:17:95:cc:61:45:5c: c6:b7:d1:4b:05:62:03:e5:0a:a3:f7:6e:37:c0:ea: 15:f0:97:79:ae:30:7f:82:8a:e7:48:f7:9a:b8:d7: 70:9e:5f:da:31:43:6d:d2:81:11:ad:c6:c9:9f:08: fa:b9:59:46:d5:50:99:28:73:c6:fd:9d:a5:81:65: 6d:61:4f:f2:1a:ca:af:88:8a:57:04:a3:f2:5e:67: 4f:e8:81:11:9b:8d:08:ad:af:58:18:71:81:d8:2f: 89:03:f9:53:dd:4b:5d:c6:d9:40:5c:dd:83:68:14: 24:b9:3f:30:8a:09:a4:4f:32:2f:3a:be:a0:46:e7: 25:b1:89:6f:11:f1:00:f9:51:24:0b:22:94:77:e3: 9b:51:ff:e8:a9:bc:29:2e:29:a4:3e:ad:fb:6f:54: 81:a2:9f:ca:a3:0d:dd:a9:47:1e:4d:83:55:f7:08: b1:b9:cf:af:4c:4c:64:7b:5c:04:fd:60:fc:47:93: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8E:4E:6E:3C:F7:A9:32:AA:DF:70:47:60:E9:2D:7B:7F:27:66:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/afa9a68b-79d9-3654-a8b9-8ed9e0ce4428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:2024::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f2:8c:51:94:c5:ea:c9:77:1b:37:75:11:d5:5c:cb:41:2d: 88:e8:c8:cf:b3:00:b1:be:dd:b3:e9:ba:e5:a6:81:ef:2a:3a: 48:13:e3:b5:67:23:e1:4e:75:51:bb:2c:c8:cd:35:06:b1:04: 91:39:73:d0:8b:7d:14:50:aa:7a:4c:15:36:37:23:c7:dd:b9: 12:4d:d9:bc:fc:86:8b:39:ed:77:10:0d:02:fc:8d:c1:0e:a9: 32:0e:d0:26:95:5c:b7:86:8d:ba:e6:ce:f9:4a:5a:dd:91:4d: 65:0d:9e:1d:ce:f4:d0:54:33:ab:ef:31:7c:1c:42:c7:e4:48: 1f:8b:60:06:17:db:61:e2:e5:fd:6c:4e:11:5a:f4:e5:6f:fc: 67:cb:8f:fe:28:ee:4a:fd:85:7a:2b:49:56:a5:96:e2:a1:24: 78:6a:ec:e3:d3:22:f9:d1:b0:be:47:d7:9d:64:0e:e1:39:0e: db:1d:3b:45:08:a8:7e:e6:a5:76:27:2e:db:69:7d:4a:43:79: ad:68:46:65:9e:6e:97:89:44:29:3d:a2:2a:07:f8:d6:3c:60: ad:95:91:96:b9:3e:5a:54:55:05:2b:20:8d:39:5c:a1:15:1c: 26:89:0a:90:3a:25:ef:f3:be:09:d6:45:60:40:0d:d4:ab:99: 7c:41:b5:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IT0RM0bqVCEwpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2JmYWFjMDgtYTVmZS00MTM2LWE3NjUtYjYyNDFiNDQ2ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Mxii5K6a7pRtpGYL1URU9/9GDB8yAdlnLG AbaWuwpjYPeCthPZklEvlFca0rYB8g+cEoADmSglKjKdNZSd8xSXW8wXlcxhRVzG t9FLBWID5Qqj9243wOoV8Jd5rjB/gornSPeauNdwnl/aMUNt0oERrcbJnwj6uVlG 1VCZKHPG/Z2lgWVtYU/yGsqviIpXBKPyXmdP6IERm40Ira9YGHGB2C+JA/lT3Utd xtlAXN2DaBQkuT8wigmkTzIvOr6gRuclsYlvEfEA+VEkCyKUd+ObUf/oqbwpLimk Pq37b1SBop/Kow3dqUceTYNV9wixuc+vTExke1wE/WD8R5P2NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+OTm4896kyqt9wR2DpLXt/J2ZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYWZhOWE2OGItNzlkOS0z NjU0LWE4YjktOGVkOWUwY2U0NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXyjFGUxerJdxs3dRHVXMtBLYjoyM+zALG+3bPpuuWmge8qOkgT 47VnI+FOdVG7LMjNNQaxBJE5c9CLfRRQqnpMFTY3I8fduRJN2bz8hos57XcQDQL8 jcEOqTIO0CaVXLeGjbrmzvlKWt2RTWUNnh3O9NBUM6vvMXwcQsfkSB+LYAYX22Hi 5f1sThFa9OVv/GfLj/4o7kr9hXorSValluKhJHhq7OPTIvnRsL5H151kDuE5Dtsd O0UIqH7mpXYnLttpfUpDea1oRmWebpeJRCk9oioH+NY8YK2VkZa5PlpUVQUrII05 XKEVHCaJCpA6Je/zvgnWRWBADdSrmXxBtQU= -----END CERTIFICATE-----Generated at Mon Aug 25 19:35:32 2025 by rpki-client