$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json) Hash identifier: srg/d2oKYeFoQ9NLx+K7IM+PcQhgChkZ9RsQUa80q7U= Subject key identifier: 1A:CD:79:5B:90:50:85:24:09:0F:B1:50:C3:7E:05:A9:36:9F:91:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E810128CA3A7F05DF10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:81:01:28:ca:3a:7f:05:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=fa6db511-1cff-4915-bf1f-5c00eae9b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:d6:ce:82:17:35:1b:cd:6d:87:83:8e:00: 01:d9:62:81:5b:d0:1f:2d:00:37:b7:49:c7:8a:d7: 11:5b:52:79:40:32:49:cb:8a:1a:6d:16:b3:70:81: c6:c3:9a:78:c8:a0:5f:fe:eb:af:a3:22:ab:10:e6: af:e7:7e:38:51:18:08:19:c2:65:c9:f3:e0:ef:4b: 53:35:88:20:23:bd:15:cb:a5:6a:53:8f:b8:fc:1d: 5a:cb:92:2f:89:97:13:31:ee:e8:a7:c7:40:87:a0: 7c:ab:5f:bc:cf:80:ee:a6:aa:34:65:38:be:d5:7a: ce:be:cb:bd:04:ba:f4:23:90:d5:ec:55:0c:f9:7f: 57:7c:5f:39:ce:ce:cb:94:c0:83:ec:b8:f7:8b:8e: b5:05:b9:c6:ee:43:b7:21:90:45:c7:c7:dd:47:e6: 05:4b:d4:4e:e6:ca:38:06:0f:a8:8d:23:30:12:34: 34:6b:37:76:23:f5:43:65:02:3f:d6:02:91:d7:e5: 7d:0e:71:2d:0b:0d:f9:80:b6:3d:4b:32:d8:c2:1e: 86:71:3d:d7:b3:77:2f:c7:1e:98:12:a8:f5:6f:48: 85:75:d3:57:71:b5:90:d5:60:e8:4a:4a:60:1a:15: f9:94:71:19:21:2e:a9:3e:9b:ac:36:5d:dd:b7:94: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:79:5B:90:50:85:24:09:0F:B1:50:C3:7E:05:A9:36:9F:91:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:42:37:ed:1d:b9:78:36:90:ed:e3:d0:dd:f9:a7:b4:b0:26: eb:15:a5:71:c8:80:90:6c:89:d5:a9:e6:6d:46:8e:5f:8f:af: 5f:88:15:9c:62:4a:be:4a:11:d4:f5:7c:f7:4d:af:3a:f6:8b: 4d:35:64:84:8c:f6:f0:41:3f:cb:37:fb:37:bc:93:a8:49:ac: dd:b2:8f:aa:f6:16:3f:da:c5:6f:9f:ae:99:01:f3:19:75:cd: 97:72:03:b4:83:54:b8:b6:a8:9a:63:76:01:9d:5a:bb:4e:74: aa:f6:b4:65:54:54:1d:af:19:74:24:3b:25:d5:25:69:80:31: 72:bb:df:cb:9e:f2:b1:d1:5a:54:0a:37:3e:88:64:12:83:ce: 40:5a:72:a8:07:b4:a9:f1:00:f7:31:38:ae:37:5e:71:af:71: ea:e3:db:14:95:2b:db:8b:a0:ad:df:d2:16:9f:28:4b:d0:ce: f6:be:5f:cd:41:0f:a0:7c:c5:0b:5a:94:22:9a:64:52:fe:60: db:74:8e:91:59:01:b4:d0:40:67:92:48:03:a1:43:9a:23:3e: 15:a5:5a:50:b0:df:05:0c:7f:13:6b:bd:8e:47:f0:65:fc:5b: e2:6f:4c:6d:0c:c4:f7:40:70:27:fe:7b:53:ee:32:3f:be:ef: 8b:ca:03:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB6BASjKOn8F3xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZmE2ZGI1MTEtMWNmZi00OTE1LWJmMWYtNWMwMGVhZTliNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyrWzoIXNRvNbYeDjgAB2WKBW9AfLQA3t0nH itcRW1J5QDJJy4oabRazcIHGw5p4yKBf/uuvoyKrEOav5344URgIGcJlyfPg70tT NYggI70Vy6VqU4+4/B1ay5IviZcTMe7op8dAh6B8q1+8z4Dupqo0ZTi+1XrOvsu9 BLr0I5DV7FUM+X9XfF85zs7LlMCD7Lj3i461BbnG7kO3IZBFx8fdR+YFS9RO5so4 Bg+ojSMwEjQ0azd2I/VDZQI/1gKR1+V9DnEtCw35gLY9SzLYwh6GcT3Xs3cvxx6Y Eqj1b0iFddNXcbWQ1WDoSkpgGhX5lHEZIS6pPpusNl3dt5TifwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrNeVuQUIUkCQ+xUMN+Bak2n5GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlN2VjODAtZWY2Mi0z MTg3LWJkZDMtNTJkMTI2YTQzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdACw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVCN+0duXg2kO3j0N35p7SwJusVpXHIgJBsidWp5m1Gjl+Pr1+I FZxiSr5KEdT1fPdNrzr2i001ZISM9vBBP8s3+ze8k6hJrN2yj6r2Fj/axW+frpkB 8xl1zZdyA7SDVLi2qJpjdgGdWrtOdKr2tGVUVB2vGXQkOyXVJWmAMXK738ue8rHR WlQKNz6IZBKDzkBacqgHtKnxAPcxOK43XnGvcerj2xSVK9uLoK3f0hafKEvQzva+ X81BD6B8xQtalCKaZFL+YNt0jpFZAbTQQGeSSAOhQ5ojPhWlWlCw3wUMfxNrvY5H 8GX8W+JvTG0MxPdAcCf+e1PuMj++74vKA7M= -----END CERTIFICATE-----Generated at Tue Jul 1 22:46:59 2025 by rpki-client