$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa File: 5a332d9b-62ef-39aa-909f-d101b26e69f6.roa (raw, json) Hash identifier: E1T2lhCuZIQgmlS8HaQEzLH0zpNDY8brNhfnRZGeWS8= Subject key identifier: 5A:6F:67:4D:0C:F4:26:61:92:10:21:AD:5A:59:64:8F:24:74:ED:8A Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584A18954C67E5D7B06F4C985660 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 46824 IP address blocks: 2602:faa9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4c:67:e5:d7:b0:6f:4c:98:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=f577cf45-9e5c-4e1d-bced-1ebd3d7145f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:2d:cd:d1:25:98:3a:57:45:91:7c:99:3e: 36:de:76:80:8d:6e:c7:08:81:7a:5d:50:b0:45:d6: ac:b0:e9:66:7e:ea:a9:b5:da:c3:0c:6a:9c:fe:3f: 80:03:35:ea:31:44:99:fb:5a:59:61:eb:79:e7:ee: 3a:af:c3:94:3c:62:5f:d1:a2:c0:08:36:05:d1:ff: fb:46:6e:fe:ee:09:6a:09:b0:2a:29:27:e1:c5:92: d1:04:7a:30:22:db:ef:8b:4b:93:1e:78:ac:42:38: 9a:16:40:ef:c9:b0:67:1b:b5:d7:f3:17:35:8b:b2: 22:c5:36:ed:9e:9d:70:a5:5f:97:e1:13:5c:25:28: b0:8a:79:f5:1c:ad:3e:e7:3f:bd:3a:df:06:92:3f: a7:a4:56:c7:03:f7:9b:a2:e1:a1:65:23:ab:5b:d1: cc:f2:fb:d7:87:20:77:45:dd:55:23:e0:0e:a0:7d: da:70:88:10:6a:c5:c9:1e:0b:cd:77:74:6f:5a:2a: 10:22:27:4c:ac:32:d2:b2:92:33:1a:5d:da:d9:40: 53:6e:8f:c2:ce:de:b0:7e:fe:9e:02:ae:86:8a:1c: 00:0d:6b:0d:47:58:71:1d:88:28:61:7b:a9:19:7b: 80:1f:55:c6:3e:37:3c:bd:60:3d:41:90:84:de:4c: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:67:4D:0C:F4:26:61:92:10:21:AD:5A:59:64:8F:24:74:ED:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f5:c0:2c:89:42:f1:e7:ec:df:88:08:00:8c:86:7f:0c:77: 23:92:cc:d8:f2:09:01:22:e2:2a:bb:ca:72:39:cb:52:ce:eb: 03:c8:d4:09:91:c1:e4:3d:33:50:a5:b5:d5:25:25:82:08:bc: f6:71:5d:cb:72:c5:32:bc:b5:93:04:aa:81:41:e6:18:67:5b: 26:8d:32:97:08:37:c5:54:6e:a7:54:bf:e9:91:94:f0:5e:35: e7:c8:48:67:5a:65:aa:16:92:df:73:90:cb:ce:52:9c:d7:44: c6:9e:db:4a:ce:b3:a8:d6:66:71:14:2c:bf:29:17:fd:4a:68: 76:05:84:61:e1:0d:21:a0:7c:05:a5:9a:94:b4:8c:01:9c:6e: 27:ff:ff:f2:25:98:57:9d:37:da:65:ea:d1:20:dd:b3:ad:b7: 0a:64:f5:56:93:25:d3:cf:1a:15:fa:c7:4a:0a:18:ef:5f:02: 19:e9:23:dc:35:07:ad:d1:1d:9e:ff:5f:5d:75:d7:49:32:70: 76:9c:50:62:24:46:39:28:af:da:1c:0f:fd:92:75:e3:56:62: 12:d5:5c:5a:45:20:85:89:9d:86:1f:0b:04:3a:f8:65:dc:ff: d0:f3:28:96:90:97:da:22:1a:06:3d:66:62:d6:a4:cc:2e:1f: 16:09:9a:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoYlUxn5dewb0yYVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk ZjU3N2NmNDUtOWU1Yy00ZTFkLWJjZWQtMWViZDNkNzE0NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T4tzdElmDpXRZF8mT423naAjW7HCIF6XVCw RdassOlmfuqptdrDDGqc/j+AAzXqMUSZ+1pZYet55+46r8OUPGJf0aLACDYF0f/7 Rm7+7glqCbAqKSfhxZLRBHowItvvi0uTHnisQjiaFkDvybBnG7XX8xc1i7IixTbt np1wpV+X4RNcJSiwinn1HK0+5z+9Ot8Gkj+npFbHA/ebouGhZSOrW9HM8vvXhyB3 Rd1VI+AOoH3acIgQasXJHgvNd3RvWioQIidMrDLSspIzGl3a2UBTbo/Czt6wfv6e Aq6GihwADWsNR1hxHYgoYXupGXuAH1XGPjc8vWA9QZCE3kxE5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFpvZ00M9CZhkhAhrVpZZI8kdO2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNWEzMzJkOWItNjJlZi0z OWFhLTkwOWYtZDEwMWIyNmU2OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBF9cAsiULx5+zfiAgAjIZ/DHcjkszY8gkBIuIqu8pyOctSzusDyNQJ kcHkPTNQpbXVJSWCCLz2cV3LcsUyvLWTBKqBQeYYZ1smjTKXCDfFVG6nVL/pkZTw XjXnyEhnWmWqFpLfc5DLzlKc10TGnttKzrOo1mZxFCy/KRf9Smh2BYRh4Q0hoHwF pZqUtIwBnG4n///yJZhXnTfaZerRIN2zrbcKZPVWkyXTzxoV+sdKChjvXwIZ6SPc NQet0R2e/19ddddJMnB2nFBiJEY5KK/aHA/9knXjVmIS1VxaRSCFiZ2GHwsEOvhl 3P/Q8yiWkJfaIhoGPWZi1qTMLh8WCZpC -----END CERTIFICATE-----Generated at Sun Jun 8 04:13:04 2025 by rpki-client