$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa File: 40b301b2-4202-35c2-addc-14e70c78a526.roa (raw, json) Hash identifier: sMSMq6kE6VSXpslfrsvdZ9kIKNIrAExMKsd20YAtaf8= Subject key identifier: E5:87:BC:0B:50:79:B6:B2:F9:9D:A4:C6:AA:82:F5:DB:BA:53:44:30 Certificate issuer: /CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16 Certificate serial: 010D0C9F4328584A5CFB2B20BD324E6775DC9700 Authority key identifier: EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 397270 IP address blocks: 2602:fa9a::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2b:20:bd:32:4e:67:75:dc:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f99148d9-226d-4657-82d9-bb17e2b0cd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:d4:bc:e2:a2:1c:81:02:f0:1d:3d:82:cb: 00:70:fb:ba:fb:f2:3b:86:88:1e:4b:4f:d6:ac:fe: da:eb:d3:0e:2c:0d:06:84:1a:f4:5c:54:31:ee:9e: ff:2f:53:86:46:27:14:9d:91:0b:b5:ab:b5:92:bb: c6:45:ed:d5:b1:d2:5d:b7:55:b3:b9:27:93:79:db: 38:3c:9f:09:59:e5:90:e6:ce:09:0b:e9:ab:0b:bb: 4e:44:5d:b3:64:5d:dc:59:d0:85:8d:02:a9:02:97: d0:5a:07:21:d1:64:a5:20:54:29:8a:fb:af:db:23: b7:91:0c:ac:96:95:59:09:97:36:c0:bb:a0:1a:dc: 6b:f1:af:27:1c:c7:11:12:de:df:09:b7:10:3e:49: a5:f4:fc:f1:f9:d9:77:e4:f4:f2:59:38:c3:65:7a: bc:fe:e3:4a:cd:06:0e:7c:e3:05:a2:c0:a9:8b:15: 14:60:f5:fa:67:41:69:7d:2b:73:07:0b:52:99:c1: 81:4d:d9:08:0a:1c:a4:bf:95:36:46:6b:47:ae:ee: 5c:86:bf:53:e5:4e:94:00:c7:a9:f5:16:f5:01:5a: 42:35:d7:04:b5:d7:38:cb:8a:5f:70:a8:af:50:bb: 13:ab:aa:65:91:3b:57:06:30:1c:ba:5f:c2:0b:c8: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:BC:0B:50:79:B6:B2:F9:9D:A4:C6:AA:82:F5:DB:BA:53:44:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl X509v3 Authority Key Identifier: keyid:EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa9a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:87:7f:12:12:05:e9:f2:27:1c:11:d9:19:86:20:c4:1c:b9: 6f:e5:cc:3b:00:b1:32:49:c8:c6:b4:3d:48:a7:ec:39:f1:cc: e8:29:20:65:dc:4a:1f:56:d7:e4:02:57:1e:0b:1f:11:57:29: 52:e7:28:77:15:e0:22:3f:33:9a:10:e9:fa:3f:10:64:df:a1: 6a:ff:fb:7e:b7:3e:6f:3e:7a:87:d3:07:cb:ff:7f:15:b9:29: 9a:96:70:a9:8e:37:89:ef:91:24:89:86:25:d3:ef:00:b9:35: f1:d4:18:4c:a8:ca:ef:d8:91:fc:94:88:0c:e2:77:d1:5d:aa: b7:1f:d5:66:59:8f:45:0d:d3:08:ba:15:79:24:dc:74:8e:6c: ab:93:e6:2f:fa:e7:7d:45:e8:2a:61:7b:39:24:5d:c4:20:2d: 12:58:77:16:06:42:2e:44:c8:fe:48:85:b6:f0:f7:e4:63:13: 45:6a:6c:32:5f:20:cd:40:8d:3e:c3:d4:a0:5e:f5:49:ca:dd: 22:98:83:49:38:c3:a8:e0:08:1f:e2:4e:c7:07:6a:82:93:8e: 74:bc:d1:cd:65:46:fe:30:60:f2:d3:5a:57:c2:07:c0:b0:b4: b8:3f:73:46:74:62:a1:74:39:e7:f5:92:a4:9a:35:a5:6c:85: 11:9e:5d:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpc+ysgvTJOZ3XclwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJiMGYwZDYtMmNiOS00ODQ2LWJlOWYtNjZjZTZkYmYz YTE2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Zjk5MTQ4ZDktMjI2ZC00NjU3LTgyZDktYmIxN2UyYjBjZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxLUvOKiHIEC8B09gssAcPu6+/I7hogeS0/W rP7a69MOLA0GhBr0XFQx7p7/L1OGRicUnZELtau1krvGRe3VsdJdt1WzuSeTeds4 PJ8JWeWQ5s4JC+mrC7tORF2zZF3cWdCFjQKpApfQWgch0WSlIFQpivuv2yO3kQys lpVZCZc2wLugGtxr8a8nHMcREt7fCbcQPkml9Pzx+dl35PTyWTjDZXq8/uNKzQYO fOMFosCpixUUYPX6Z0FpfStzBwtSmcGBTdkIChykv5U2RmtHru5chr9T5U6UAMep 9Rb1AVpCNdcEtdc4y4pfcKivULsTq6plkTtXBjAcul/CC8hLTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOWHvAtQebay+Z2kxqqC9du6U0QwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYmIw ZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNlNmRiZjNhMTYvNDBiMzAxYjItNDIwMi0z NWMyLWFkZGMtMTRlNzBjNzhhNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmJiMGYwZDYtMmNiOS00ODQ2LWJl OWYtNjZjZTZkYmYzYTE2L2JiYjBmMGQ2LTJjYjktNDg0Ni1iZTlmLTY2Y2U2ZGJm M2ExNi5jcmwwHwYDVR0jBBgwFoAU7nA9QNo3HIRwdaFNmvyYc90Lj7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYmIwZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNl NmRiZjNhMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6mgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASYd/EhIF6fInHBHZGYYgxBy5b+XMOwCxMknIxrQ9SKfsOfHM6Ckg ZdxKH1bX5AJXHgsfEVcpUucodxXgIj8zmhDp+j8QZN+hav/7frc+bz56h9MHy/9/ FbkpmpZwqY43ie+RJImGJdPvALk18dQYTKjK79iR/JSIDOJ30V2qtx/VZlmPRQ3T CLoVeSTcdI5sq5PmL/rnfUXoKmF7OSRdxCAtElh3FgZCLkTI/kiFtvD35GMTRWps Ml8gzUCNPsPUoF71ScrdIpiDSTjDqOAIH+JOxwdqgpOOdLzRzWVG/jBg8tNaV8IH wLC0uD9zRnRioXQ55/WSpJo1pWyFEZ5dRg== -----END CERTIFICATE-----Generated at Fri Jul 11 04:35:38 2025 by rpki-client