$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/9a812488-5fc2-32e7-9794-baa261d0e5ac.roa File: 9a812488-5fc2-32e7-9794-baa261d0e5ac.roa (raw, json) Hash identifier: rdF6aI0hhVq1G6eM0cd/Or41qayxYb80MFpt+ayoAe8= Subject key identifier: 3D:8F:C1:13:24:54:C4:ED:F7:90:05:19:8B:A1:6C:C8:C4:62:D6:B7 Certificate issuer: /CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3 Certificate serial: 010D0C9F4328584A0C055C5FAB30D69FB3FC8E40 Authority key identifier: 0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/9a812488-5fc2-32e7-9794-baa261d0e5ac.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14697 IP address blocks: 2620:a7:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5c:5f:ab:30:d6:9f:b3:fc:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d49c70e7-5711-4a03-89c6-d5c0dec8f752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7e:36:4c:41:ec:79:db:ad:aa:71:2d:67:b9: 6a:da:d5:2c:ce:14:ef:f0:24:6b:ce:b7:eb:dc:ce: 41:02:06:13:b8:dd:98:a8:bf:05:1e:03:88:27:64: 3c:c8:b3:4f:95:7d:23:3c:31:f1:fb:22:f8:6b:12: 09:48:61:ff:eb:c3:ea:b7:55:0e:4d:55:50:29:83: a4:8c:de:52:ee:23:60:b9:f5:6e:a8:07:a1:94:7a: a1:96:d6:be:2a:11:57:a7:a9:ed:b0:fd:f0:8f:f0: 1a:09:c9:84:1f:11:cf:9d:1f:d6:28:2b:d6:90:49: f4:5f:58:1e:6f:ff:2c:39:a0:60:98:31:51:83:8f: df:ca:69:97:2a:ac:c8:bd:2c:7f:39:32:1e:95:c7: f6:47:f3:41:58:bc:4f:94:56:a1:f5:16:30:d3:30: 6b:90:98:f2:d2:69:8d:ee:3b:69:ba:41:a2:53:bc: ce:5e:09:de:76:7f:09:33:74:50:c3:3a:fd:f3:b5: 0d:b0:80:f8:55:10:4d:52:14:ec:82:2f:d8:d8:fd: c8:15:c4:16:87:80:49:1a:2f:04:55:57:9a:65:4a: 65:82:f2:3c:69:e5:24:d1:6d:99:97:fa:2d:9d:2d: 9f:a1:22:d9:8e:1f:1c:66:95:34:dd:20:2b:af:f2: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:C1:13:24:54:C4:ED:F7:90:05:19:8B:A1:6C:C8:C4:62:D6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/9a812488-5fc2-32e7-9794-baa261d0e5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl X509v3 Authority Key Identifier: keyid:0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:a7:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:aa:b8:52:4c:f7:1e:4a:22:4c:74:d6:d8:47:31:e6:c7:38: 08:6f:c2:45:0b:0a:0a:71:92:d3:14:6c:e9:fc:06:46:df:2b: d8:e7:45:7e:4b:9e:2d:b9:dd:94:5e:48:e0:b2:cc:92:da:61: f8:42:79:5f:a5:18:c0:7b:2a:fe:e7:87:18:9d:3e:49:6a:89: bd:fa:d8:cd:27:02:80:c5:33:88:9a:59:a2:5b:88:a3:d9:17: ab:86:91:48:3f:73:14:6f:ef:e6:77:c0:bc:b5:be:5a:03:e8: 85:5b:f6:c7:d6:ed:2e:ac:47:73:96:c4:31:e3:72:6a:70:1a: 15:fd:b8:f2:2a:d1:dd:64:e4:0f:b2:97:cb:62:b6:b5:8e:c4: 9b:05:ad:cc:f6:34:8c:9b:3c:13:4a:db:8c:62:21:35:8a:2c: 56:2c:20:56:6d:67:f7:89:ab:2f:5a:5b:93:c3:f7:cf:29:fd: dc:22:3d:00:81:70:fc:99:06:ce:6f:15:95:9e:71:fa:72:9b: 03:72:9b:67:59:e5:49:15:65:69:38:66:89:e7:6f:fa:16:b0: 8e:b2:b9:61:82:b9:86:7a:9e:73:e0:70:61:2f:ed:95:6d:c3: d9:79:30:76:48:fe:5d:d1:b3:5b:5c:67:03:5d:f5:f3:c6:14: 17:93:93:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBVxfqzDWn7P8jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3NGIwYjEtMWRjNS00ZTA3LTg0MTAtOGYyMDAwOGRh MGEzMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDQ5YzcwZTctNTcxMS00YTAzLTg5YzYtZDVjMGRlYzhmNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n42TEHsedutqnEtZ7lq2tUszhTv8CRrzrfr 3M5BAgYTuN2YqL8FHgOIJ2Q8yLNPlX0jPDHx+yL4axIJSGH/68Pqt1UOTVVQKYOk jN5S7iNgufVuqAehlHqhlta+KhFXp6ntsP3wj/AaCcmEHxHPnR/WKCvWkEn0X1ge b/8sOaBgmDFRg4/fymmXKqzIvSx/OTIelcf2R/NBWLxPlFah9RYw0zBrkJjy0mmN 7jtpukGiU7zOXgnedn8JM3RQwzr987UNsID4VRBNUhTsgi/Y2P3IFcQWh4BJGi8E VVeaZUplgvI8aeUk0W2Zl/otnS2foSLZjh8cZpU03SArr/JAuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2PwRMkVMTt95AFGYuhbMjEYta3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDc0 YjBiMS0xZGM1LTRlMDctODQxMC04ZjIwMDA4ZGEwYTMvOWE4MTI0ODgtNWZjMi0z MmU3LTk3OTQtYmFhMjYxZDBlNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3NGIwYjEtMWRjNS00ZTA3LTg0 MTAtOGYyMDAwOGRhMGEzL2U0NzRiMGIxLTFkYzUtNGUwNy04NDEwLThmMjAwMDhk YTBhMy5jcmwwHwYDVR0jBBgwFoAUDPsZrP1tIdcebyL9AzYh3+f0wzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDc0YjBiMS0xZGM1LTRlMDctODQxMC04ZjIw MDA4ZGEwYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAp+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSquFJM9x5KIkx01thHMebHOAhvwkULCgpxktMUbOn8BkbfK9jn RX5Lni253ZReSOCyzJLaYfhCeV+lGMB7Kv7nhxidPklqib362M0nAoDFM4iaWaJb iKPZF6uGkUg/cxRv7+Z3wLy1vloD6IVb9sfW7S6sR3OWxDHjcmpwGhX9uPIq0d1k 5A+yl8titrWOxJsFrcz2NIybPBNK24xiITWKLFYsIFZtZ/eJqy9aW5PD988p/dwi PQCBcPyZBs5vFZWecfpymwNym2dZ5UkVZWk4Zonnb/oWsI6yuWGCuYZ6nnPgcGEv 7ZVtw9l5MHZI/l3Rs1tcZwNd9fPGFBeTkyE= -----END CERTIFICATE-----Generated at Tue Jul 1 14:20:23 2025 by rpki-client