$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa File: a8721daf-d2d4-3712-8748-5f5af775bc52.roa (raw, json) Hash identifier: qOZrSUlZypOuCb3f88f5EmznXx7Sq3egVjhtG3n6+kU= Subject key identifier: 02:54:B3:36:EE:8D:8E:A8:1A:A8:35:84:0E:1C:AB:7B:62:21:39:DA Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584A66C073066D508C3BC928EA00 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 2602:277:d0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:73:06:6d:50:8c:3b:c9:28:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=cf240cc6-c29d-47b1-adcc-1b9d7cfbe668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:b8:cd:a6:08:2a:68:c1:04:0a:a2:a8:4e: 54:81:c3:49:42:c0:ea:dd:12:f4:f1:6b:66:14:8b: 8e:e2:1d:d5:7d:f7:d9:32:73:60:1b:80:dc:35:e0: e4:b8:79:87:d2:8b:f5:31:45:f7:99:c5:4f:1c:ea: aa:5b:60:ec:80:9a:5e:ad:f3:dd:44:da:1b:c0:1d: 8b:e9:e9:32:6c:e8:a3:cf:80:4a:96:d8:6d:f5:de: a7:5c:f9:74:31:cf:02:70:4a:00:75:0f:d3:2c:ae: 2b:0c:4e:f4:ee:15:38:f7:09:42:7f:92:90:21:6f: d3:9a:23:d0:6b:7c:c6:55:61:1f:91:a7:bb:95:e5: 38:8c:57:c3:6e:3f:66:44:a3:bf:29:4e:40:06:fc: 2e:c7:15:18:87:cd:d1:38:3b:81:b1:9a:b1:4c:42: 8d:b4:01:ff:66:26:97:a7:83:33:ff:10:57:07:c6: 71:e7:3c:13:00:c1:3b:64:a2:a9:77:7d:63:7f:f6: 6c:15:90:d1:11:30:f0:85:34:ea:fd:72:98:52:7a: 5a:74:20:0c:fc:6f:c6:b0:74:bb:c1:7d:e6:ff:d9: 15:54:f5:03:21:f1:62:eb:0f:f1:7d:93:4e:68:b9: 23:1e:97:08:a0:c1:79:cd:0e:36:35:3b:b0:ec:e0: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:54:B3:36:EE:8D:8E:A8:1A:A8:35:84:0E:1C:AB:7B:62:21:39:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e6:5a:b6:86:68:75:4b:eb:ac:5c:9b:ce:2b:97:b5:ad:68: 8b:c6:52:bd:1a:25:60:1d:ed:5f:e5:81:b1:24:e6:10:3f:4e: 1e:61:63:27:6c:48:dc:7a:bc:40:43:8b:64:a6:74:4a:9d:c9: 8c:22:48:f6:42:af:7b:d2:f8:d1:b6:ea:bb:d8:e5:9e:31:4f: ec:5a:30:67:c2:bb:1f:5e:7d:c0:fa:d6:a9:ed:ff:92:6a:a3: 14:2a:bb:68:69:9b:7f:93:c6:ef:a8:d5:bd:35:de:a9:18:82: 72:9e:50:03:7e:56:52:97:3b:4f:5a:b2:70:b5:7a:96:09:be: 56:63:ec:66:44:69:14:5f:5e:72:2f:f3:32:53:09:10:5e:18: bd:21:2d:a2:af:11:08:f0:b9:ef:60:48:3e:b4:23:a9:ef:ca: dc:0c:0c:63:41:1e:a7:7b:8f:66:41:fe:bb:43:a4:4f:b0:ab: 68:4d:6a:3e:b5:04:94:56:a5:01:78:13:e2:46:24:fc:9e:4b: b7:f3:1a:f0:38:e3:65:11:54:7d:d9:7b:8f:45:b8:42:c7:a0: 3f:90:04:fc:3b:53:33:f3:4b:92:1f:5f:ff:74:8b:0b:94:30: 61:ce:27:2d:20:c4:c7:72:4d:62:f3:bb:dd:34:8d:81:ac:7f: f3:41:89:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpmwHMGbVCMO8ko6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk Y2YyNDBjYzYtYzI5ZC00N2IxLWFkY2MtMWI5ZDdjZmJlNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EO4zaYIKmjBBAqiqE5UgcNJQsDq3RL08Wtm FIuO4h3VfffZMnNgG4DcNeDkuHmH0ov1MUX3mcVPHOqqW2DsgJperfPdRNobwB2L 6ekybOijz4BKltht9d6nXPl0Mc8CcEoAdQ/TLK4rDE707hU49wlCf5KQIW/TmiPQ a3zGVWEfkae7leU4jFfDbj9mRKO/KU5ABvwuxxUYh83RODuBsZqxTEKNtAH/ZiaX p4Mz/xBXB8Zx5zwTAME7ZKKpd31jf/ZsFZDRETDwhTTq/XKYUnpadCAM/G/GsHS7 wX3m/9kVVPUDIfFi6w/xfZNOaLkjHpcIoMF5zQ42NTuw7ODulQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJUszbujY6oGqg1hA4cq3tiITnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvYTg3MjFkYWYtZDJkNC0z NzEyLTg3NDgtNWY1YWY3NzViYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwDQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvmWraGaHVL66xcm84rl7WtaIvGUr0aJWAd7V/lgbEk5hA/Th5h YydsSNx6vEBDi2SmdEqdyYwiSPZCr3vS+NG26rvY5Z4xT+xaMGfCux9efcD61qnt /5JqoxQqu2hpm3+Txu+o1b013qkYgnKeUAN+VlKXO09asnC1epYJvlZj7GZEaRRf XnIv8zJTCRBeGL0hLaKvEQjwue9gSD60I6nvytwMDGNBHqd7j2ZB/rtDpE+wq2hN aj61BJRWpQF4E+JGJPyeS7fzGvA442URVH3Ze49FuELHoD+QBPw7UzPzS5IfX/90 iwuUMGHOJy0gxMdyTWLzu900jYGsf/NBiVQ= -----END CERTIFICATE-----Generated at Fri Jul 11 05:15:11 2025 by rpki-client