$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa File: b96d661d-151e-3e40-92d8-32407e1e3c9a.roa (raw, json) Hash identifier: US6ot6ru3xUn7+ghsaHlbQHbhEIpTtozceQPkunj0YU= Subject key identifier: 7B:2C:27:42:55:FC:D8:0B:F2:9A:EA:AE:D8:35:BD:3A:CC:91:DB:CA Certificate issuer: /CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Certificate serial: 010D0C9F4328584A74B5DEDEE644160F8C69D600 Authority key identifier: 71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 53616 IP address blocks: 2602:fa67::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:de:de:e6:44:16:0f:8c:69:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=49adc6a5-641b-447b-af36-b14907d41c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:80:14:34:ba:d5:22:64:18:d4:d3:43:be:a6: 30:82:f0:43:95:8f:5e:c2:ba:81:3f:77:00:c0:68: a8:dc:46:f9:16:ba:33:46:b9:fb:cc:2e:eb:f1:aa: 78:5e:c2:e2:05:73:af:93:51:fb:2a:3b:ec:08:6e: d9:fe:e2:a1:75:95:66:a0:da:23:a2:48:ec:73:7b: e2:1e:4b:e7:14:61:f6:31:73:79:c3:d3:ca:83:7d: 9d:37:f5:ed:b6:fc:cf:50:7f:fa:4e:00:74:cd:dc: 3f:7d:8d:7c:68:ac:10:41:7e:6b:85:0d:12:c1:88: be:da:9f:06:07:d7:96:80:3d:e8:7c:1a:05:e6:93: 68:cb:40:2a:0a:ea:e6:e8:ff:a1:a0:65:94:01:bc: 6d:69:24:b4:e5:23:1c:bd:08:79:db:9d:c3:46:ff: a1:65:35:a6:b0:92:af:01:c6:46:0e:b5:6c:0a:37: e5:ce:9a:35:94:c0:94:a5:93:1c:6f:6c:a7:08:b5: fd:59:42:d1:3d:7d:47:f2:b8:7a:ce:ae:b9:68:f9: 96:2f:fa:67:e2:a5:a7:67:80:3e:72:e1:93:de:5f: 63:5b:ef:ab:59:5f:95:eb:21:cd:b4:d2:e5:e0:6c: 13:b3:bb:03:7a:e8:eb:aa:2c:07:92:49:71:46:93: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:27:42:55:FC:D8:0B:F2:9A:EA:AE:D8:35:BD:3A:CC:91:DB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl X509v3 Authority Key Identifier: keyid:71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa67::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:51:f0:9b:00:15:a0:cf:1c:f9:ed:b6:ac:e2:fe:20:54:40: 26:4d:ae:d9:69:29:2c:23:77:76:55:79:b9:db:b2:b8:d8:92: e3:77:c7:ad:96:85:86:a0:73:28:89:e2:33:75:49:52:f3:29: 5b:2a:10:d9:b2:16:43:09:00:44:a1:4d:19:a0:15:9b:6a:c2: cc:96:d6:de:b2:c6:af:62:b4:cf:a9:82:da:60:ca:ee:ad:2c: 8a:1b:45:d8:07:16:e3:48:6d:a0:ed:39:fc:4b:a3:53:1f:3f: 8a:1b:ba:4b:1b:4f:a3:df:b2:6c:8e:a5:5c:98:c0:b1:13:18: 13:a7:92:96:de:c2:78:fe:0a:33:c5:ce:8a:ab:eb:c2:98:21: 47:c2:ed:f7:e5:e2:a0:fc:e6:15:4a:a6:2d:ed:7f:04:f0:55: 49:90:06:e1:40:5d:de:c3:48:ac:9e:37:12:0f:26:ab:f7:a9: b4:75:6c:4e:9b:37:5e:9d:66:c6:11:55:06:92:ab:07:c5:c4: 14:9d:80:e1:45:29:a7:d9:2b:1e:1c:89:27:63:80:f7:53:71: f2:d1:2d:e6:a4:6c:33:fe:48:e4:9d:36:12:28:8c:1f:1d:bb: d9:d9:86:d7:d0:31:77:c1:3e:3f:dc:89:95:ef:ca:23:c4:f3: fe:5a:ae:4b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp0td7e5kQWD4xp1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgwZTY3OGYtYTUzZS00ZmE3LThjMmYtMTVmNmZjYTdj OGY5MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NDlhZGM2YTUtNjQxYi00NDdiLWFmMzYtYjE0OTA3ZDQxYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYAUNLrVImQY1NNDvqYwgvBDlY9ewrqBP3cA wGio3Eb5FrozRrn7zC7r8ap4XsLiBXOvk1H7KjvsCG7Z/uKhdZVmoNojokjsc3vi HkvnFGH2MXN5w9PKg32dN/XttvzPUH/6TgB0zdw/fY18aKwQQX5rhQ0SwYi+2p8G B9eWgD3ofBoF5pNoy0AqCurm6P+hoGWUAbxtaSS05SMcvQh5253DRv+hZTWmsJKv AcZGDrVsCjflzpo1lMCUpZMcb2ynCLX9WULRPX1H8rh6zq65aPmWL/pn4qWnZ4A+ cuGT3l9jW++rWV+V6yHNtNLl4GwTs7sDeujrqiwHkklxRpMzXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHssJ0JV/NgL8prqrtg1vTrMkdvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODBl Njc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2ZmNhN2M4ZjkvYjk2ZDY2MWQtMTUxZS0z ZTQwLTkyZDgtMzI0MDdlMWUzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgwZTY3OGYtYTUzZS00ZmE3LThj MmYtMTVmNmZjYTdjOGY5LzM4MGU2NzhmLWE1M2UtNGZhNy04YzJmLTE1ZjZmY2E3 YzhmOS5jcmwwHwYDVR0jBBgwFoAUceIYEscGYUXf96HaASMjWlwC6WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODBlNjc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2 ZmNhN2M4ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAalHwmwAVoM8c+e22rOL+IFRAJk2u2WkpLCN3dlV5uduyuNiS43fH rZaFhqBzKIniM3VJUvMpWyoQ2bIWQwkARKFNGaAVm2rCzJbW3rLGr2K0z6mC2mDK 7q0sihtF2AcW40htoO05/EujUx8/ihu6SxtPo9+ybI6lXJjAsRMYE6eSlt7CeP4K M8XOiqvrwpghR8Lt9+XioPzmFUqmLe1/BPBVSZAG4UBd3sNIrJ43Eg8mq/eptHVs Tps3Xp1mxhFVBpKrB8XEFJ2A4UUpp9krHhyJJ2OA91Nx8tEt5qRsM/5I5J02EiiM Hx272dmG19Axd8E+P9yJle/KI8Tz/lquSw== -----END CERTIFICATE-----Generated at Wed Jul 9 14:26:12 2025 by rpki-client