$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa File: 83be0e98-52a8-373a-a887-5264943fc0d8.roa (raw, json) Hash identifier: sKg2pD4VVYF1kooNsPd+j0HXgpbapiaz5VH0IJTjMZ0= Subject key identifier: 67:BB:F7:CD:34:1F:75:A4:D1:BF:8B:0E:77:64:C6:E0:AA:5F:06:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1B6017AEA687B2CD4E630780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7342 IP address blocks: 2620:74:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:17:ae:a6:87:b2:cd:4e:63:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=beee026e-4bc9-4430-a015-0bc27e3e9574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:0c:32:96:54:23:d5:81:b8:92:fd:e6:85: af:05:e9:aa:41:9e:8b:69:5a:62:ed:35:7d:b2:1f: a7:63:b8:3a:e6:a4:c5:3a:57:26:f9:9c:ad:b1:d6: 7e:e9:c9:52:d3:dd:2a:c7:9d:3b:4c:44:e3:b9:23: 22:4b:32:28:6a:bd:51:cb:33:e7:c3:8e:89:fd:5f: 1a:d1:e8:f6:a2:98:99:08:f5:81:62:e9:97:7f:6f: cd:f3:be:9b:2e:a7:1d:32:18:95:a1:32:38:66:9a: 64:f4:7c:dd:91:28:64:36:01:8d:3b:fb:58:20:7e: e2:fa:72:e4:5c:f8:fe:b1:0f:a3:d9:df:63:e6:fd: 8a:82:44:04:f2:6d:82:aa:1a:17:0f:f7:b0:4c:06: 73:8e:4d:8b:54:cb:d3:47:28:dc:6e:c0:54:d5:92: 11:4b:d8:ea:49:96:fa:27:ce:13:a8:6b:d6:bc:40: c4:be:7c:54:61:ae:14:53:e3:7e:d5:f3:a7:bd:7f: a2:89:26:66:ca:a7:c5:d9:9e:0a:d5:ed:78:02:b2: e3:a4:71:4a:f0:97:23:92:b0:18:41:64:85:be:38: d7:7e:b7:0f:10:a2:0d:d5:71:85:a6:e3:9e:4b:32: d4:37:55:2b:f8:98:6b:54:56:a0:16:5b:c1:52:58: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:F7:CD:34:1F:75:A4:D1:BF:8B:0E:77:64:C6:E0:AA:5F:06:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:56:73:8c:82:72:4b:7d:51:cf:67:cc:c2:16:02:a4:eb:40: 97:fd:de:69:95:f9:ff:d9:3f:45:2c:7f:28:3d:40:96:cc:74: 6e:e8:ed:e2:4f:7b:42:bc:e2:2c:c2:c5:9c:44:4b:06:4a:79: 3a:f7:3c:a3:eb:fb:a7:81:86:04:02:0a:16:58:a4:c9:a8:40: 60:b2:69:97:3b:cd:63:65:69:d8:80:bb:84:f0:77:cb:ae:f6: 01:72:17:2a:52:30:40:1d:5a:b0:7f:6c:e2:c0:c5:5d:be:0c: 3a:ee:ca:93:8a:63:f2:89:1b:b4:a9:43:6a:40:97:b8:d1:40: 95:ce:af:78:15:dc:e5:8f:66:a7:55:c9:f1:38:8f:ba:7b:59: 91:d7:df:c3:bb:b3:38:25:7c:8b:be:9b:42:8d:dc:be:23:63: 7b:e6:f3:9f:cc:23:00:b9:1e:e9:c4:f6:00:11:06:ad:3a:bb: c9:27:49:6e:62:a2:90:37:9b:a5:b0:31:48:3a:91:5c:de:c2: 39:09:5c:a6:59:9d:c5:09:f3:6f:8c:df:7c:6a:77:a3:3a:23: 4f:39:4b:f3:02:b4:44:b9:5f:d9:30:c7:01:88:81:f2:1f:9e: 8c:36:f2:5f:16:04:a6:b1:f5:40:b6:cc:a8:3f:87:76:4a:08: 61:66:9f:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobYBeupoeyzU5jB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YmVlZTAyNmUtNGJjOS00NDMwLWEwMTUtMGJjMjdlM2U5NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6EMMpZUI9WBuJL95oWvBemqQZ6LaVpi7TV9 sh+nY7g65qTFOlcm+ZytsdZ+6clS090qx507TETjuSMiSzIoar1RyzPnw46J/V8a 0ej2opiZCPWBYumXf2/N876bLqcdMhiVoTI4Zppk9HzdkShkNgGNO/tYIH7i+nLk XPj+sQ+j2d9j5v2KgkQE8m2CqhoXD/ewTAZzjk2LVMvTRyjcbsBU1ZIRS9jqSZb6 J84TqGvWvEDEvnxUYa4UU+N+1fOnvX+iiSZmyqfF2Z4K1e14ArLjpHFK8JcjkrAY QWSFvjjXfrcPEKIN1XGFpuOeSzLUN1Ur+JhrVFagFlvBUlg4DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGe79800H3Wk0b+LDndkxuCqXwadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODNiZTBlOTgtNTJhOC0z NzNhLWE4ODctNTI2NDk0M2ZjMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpWc4yCckt9Uc9nzMIWAqTrQJf93mmV+f/ZP0Usfyg9QJbMdG7o 7eJPe0K84izCxZxESwZKeTr3PKPr+6eBhgQCChZYpMmoQGCyaZc7zWNladiAu4Tw d8uu9gFyFypSMEAdWrB/bOLAxV2+DDruypOKY/KJG7SpQ2pAl7jRQJXOr3gV3OWP ZqdVyfE4j7p7WZHX38O7szglfIu+m0KN3L4jY3vm85/MIwC5HunE9gARBq06u8kn SW5iopA3m6WwMUg6kVzewjkJXKZZncUJ82+M33xqd6M6I085S/MCtES5X9kwxwGI gfIfnow28l8WBKax9UC2zKg/h3ZKCGFmn9U= -----END CERTIFICATE-----Generated at Mon Jun 30 21:06:22 2025 by rpki-client