$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa File: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (raw, json) Hash identifier: uhA+fU2e310luZicPaPiECoeUMh+c3bq0HOrMrRnZQY= Subject key identifier: 28:DB:83:6D:29:73:4A:BD:73:A3:44:3D:FD:48:A0:B8:5C:2C:F3:CF Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584A15CA91977B5B2F199CCB67A0 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 400792 IP address blocks: 2602:f75b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:91:97:7b:5b:2f:19:9c:cb:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=9e4be645-49e4-4daa-9a1d-25ad75576b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:17:55:26:55:e1:08:2a:45:0f:b7:a4:92: ac:f8:a8:10:50:5a:2b:01:7a:58:e6:39:f2:64:30: 03:90:15:11:45:56:65:43:33:c9:c8:e5:ec:4a:0a: c6:d3:3d:e6:02:f1:20:1d:f1:32:77:09:b5:cc:c9: 38:f1:82:40:35:03:41:85:ac:af:8b:97:85:fd:2a: 9b:51:f5:bd:88:77:91:57:d0:61:b0:81:ba:fc:31: da:50:83:50:0e:75:52:7d:cd:69:fa:2a:3c:2b:99: 5f:5d:91:18:1d:73:69:76:a7:89:ec:c9:2c:26:01: 4f:50:52:4a:3c:a8:1b:0b:1c:eb:9d:e8:47:ea:00: 36:59:1f:02:53:86:ce:d4:8a:83:b6:5f:a0:98:99: 1c:66:8b:73:38:0f:7f:f4:b6:32:b1:77:e8:87:c4: b1:a4:4d:41:d8:fc:77:3f:a3:ac:4a:8a:47:5d:9e: ae:b6:40:8d:58:fc:4a:da:13:d4:e8:87:2a:25:87: 68:0c:ff:10:79:3e:3b:07:74:22:64:9f:dd:b5:92: 60:0e:f7:15:3a:db:78:a5:2e:7f:d3:58:83:bf:cd: c7:0f:50:de:f4:c7:7a:c3:45:0a:f6:b7:1c:0d:84: 95:f4:6b:eb:03:a2:0f:d7:41:29:28:d5:c2:d8:5b: 43:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:83:6D:29:73:4A:BD:73:A3:44:3D:FD:48:A0:B8:5C:2C:F3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f75b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:aa:6b:9b:bb:7e:96:c8:76:e2:66:32:46:4b:40:95:1c:dc: eb:90:6d:42:c7:7c:96:69:a2:7c:8d:66:fe:18:4f:fc:01:1f: fe:9c:5f:d6:b5:3c:a4:bf:cb:03:29:71:2a:8d:03:44:3d:70: 0e:97:c4:5e:02:48:b4:08:be:ed:a3:81:90:34:19:6c:b9:95: a2:fc:c1:d8:de:1a:1c:5d:e9:4f:ca:d2:66:2e:f0:3c:46:e6: 8f:a3:59:5d:b8:5d:de:17:7f:91:22:37:66:4a:9d:ee:89:a3: 90:5b:c5:03:15:a1:8c:06:21:d1:fe:fe:41:5d:21:7d:25:c1: 1c:c9:aa:d7:7c:81:15:aa:0c:83:f1:b2:58:52:09:f4:91:20: fa:33:c7:c3:e3:32:a2:fe:06:e9:3b:54:5d:d6:20:1e:19:a4: e3:49:74:fe:cf:67:20:57:d4:00:e2:c2:ef:1f:bb:1e:e9:d8: ea:5c:60:eb:a6:73:9d:a3:09:d0:8c:1f:ad:68:49:17:66:63: 58:02:12:83:0f:36:e5:7f:3a:2e:a1:85:69:6c:73:40:05:b2: 36:8a:64:5e:6a:2e:9e:3d:45:87:18:a5:34:ae:c8:5c:d3:f6: dd:c7:f5:94:74:ce:49:b4:f3:4c:48:8d:45:c2:1b:c9:71:11: e7:d5:93:55 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoVypGXe1svGZzLZ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk OWU0YmU2NDUtNDllNC00ZGFhLTlhMWQtMjVhZDc1NTc2YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1YXVSZV4QgqRQ+3pJKs+KgQUForAXpY5jny ZDADkBURRVZlQzPJyOXsSgrG0z3mAvEgHfEydwm1zMk48YJANQNBhayvi5eF/Sqb UfW9iHeRV9BhsIG6/DHaUINQDnVSfc1p+io8K5lfXZEYHXNpdqeJ7MksJgFPUFJK PKgbCxzrnehH6gA2WR8CU4bO1IqDtl+gmJkcZotzOA9/9LYysXfoh8SxpE1B2Px3 P6OsSopHXZ6utkCNWPxK2hPU6IcqJYdoDP8QeT47B3QiZJ/dtZJgDvcVOtt4pS5/ 01iDv83HD1De9Md6w0UK9rccDYSV9GvrA6IP10EpKNXC2FtDQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCjbg20pc0q9c6NEPf1IoLhcLPPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvNDMwNGQ2YjAtNGY2MS0z MGM5LWEwZWYtZTNlODNlOTRlNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3WwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcaprm7t+lsh24mYyRktAlRzc65BtQsd8lmmifI1m/hhP/AEf/pxf 1rU8pL/LAylxKo0DRD1wDpfEXgJItAi+7aOBkDQZbLmVovzB2N4aHF3pT8rSZi7w PEbmj6NZXbhd3hd/kSI3Zkqd7omjkFvFAxWhjAYh0f7+QV0hfSXBHMmq13yBFaoM g/GyWFIJ9JEg+jPHw+Myov4G6TtUXdYgHhmk40l0/s9nIFfUAOLC7x+7HunY6lxg 66ZznaMJ0IwfrWhJF2ZjWAISgw825X86LqGFaWxzQAWyNopkXmounj1FhxilNK7I XNP23cf1lHTOSbTzTEiNRcIbyXER59WTVQ== -----END CERTIFICATE-----Generated at Mon Jun 9 06:01:08 2025 by rpki-client