$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa File: 04c65629-73ec-3cbf-acdc-7545f7023802.roa (raw, json) Hash identifier: GPaRSFR4G9gtWOaFGAEG/R0tc86s17x+Eb6dSGVivZ0= Subject key identifier: 40:4C:38:20:17:8B:C7:BD:72:21:B4:EE:48:9C:99:1C:3E:C0:DB:04 Certificate issuer: /CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Certificate serial: 010D0C9F4328584A53359EBBB082B201A7885B80 Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 2607:b40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9e:bb:b0:82:b2:01:a7:88:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=d416105d-8f34-40e9-822b-2bfacb6a0cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:f6:d9:39:af:ff:2b:5f:78:f2:07:ec:7d: ae:85:43:58:f8:4a:4e:7f:d0:2d:fb:78:42:52:e0: 0f:37:e9:c8:57:5f:3a:81:60:f1:0e:b1:fe:e9:09: 2b:9d:3b:cf:21:6f:ed:23:27:2b:cf:cb:bf:6e:58: 5b:c2:cf:86:7f:82:c6:d0:81:29:d7:bf:2f:b4:3d: 6d:76:16:28:83:50:62:ca:ec:d1:bc:89:22:f0:f1: 11:76:47:36:02:c2:06:21:a4:31:b7:b1:82:ba:eb: b8:77:9b:64:7f:7c:79:ff:3c:0d:23:20:3b:f6:a6: 7c:c3:fe:db:8d:68:da:58:af:33:ee:35:3e:54:3a: b7:07:3c:71:d8:63:00:8c:99:17:e8:99:0c:f5:60: 4f:c1:d0:69:f8:44:48:6b:64:20:c7:03:28:6e:9b: d5:c4:97:0d:f0:9a:db:ed:25:24:f9:aa:99:52:f1: e3:fe:8c:c6:8a:2a:62:6f:c2:2a:8a:d6:96:7a:eb: 30:56:a4:7c:7d:47:f6:7a:13:fb:cd:c4:0d:81:a4: b8:6d:82:d8:b7:25:ba:8d:0e:01:df:5e:f5:ef:06: 35:38:5e:e1:e3:22:2a:42:e6:96:96:74:20:e3:59: 57:3b:e9:06:52:f9:c4:7f:1f:05:90:ac:b2:1b:d0: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4C:38:20:17:8B:C7:BD:72:21:B4:EE:48:9C:99:1C:3E:C0:DB:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl X509v3 Authority Key Identifier: keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer sbgp-ipAddrBlock: critical IPv6: 2607:b40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b3:47:da:00:cf:17:66:d8:cf:7e:cd:ce:3c:83:83:a2:df: a5:41:e7:1d:4f:4a:68:a8:68:4c:0b:0b:25:01:1f:9b:34:d9: 36:23:c6:a6:1a:2e:f2:a0:c5:81:a4:5d:17:cb:98:f1:59:05: e2:f7:36:aa:63:91:a3:b6:90:c7:54:01:b4:03:ed:b6:b9:4a: ea:61:89:3d:f3:a6:6c:f7:f4:35:b0:97:10:f2:58:ac:83:76: f6:a2:7f:dc:3c:60:07:c3:8e:73:db:44:42:9a:84:70:2b:76: 9c:bd:22:a5:c8:ad:0b:1a:89:04:43:c9:65:45:cb:39:44:51: 7c:87:21:b2:98:5e:3e:1f:fe:1a:f1:95:30:7c:40:d0:47:4f: 09:e0:5f:84:e5:a2:82:a0:6b:64:90:71:f7:37:54:41:19:11: 86:c6:52:cf:d3:bc:10:f7:f5:9b:d8:65:bf:02:89:57:40:3e: 16:a4:55:a6:b8:61:c3:87:4a:bc:3f:52:ad:70:1f:7f:ef:d0: b9:30:7d:a7:06:da:be:a7:8a:da:6f:6c:16:fa:44:1f:b7:14: a1:51:47:8b:c1:5d:2f:ef:79:65:98:c5:9b:18:8e:3f:97:fd: b8:5f:3d:c3:2c:2f:4b:1c:ca:6b:7f:39:1a:8c:99:38:4c:cf: ea:61:57:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpTNZ67sIKyAaeIW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjYTdiNDUtODNlMS00YTFjLTg3MTMtMzE3YWRlYTBl MjcwMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZDQxNjEwNWQtOGYzNC00MGU5LTgyMmItMmJmYWNiNmEwY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRL22Tmv/ytfePIH7H2uhUNY+EpOf9At+3hC UuAPN+nIV186gWDxDrH+6QkrnTvPIW/tIycrz8u/blhbws+Gf4LG0IEp178vtD1t dhYog1BiyuzRvIki8PERdkc2AsIGIaQxt7GCuuu4d5tkf3x5/zwNIyA79qZ8w/7b jWjaWK8z7jU+VDq3Bzxx2GMAjJkX6JkM9WBPwdBp+ERIa2QgxwMobpvVxJcN8Jrb 7SUk+aqZUvHj/ozGiipib8IqitaWeuswVqR8fUf2ehP7zcQNgaS4bYLYtyW6jQ4B 31717wY1OF7h4yIqQuaWlnQg41lXO+kGUvnEfx8FkKyyG9AfoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBMOCAXi8e9ciG07kicmRw+wNsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xN2Nh N2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVhMGUyNzAvMDRjNjU2MjktNzNlYy0z Y2JmLWFjZGMtNzU0NWY3MDIzODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTdjYTdiNDUtODNlMS00YTFjLTg3 MTMtMzE3YWRlYTBlMjcwLzE3Y2E3YjQ1LTgzZTEtNGExYy04NzEzLTMxN2FkZWEw ZTI3MC5jcmwwHwYDVR0jBBgwFoAUXaYc3mxg/ha1PG9fmN+RwddkQOUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xN2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdh ZGVhMGUyNzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcLQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAmzR9oAzxdm2M9+zc48g4Oi36VB5x1PSmioaEwLCyUBH5s02TYj xqYaLvKgxYGkXRfLmPFZBeL3NqpjkaO2kMdUAbQD7ba5SuphiT3zpmz39DWwlxDy WKyDdvaif9w8YAfDjnPbREKahHArdpy9IqXIrQsaiQRDyWVFyzlEUXyHIbKYXj4f /hrxlTB8QNBHTwngX4TlooKga2SQcfc3VEEZEYbGUs/TvBD39ZvYZb8CiVdAPhak Vaa4YcOHSrw/Uq1wH3/v0LkwfacG2r6nitpvbBb6RB+3FKFRR4vBXS/veWWYxZsY jj+X/bhfPcMsL0scymt/ORqMmThMz+phV9g= -----END CERTIFICATE-----Generated at Tue Jul 1 20:18:04 2025 by rpki-client