$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa File: 8f45e8d1-2145-396a-8fc1-870c6a976845.roa (raw, json) Hash identifier: oYql45pGUjgSfjCH9T6cODqvuxZ+gBjHqsInp+jgKO0= Subject key identifier: 39:6B:26:46:9F:05:41:5C:C0:19:B3:3B:C1:4B:0D:02:73:3E:4D:D5 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584A5FC5E4FDBE8D0C89CDA8CA80 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 2602:277:f00::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e4:fd:be:8d:0c:89:cd:a8:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=f1f597cc-3ce0-42b6-9990-cd5b123cccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:4d:5b:84:7e:a6:83:69:6d:c5:bc:fd:f6: 55:3f:93:2a:ae:96:f6:2e:24:46:81:0c:2e:7e:1b: 6c:1f:62:f9:76:61:5b:75:fe:65:81:7d:45:d2:04: 51:de:a8:e4:15:63:69:eb:8e:0e:e2:96:41:dc:7a: 42:5b:06:94:49:90:5c:b3:fb:29:7d:9c:da:2d:fd: d4:75:74:f0:ac:bb:2a:66:05:b2:57:e8:4f:47:e6: aa:81:cb:c4:f3:79:26:96:a6:16:66:c5:2e:21:0c: 72:4b:27:a8:3f:59:16:22:6c:34:93:f1:2e:4e:e6: 54:28:6b:80:77:5a:19:51:f8:2c:7c:ab:64:db:c9: ba:01:1c:47:54:91:d9:2e:2e:4b:06:72:64:61:3f: e6:90:bd:69:53:7c:ad:72:51:1f:65:d3:35:28:82: 9e:c4:9e:2e:c2:ba:1e:b2:b9:6e:c4:6a:7f:68:0e: 53:e3:f3:1c:a0:27:2f:0f:d3:ee:30:96:cb:ed:3d: c6:00:ae:bd:64:0f:8b:69:9b:3c:3f:7e:23:04:3b: dc:1d:82:bc:45:0c:23:e4:50:1f:5d:91:cf:bb:2b: ed:c8:04:a1:33:1b:4a:6f:90:9b:a5:67:68:8e:f0: 1d:a6:7d:be:b2:7f:c9:2a:2d:29:f3:27:0b:dc:b8: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6B:26:46:9F:05:41:5C:C0:19:B3:3B:C1:4B:0D:02:73:3E:4D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:f00::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f3:81:e4:02:a9:fc:4f:cc:7e:25:ac:a0:d0:18:c8:a8:71: ad:87:76:b7:11:14:c3:29:07:21:ce:e8:12:c0:85:c7:bf:d9: 81:80:a4:15:06:dc:6d:aa:64:70:ac:33:c5:9c:fd:41:49:a4: 72:1b:13:2a:fa:1d:49:81:ec:70:98:d7:5a:b0:cb:94:31:96: 76:93:ac:af:9c:89:63:83:78:9f:5b:97:ae:e7:14:25:72:f5: e4:74:64:ba:ee:d2:43:15:1d:0c:11:1c:3e:95:18:68:c7:ff: 5d:7d:ab:39:d1:25:fa:aa:57:0f:dd:32:31:10:77:ec:dd:69: df:39:01:f2:03:6a:94:b1:90:7d:0c:f9:ea:eb:23:d6:f7:0b: d2:0a:5f:c2:14:e3:d1:cb:5f:ec:b2:8f:32:75:c7:d4:09:0e: b6:47:24:61:69:35:63:91:f3:c1:89:23:3a:36:44:85:a1:2f: f2:cb:61:70:93:c4:c3:ef:a5:d9:c6:f4:74:c8:74:7c:0a:02: c5:1a:57:2f:7a:23:05:4a:d5:ad:f5:94:03:c5:f0:8e:18:a3: 22:b3:77:cd:23:1d:10:9e:e2:d1:73:8c:7d:18:9b:4b:1a:c0: dc:09:67:92:ae:31:fd:b6:12:a1:8f:bc:06:85:98:55:9a:f6: 54:2e:ff:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxeT9vo0Mic2oyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZjFmNTk3Y2MtM2NlMC00MmI2LTk5OTAtY2Q1YjEyM2NjY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTBNW4R+poNpbcW8/fZVP5Mqrpb2LiRGgQwu fhtsH2L5dmFbdf5lgX1F0gRR3qjkFWNp644O4pZB3HpCWwaUSZBcs/spfZzaLf3U dXTwrLsqZgWyV+hPR+aqgcvE83kmlqYWZsUuIQxySyeoP1kWImw0k/EuTuZUKGuA d1oZUfgsfKtk28m6ARxHVJHZLi5LBnJkYT/mkL1pU3ytclEfZdM1KIKexJ4uwroe srluxGp/aA5T4/McoCcvD9PuMJbL7T3GAK69ZA+LaZs8P34jBDvcHYK8RQwj5FAf XZHPuyvtyAShMxtKb5CbpWdojvAdpn2+sn/JKi0p8ycL3LiMKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDlrJkafBUFcwBmzO8FLDQJzPk3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvOGY0NWU4ZDEtMjE0NS0z OTZhLThmYzEtODcwYzZhOTc2ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnzgeQCqfxPzH4lrKDQGMioca2HdrcRFMMpByHO6BLAhce/2YGA pBUG3G2qZHCsM8Wc/UFJpHIbEyr6HUmB7HCY11qwy5QxlnaTrK+ciWODeJ9bl67n FCVy9eR0ZLru0kMVHQwRHD6VGGjH/119qznRJfqqVw/dMjEQd+zdad85AfIDapSx kH0M+errI9b3C9IKX8IU49HLX+yyjzJ1x9QJDrZHJGFpNWOR88GJIzo2RIWhL/LL YXCTxMPvpdnG9HTIdHwKAsUaVy96IwVK1a31lAPF8I4YoyKzd80jHRCe4tFzjH0Y m0sawNwJZ5KuMf22EqGPvAaFmFWa9lQu/w0= -----END CERTIFICATE-----Generated at Fri Jul 11 05:06:38 2025 by rpki-client