$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa File: 1e11158d-d12e-3742-bcfd-5fbe33e79773.roa (raw, json) Hash identifier: aA2jRONJthZwcf28MtNHNqO4HZ2n6zd2W1k2Y5TlKuE= Subject key identifier: 73:20:C7:8E:2B:22:A0:91:12:10:25:19:A5:2A:D9:18:1A:E9:EC:E8 Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F4328584A74B5E12C26B2EB6DF122EF80 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 29802 IP address blocks: 2602:f972:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:e1:2c:26:b2:eb:6d:f1:22:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=92f7640e-5a96-451f-beff-88d491a49cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:51:27:7a:38:8c:f0:ed:f4:2f:71:76:6b: e8:88:44:c8:79:35:a5:a4:c7:d5:47:a3:57:21:25: 21:5e:2b:80:11:1e:ca:7f:55:fd:57:ee:2d:f6:45: 3e:d9:ed:da:f4:a5:e1:7c:16:7c:30:08:fd:e3:42: 9a:c2:8f:b8:e3:a5:60:15:34:61:f0:d8:04:6c:b5: 18:3b:6b:db:55:87:36:f8:d3:81:41:ac:26:19:4d: 5f:88:17:90:0b:8f:f0:8f:8e:8d:66:64:4d:de:4b: 71:60:a5:f3:a4:d3:78:95:f4:4f:43:0a:51:58:8c: e7:18:62:07:6c:70:8f:d9:7f:ed:70:29:40:8f:71: 3a:8e:de:d7:8b:9d:26:f3:e9:eb:4a:51:b5:24:f6: b3:0e:d0:64:c4:16:b5:21:66:64:41:07:33:5b:b1: 36:ee:83:4b:f3:eb:05:d3:ac:25:2b:1d:3a:ad:4b: 83:f5:4d:6b:af:0b:9f:9d:5c:6a:b0:f9:18:3f:6d: 18:66:c5:54:56:7c:10:6c:a9:86:15:21:2a:96:20: 8e:17:36:d3:43:cb:e7:63:e8:78:0e:89:cd:f5:93: e9:69:86:7d:7b:fa:0d:b1:4a:48:bd:7e:61:11:8a: 34:8a:90:71:dc:6c:22:4c:80:b8:64:8e:c9:17:26: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:20:C7:8E:2B:22:A0:91:12:10:25:19:A5:2A:D9:18:1A:E9:EC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6f:60:af:8d:f4:8c:fc:f7:ac:79:7e:b7:2d:cf:9e:65:3a: 92:29:ab:22:9d:b2:60:f1:10:a0:26:89:9b:e9:f2:47:3c:dd: 5b:d1:80:69:64:31:20:28:96:0f:b6:94:34:8e:a0:51:10:2c: 19:27:c6:a5:b2:79:0c:06:ad:00:cc:c0:3c:03:cc:f5:76:a3: 39:9f:65:e9:41:f1:d3:d3:51:4d:45:5c:9c:39:4c:39:66:f1: 0f:db:19:ea:b2:f6:3d:27:69:7f:e0:7c:0a:33:c5:06:a0:51: ca:0c:f8:49:a6:62:45:fa:97:52:3c:aa:4a:6b:24:56:31:b2: 28:69:22:90:76:98:d4:1e:27:ae:bf:e9:05:6b:f7:a0:5f:c3: bb:ed:0e:e1:46:70:d9:bc:ca:56:27:3c:31:b0:9f:5c:38:5d: 05:6b:ed:d2:b0:c4:2a:0e:ee:c1:25:05:96:3a:ef:86:af:ab: 94:96:b9:31:05:ef:90:bb:00:18:c8:2d:8e:fb:41:af:08:09: c2:47:84:27:50:91:17:f3:7e:d3:86:ab:0f:88:07:47:09:d6: 95:3a:01:2c:6a:f4:3c:28:73:2d:84:a6:74:db:9b:23:91:60: cc:af:a4:5a:4e:f2:3b:65:d1:22:b2:41:9f:a7:c3:37:15:8c: ea:fd:45:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0teEsJrLrbfEi74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk OTJmNzY0MGUtNWE5Ni00NTFmLWJlZmYtODhkNDkxYTQ5Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJVRJ3o4jPDt9C9xdmvoiETIeTWlpMfVR6NX ISUhXiuAER7Kf1X9V+4t9kU+2e3a9KXhfBZ8MAj940Kawo+446VgFTRh8NgEbLUY O2vbVYc2+NOBQawmGU1fiBeQC4/wj46NZmRN3ktxYKXzpNN4lfRPQwpRWIznGGIH bHCP2X/tcClAj3E6jt7Xi50m8+nrSlG1JPazDtBkxBa1IWZkQQczW7E27oNL8+sF 06wlKx06rUuD9U1rrwufnVxqsPkYP20YZsVUVnwQbKmGFSEqliCOFzbTQ8vnY+h4 DonN9ZPpaYZ9e/oNsUpIvX5hEYo0ipBx3GwiTIC4ZI7JFyYVgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMgx44rIqCREhAlGaUq2Rga6ezoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMWUxMTE1OGQtZDEyZS0z NzQyLWJjZmQtNWZiZTMzZTc5NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJvYK+N9Iz896x5frctz55lOpIpqyKdsmDxEKAmiZvp8kc83VvR gGlkMSAolg+2lDSOoFEQLBknxqWyeQwGrQDMwDwDzPV2ozmfZelB8dPTUU1FXJw5 TDlm8Q/bGeqy9j0naX/gfAozxQagUcoM+EmmYkX6l1I8qkprJFYxsihpIpB2mNQe J66/6QVr96Bfw7vtDuFGcNm8ylYnPDGwn1w4XQVr7dKwxCoO7sElBZY674avq5SW uTEF75C7ABjILY77Qa8ICcJHhCdQkRfzftOGqw+IB0cJ1pU6ASxq9Dwocy2EpnTb myORYMyvpFpO8jtl0SKyQZ+nwzcVjOr9RQ8= -----END CERTIFICATE-----Generated at Thu Jul 31 00:47:35 2025 by rpki-client