$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa File: 98e886f1-cc44-3839-b7f0-048f0f3f04af.roa (raw, json) Hash identifier: /Hk4ujEX31bdzFm44ZirXsrmlQRZ3HD3b+sJHKersN8= Subject key identifier: A6:96:80:6A:86:90:63:79:F3:22:D6:19:A8:93:66:77:D3:76:93:1B Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584A146558B93BDE1D4920FA5980 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 206018 IP address blocks: 2602:fc09:f80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:58:b9:3b:de:1d:49:20:fa:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=301aba85-7e44-4e40-961a-6fdeb12f9775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:3f:cf:1a:36:51:d1:3e:c3:60:f6:a7:b3: 79:7c:fb:4e:a4:cd:fe:67:c7:70:bb:8e:f1:ba:48: 0c:b1:10:1e:17:78:5a:4e:48:ff:b5:f0:81:39:35: fe:7c:41:1c:d4:d4:6d:a3:c6:12:7f:42:06:1d:df: 75:bd:88:de:0a:14:99:43:84:25:18:0b:1e:07:af: fe:4e:f8:c8:a5:7d:62:83:ac:4c:2e:c7:e0:a5:bd: 4c:88:78:ad:0b:52:4c:21:fe:3a:c3:dc:61:0a:04: 84:fa:54:69:75:c2:74:e7:79:68:aa:06:0d:21:bf: 63:68:fe:cb:1f:fd:6f:6f:17:6a:6c:7e:70:05:70: 6e:8f:f5:71:1c:89:ca:bf:cb:7f:ce:ae:88:02:f7: 28:97:96:e8:69:f2:9f:c4:d1:b1:04:97:60:89:fc: b7:5d:65:08:8f:d1:6a:cb:f2:8d:b5:2a:83:b5:a3: aa:d0:b6:53:91:1f:a0:58:bc:e5:48:15:33:f4:2a: 93:fc:6a:72:f3:30:8a:3c:83:5e:33:fa:03:9b:9d: 2d:fd:23:31:96:7c:8b:1a:f7:07:27:74:2a:49:1d: 59:ad:93:ec:d0:8c:ff:dc:22:6d:67:90:80:0b:11: 0b:8a:51:d0:bc:55:b3:ac:8f:57:9b:23:4c:55:34: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:96:80:6A:86:90:63:79:F3:22:D6:19:A8:93:66:77:D3:76:93:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e2:57:36:d6:84:24:4a:56:e9:4b:f0:8b:e4:84:00:0a:3a: e6:5b:70:c7:a0:fb:d3:6a:53:9f:72:6a:28:63:4c:f7:e1:df: cf:e9:92:fa:83:24:d3:ee:94:bc:2a:53:2c:af:2a:d0:f1:56: bd:1d:ca:a8:46:10:8d:a3:f4:21:ce:af:87:e4:fc:df:e0:29: 88:e6:98:6e:12:ab:fd:2b:87:a6:61:2c:90:26:cb:d3:a3:d1: 74:5e:0c:5d:4d:3d:45:46:a7:e9:77:13:de:68:37:27:fa:08: eb:3b:d2:96:c5:04:f6:f5:e7:84:13:be:bb:dd:33:12:b9:28: a5:30:ca:4b:19:a8:b0:c9:1e:51:25:7b:00:38:75:7f:1e:9b: 6f:1e:28:45:8b:15:40:f9:1d:ce:a9:69:19:72:dc:0a:14:4d: db:ac:b4:d9:c7:c4:2a:be:79:19:f9:b8:d7:53:2b:a0:fe:eb: f1:63:f6:2e:d2:df:dd:78:c6:e1:2d:4a:09:3f:b1:aa:e7:5e: 24:61:7b:b0:4e:97:9a:42:32:44:b1:fd:33:af:18:9e:f5:20: f6:d2:5c:80:c8:7a:fe:6b:80:f8:a9:aa:29:25:a3:77:5e:47: 9d:46:16:af:aa:23:81:4c:13:b5:89:22:9d:f4:7c:c9:ef:f1: 5e:6e:a3:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZVi5O94dSSD6WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MzAxYWJhODUtN2U0NC00ZTQwLTk2MWEtNmZkZWIxMmY5Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1A/zxo2UdE+w2D2p7N5fPtOpM3+Z8dwu47x ukgMsRAeF3haTkj/tfCBOTX+fEEc1NRto8YSf0IGHd91vYjeChSZQ4QlGAseB6/+ TvjIpX1ig6xMLsfgpb1MiHitC1JMIf46w9xhCgSE+lRpdcJ053loqgYNIb9jaP7L H/1vbxdqbH5wBXBuj/VxHInKv8t/zq6IAvcol5boafKfxNGxBJdgify3XWUIj9Fq y/KNtSqDtaOq0LZTkR+gWLzlSBUz9CqT/Gpy8zCKPINeM/oDm50t/SMxlnyLGvcH J3QqSR1ZrZPs0Iz/3CJtZ5CACxELilHQvFWzrI9XmyNMVTQLPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKaWgGqGkGN58yLWGaiTZnfTdpMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOThlODg2ZjEtY2M0NC0z ODM5LWI3ZjAtMDQ4ZjBmM2YwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3iVzbWhCRKVulL8IvkhAAKOuZbcMeg+9NqU59yaihjTPfh38/p kvqDJNPulLwqUyyvKtDxVr0dyqhGEI2j9CHOr4fk/N/gKYjmmG4Sq/0rh6ZhLJAm y9Oj0XReDF1NPUVGp+l3E95oNyf6COs70pbFBPb154QTvrvdMxK5KKUwyksZqLDJ HlElewA4dX8em28eKEWLFUD5Hc6paRly3AoUTdustNnHxCq+eRn5uNdTK6D+6/Fj 9i7S3914xuEtSgk/sarnXiRhe7BOl5pCMkSx/TOvGJ71IPbSXIDIev5rgPipqikl o3deR51GFq+qI4FME7WJIp30fMnv8V5uo/0= -----END CERTIFICATE-----Generated at Sun Jun 8 13:39:16 2025 by rpki-client