$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa File: 16e040f3-42b1-387b-aca6-5b8efee58de6.roa (raw, json) Hash identifier: 1kM0TjrCHvx0/XSvjD0Sr2goUZNBGjV+2Cr3iQig0Io= Subject key identifier: 04:55:55:F3:4F:F1:64:05:65:E5:08:3C:F8:A7:24:0A:8B:5C:71:26 Certificate issuer: /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b Certificate serial: 010D0C9F4328584A6AF094B0D048CE7A94154E80 Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 394593 IP address blocks: 2602:f99c:132::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:94:b0:d0:48:ce:7a:94:15:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=3a939202-2773-4676-a2f2-ee80801d1da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:84:ff:90:ea:21:64:68:b2:88:83:73:45: e2:29:f4:3c:a5:e4:86:3a:b5:0f:36:fb:c3:78:e3: 77:04:3d:40:b3:d7:43:b9:97:78:74:83:d0:1c:93: ea:9f:78:72:75:73:5e:be:27:05:63:b4:99:26:65: 58:7a:bd:31:6e:08:44:26:02:4d:d3:85:4d:bf:a2: db:2f:6e:7a:9f:55:1c:8e:b4:86:23:b6:a1:18:9a: 71:71:a1:f5:e8:7d:7c:58:67:ef:71:53:ad:ec:5e: 28:76:32:c2:be:de:b2:7d:de:89:2c:a3:6e:25:50: 2e:50:ff:be:86:51:17:79:69:90:6d:92:bc:5d:f3: 6e:6e:7b:6f:40:bc:12:1e:65:67:44:91:db:d5:83: e9:70:67:26:c9:3a:b0:43:d3:93:d1:19:c3:1e:03: ce:a3:eb:21:95:1a:b2:31:82:9c:7a:56:4e:62:ed: f9:ff:c1:cb:5b:01:63:7f:95:5f:ac:55:f3:79:02: 33:c6:4f:70:2c:66:75:1d:20:5f:64:2a:1e:b3:4b: 33:d9:1c:c0:77:fc:29:43:33:c2:0a:10:89:9e:3e: 65:4a:e6:49:68:37:18:6a:67:20:9c:72:8e:32:f9: 1d:32:f6:12:7d:dd:cf:24:85:c4:08:8d:02:6b:80: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:55:55:F3:4F:F1:64:05:65:E5:08:3C:F8:A7:24:0A:8B:5C:71:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl X509v3 Authority Key Identifier: keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99c:132::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e7:6e:93:48:50:15:8e:6e:d1:7a:7c:85:54:89:a3:39:12: cf:07:fe:12:f8:4d:81:56:52:f1:3a:07:18:83:5e:ba:a9:2f: 4a:dc:fb:9c:e4:cd:16:06:ea:48:60:c7:c3:59:38:b8:c7:30: e3:21:6c:85:83:da:f6:e4:73:9c:39:60:e7:d2:73:b2:bc:f1: fa:71:c9:57:7a:59:84:30:4e:cb:2f:25:29:10:8b:be:2e:ce: 97:63:c0:60:b1:17:4f:9d:d1:16:86:22:85:1c:30:44:28:59: cc:73:cc:8e:72:84:bf:85:70:39:b0:9f:2c:1d:2c:7b:16:f1: 99:03:ef:4f:8a:f0:39:ac:90:8b:3b:39:75:2e:96:2c:06:e3: 6f:81:77:29:c3:e6:55:b3:42:d0:6f:19:cc:90:02:b4:c0:c1: 7a:4e:d3:47:41:32:a0:8c:a2:9b:69:55:2f:4c:63:17:3c:e4: 1e:7a:6e:05:67:9b:b7:74:08:db:4f:43:1e:42:f8:4c:cb:50: 12:ab:8a:49:30:5b:4b:1b:c0:90:1a:8b:7c:1f:8e:58:b4:68: 55:a2:84:fc:6e:5f:87:5d:55:54:bc:3c:b5:cd:ad:fd:6b:43: 22:bf:f5:a0:48:d5:14:5c:a2:8d:a4:0b:8c:f4:4b:ee:bd:d9: 2d:da:b2:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpq8JSw0EjOepQVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkNDQwOWUtNWMyNS00NjhiLWExZTYtNmNhMGYyYThj YThiMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk M2E5MzkyMDItMjc3My00Njc2LWEyZjItZWU4MDgwMWQxZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZGE/5DqIWRosoiDc0XiKfQ8peSGOrUPNvvD eON3BD1As9dDuZd4dIPQHJPqn3hydXNevicFY7SZJmVYer0xbghEJgJN04VNv6Lb L256n1UcjrSGI7ahGJpxcaH16H18WGfvcVOt7F4odjLCvt6yfd6JLKNuJVAuUP++ hlEXeWmQbZK8XfNubntvQLwSHmVnRJHb1YPpcGcmyTqwQ9OT0RnDHgPOo+shlRqy MYKcelZOYu35/8HLWwFjf5VfrFXzeQIzxk9wLGZ1HSBfZCoes0sz2RzAd/wpQzPC ChCJnj5lSuZJaDcYamcgnHKOMvkdMvYSfd3PJIXECI0Ca4BUVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARVVfNP8WQFZeUIPPinJAqLXHEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Q0 NDA5ZS01YzI1LTQ2OGItYTFlNi02Y2EwZjJhOGNhOGIvMTZlMDQwZjMtNDJiMS0z ODdiLWFjYTYtNWI4ZWZlZTU4ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkNDQwOWUtNWMyNS00NjhiLWEx ZTYtNmNhMGYyYThjYThiL2QzZDQ0MDllLTVjMjUtNDY4Yi1hMWU2LTZjYTBmMmE4 Y2E4Yi5jcmwwHwYDVR0jBBgwFoAU1lBBd3C2kdJvSMBEHoGaDLR5aSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2Q0NDA5ZS01YzI1LTQ2OGItYTFlNi02Y2Ew ZjJhOGNhOGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5nAEy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXnbpNIUBWObtF6fIVUiaM5Es8H/hL4TYFWUvE6BxiDXrqpL0rc +5zkzRYG6khgx8NZOLjHMOMhbIWD2vbkc5w5YOfSc7K88fpxyVd6WYQwTssvJSkQ i74uzpdjwGCxF0+d0RaGIoUcMEQoWcxzzI5yhL+FcDmwnywdLHsW8ZkD70+K8Dms kIs7OXUuliwG42+BdynD5lWzQtBvGcyQArTAwXpO00dBMqCMoptpVS9MYxc85B56 bgVnm7d0CNtPQx5C+EzLUBKrikkwW0sbwJAai3wfjli0aFWihPxuX4ddVVS8PLXN rf1rQyK/9aBI1RRcoo2kC4z0S+692S3aspc= -----END CERTIFICATE-----Generated at Wed Jul 9 20:16:02 2025 by rpki-client