$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa File: 08476c72-3790-334e-8fc6-321bea573259.roa (raw, json) Hash identifier: ah5gJdcHqB0TGAzDKljgUSfNA3nVLGP88Ocbq0N7oF8= Subject key identifier: FB:A9:9C:60:67:49:E8:FC:22:14:C3:C7:33:60:3D:2E:30:A3:6C:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201EC43C94ED203F539440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:c4:3c:94:ed:20:3f:53:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=1b8dad69-6dd1-4c8d-9803-01b7e3e8de74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:e1:59:49:e4:d1:0c:5a:ae:c5:c6:dc:44: f2:c7:b9:9c:f8:39:6c:21:45:21:98:6f:1e:23:66: ba:e2:15:c6:12:ba:86:40:bc:28:dc:0f:16:cd:4a: 19:d5:85:41:b8:9d:bf:23:93:0e:a2:ce:89:f0:fd: ba:89:b5:9d:a9:1e:97:9e:bc:fa:06:45:b6:3a:82: ce:b4:33:d1:17:6f:b3:65:f7:f1:dd:01:74:cf:cf: 2e:b0:c2:9c:05:d3:53:43:99:bc:fd:10:88:a7:54: 08:3d:3a:58:d1:b3:4f:ab:de:05:e7:5e:bf:38:e3: 15:3b:76:99:a9:be:28:ec:1f:dc:3a:c6:c8:c5:8c: 1c:4f:15:cc:53:f5:f1:98:7d:c5:04:a2:15:2e:f3: 24:d5:32:29:a2:01:1b:8d:8d:88:c6:09:d1:d4:ed: fc:6e:53:d2:3b:3c:c7:67:c1:ce:12:65:36:75:64: 6d:65:c7:73:63:10:2a:57:ff:ff:b2:d2:c5:88:a6: 70:08:c8:71:25:87:9b:08:63:0d:0b:95:61:8a:fa: a7:a9:8e:35:c5:f3:06:f3:a5:26:3a:3f:47:03:53: f7:fc:16:08:a3:e6:a8:33:10:79:ce:b3:1d:dc:5f: 58:60:e0:13:d2:26:00:54:bd:fc:5e:78:64:0c:14: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:9C:60:67:49:E8:FC:22:14:C3:C7:33:60:3D:2E:30:A3:6C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f7:a0:19:e1:ef:19:43:c3:d7:fe:6e:5c:67:c5:1b:2e:c1: f4:94:3b:84:03:5a:44:ce:14:0d:5e:fa:f5:68:45:b0:22:36: b4:15:c1:bf:0f:fe:60:62:01:5c:7a:54:e8:7c:32:5f:68:89: bd:e9:ad:b9:9c:2f:79:ac:e1:00:4a:7b:57:74:ad:15:3d:2f: 91:2f:03:08:c1:f1:17:27:0d:d2:4a:12:dd:d8:ec:96:4b:98: c7:84:da:5a:f1:fc:b7:35:a9:d7:19:41:26:aa:27:27:af:36: 33:fe:87:d3:22:56:71:ea:39:c9:4a:4e:17:b0:8e:40:1c:ae: 4f:fd:96:13:78:bb:57:bb:d5:86:24:50:39:44:53:a0:c7:bc: 44:01:db:b7:78:bd:99:54:64:dc:dc:cc:ae:1f:84:53:6c:1d: e7:57:80:96:37:fb:50:e1:61:2e:fc:ba:6d:15:32:4c:5f:48: 80:88:b7:bb:22:11:3c:52:8e:6b:37:93:c6:85:bf:75:ba:a7: f1:81:76:e8:51:8c:f9:76:02:ea:c5:a5:88:f7:6c:50:ed:98: 3d:e1:c5:e7:4e:a7:7e:b9:ad:83:14:fc:18:55:e5:a1:fb:a7: 97:78:3f:bf:59:56:74:84:3e:17:7b:4a:ce:35:cf:b5:cf:bc: 7e:cd:70:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB7EPJTtID9TlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MWI4ZGFkNjktNmRkMS00YzhkLTk4MDMtMDFiN2UzZThkZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfhWUnk0QxarsXG3ETyx7mc+DlsIUUhmG8e I2a64hXGErqGQLwo3A8WzUoZ1YVBuJ2/I5MOos6J8P26ibWdqR6Xnrz6BkW2OoLO tDPRF2+zZffx3QF0z88usMKcBdNTQ5m8/RCIp1QIPTpY0bNPq94F516/OOMVO3aZ qb4o7B/cOsbIxYwcTxXMU/XxmH3FBKIVLvMk1TIpogEbjY2IxgnR1O38blPSOzzH Z8HOEmU2dWRtZcdzYxAqV///stLFiKZwCMhxJYebCGMNC5VhivqnqY41xfMG86Um Oj9HA1P3/BYIo+aoMxB5zrMd3F9YYOAT0iYAVL38XnhkDBRgswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPupnGBnSej8IhTDxzNgPS4wo2wcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg0NzZjNzItMzc5MC0z MzRlLThmYzYtMzIxYmVhNTczMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB73oBnh7xlDw9f+blxnxRsuwfSUO4QDWkTOFA1e+vVoRbAiNrQV wb8P/mBiAVx6VOh8Ml9oib3prbmcL3ms4QBKe1d0rRU9L5EvAwjB8RcnDdJKEt3Y 7JZLmMeE2lrx/Lc1qdcZQSaqJyevNjP+h9MiVnHqOclKThewjkAcrk/9lhN4u1e7 1YYkUDlEU6DHvEQB27d4vZlUZNzczK4fhFNsHedXgJY3+1DhYS78um0VMkxfSICI t7siETxSjms3k8aFv3W6p/GBduhRjPl2AurFpYj3bFDtmD3hxedOp365rYMU/BhV 5aH7p5d4P79ZVnSEPhd7Ss41z7XPvH7NcNA= -----END CERTIFICATE-----Generated at Tue Jul 1 04:08:35 2025 by rpki-client