$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa File: 17073da9-1980-383a-b12c-971b97acfc86.roa (raw, json) Hash identifier: 73E7PHNBS4jGPnl2vSIoEMtVLaX7hpuwoDsKrJ4joSI= Subject key identifier: 91:B6:76:A9:6A:CD:F5:7E:73:39:9C:F9:70:A1:F5:B9:B2:7F:CC:90 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584A58CB0A12F61B806D6B13CB38 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 32507 IP address blocks: 2602:f84c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0a:12:f6:1b:80:6d:6b:13:cb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=c2e99c49-8ba2-4edf-b596-ee6f9633b86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:bf:04:26:76:63:ba:cf:3c:cf:29:2e:63: 93:66:e0:79:de:ae:9c:7e:e1:fa:2e:93:84:ac:eb: a4:74:57:cc:62:96:a7:71:4a:e2:c9:44:44:30:67: 33:2d:f0:77:51:d2:79:c9:03:fc:ce:3b:0f:7d:14: 75:94:57:6e:66:ec:02:9a:d4:56:61:a3:cd:50:11: 90:bd:61:a0:02:31:71:3e:0d:0f:60:3c:1b:7f:58: 8e:4b:36:6d:fb:fc:b3:ca:c1:24:6b:92:25:62:89: 32:6d:1b:96:a5:69:14:09:94:53:d1:2d:31:60:91: 41:b0:ae:8c:de:71:ff:a5:cc:e4:41:ae:72:b2:53: 58:82:a8:e9:8f:ff:70:a6:6d:01:b1:31:75:31:ca: 86:b5:b2:85:b9:09:c5:7c:a4:90:e0:79:60:fb:30: fe:2c:01:f5:1a:93:83:58:11:5e:18:44:d7:5a:94: e7:6c:e8:ea:c0:5a:a0:a9:db:55:41:c2:9e:ff:31: bf:c0:6b:dd:49:dd:39:c0:ae:c4:7a:53:b8:66:69: e5:c5:ed:da:83:55:b0:fa:9a:21:1e:bb:b1:0b:45: 71:9b:ba:c8:5f:ec:3a:e8:1e:05:dd:2f:bf:0a:d5: 85:3d:c2:f1:57:49:88:82:cd:59:52:48:cd:a5:9e: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:76:A9:6A:CD:F5:7E:73:39:9C:F9:70:A1:F5:B9:B2:7F:CC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:07:6d:ed:c9:70:7f:f5:15:6f:5e:d8:b7:a4:4c:8e:a4:02: 03:c6:fa:33:94:84:52:22:a5:85:93:71:49:06:39:45:16:b8: ba:92:42:29:27:e1:31:2b:08:53:56:e3:58:43:06:0a:27:e2: b7:03:fb:fd:19:d5:f6:8d:d6:c2:f7:11:82:e4:61:32:53:a9: ca:28:e1:cd:cd:b7:7e:98:5e:5a:4b:c9:99:42:9f:45:de:91: c0:f9:0d:93:0c:dd:4d:74:50:98:a1:8a:66:14:d4:99:94:f3: d4:b8:ab:4f:a7:a8:ac:12:eb:62:74:3a:3b:f4:59:0f:ed:ab: 45:34:55:aa:db:04:bb:b8:d1:a8:4c:97:67:67:76:ee:bd:ef: 55:0e:1a:ac:ca:a8:74:ff:d6:26:fa:2f:5f:f4:50:b6:ed:25: c3:88:58:cb:78:da:7e:bd:bf:b8:0d:74:b0:09:19:eb:95:0e: 8d:1f:b1:95:17:b3:02:f1:36:c7:de:f2:db:0f:a1:41:4c:0c: cf:63:b8:c4:0e:68:c0:1b:43:4b:19:ea:1e:8d:3b:34:da:ee: 09:8a:8d:0d:b5:aa:96:e7:52:7b:65:97:e6:0c:d0:3f:c8:1e: 0f:5e:e0:af:73:a7:47:8a:84:c6:c4:66:82:db:25:54:ca:a0: c0:0f:31:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpYywoS9huAbWsTyzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YzJlOTljNDktOGJhMi00ZWRmLWI1OTYtZWU2Zjk2MzNiODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWC/BCZ2Y7rPPM8pLmOTZuB53q6cfuH6LpOE rOukdFfMYpancUriyUREMGczLfB3UdJ5yQP8zjsPfRR1lFduZuwCmtRWYaPNUBGQ vWGgAjFxPg0PYDwbf1iOSzZt+/yzysEka5IlYokybRuWpWkUCZRT0S0xYJFBsK6M 3nH/pczkQa5yslNYgqjpj/9wpm0BsTF1McqGtbKFuQnFfKSQ4Hlg+zD+LAH1GpOD WBFeGETXWpTnbOjqwFqgqdtVQcKe/zG/wGvdSd05wK7EelO4Zmnlxe3ag1Ww+poh HruxC0Vxm7rIX+w66B4F3S+/CtWFPcLxV0mIgs1ZUkjNpZ5rDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJG2dqlqzfV+czmc+XCh9bmyf8yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvMTcwNzNkYTktMTk4MC0z ODNhLWIxMmMtOTcxYjk3YWNmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4TAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKcHbe3JcH/1FW9e2LekTI6kAgPG+jOUhFIipYWTcUkGOUUWuLqS Qikn4TErCFNW41hDBgon4rcD+/0Z1faN1sL3EYLkYTJTqcoo4c3Nt36YXlpLyZlC n0XekcD5DZMM3U10UJihimYU1JmU89S4q0+nqKwS62J0Ojv0WQ/tq0U0VarbBLu4 0ahMl2dndu6971UOGqzKqHT/1ib6L1/0ULbtJcOIWMt42n69v7gNdLAJGeuVDo0f sZUXswLxNsfe8tsPoUFMDM9juMQOaMAbQ0sZ6h6NOzTa7gmKjQ21qpbnUntll+YM 0D/IHg9e4K9zp0eKhMbEZoLbJVTKoMAPMRg= -----END CERTIFICATE-----Generated at Wed Jul 9 03:50:23 2025 by rpki-client