$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: 2EszDtbc3QCjmyq3L24jvWzxpwtGfrfAWbha2f+tYYA= Subject key identifier: 6E:BA:37:84:79:B9:BB:F5:53:41:C7:BD:7D:DA:33:88:00:1B:44:B7 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584A58CB080F76187096F26CB980 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:08:0f:76:18:70:96:f2:6c:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=b4bb60e5-dbfc-47ab-a3ef-c37dd7d77d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:51:bb:81:ca:3d:db:6f:50:c0:0b:c0:a9: d2:a0:e8:0c:b2:ba:f2:c6:03:32:16:61:29:87:1b: b7:a0:6d:39:76:9e:f9:05:e3:e0:14:6c:d9:46:49: b8:08:50:30:eb:cb:f9:18:e4:06:b6:3b:29:a0:fa: 2b:07:14:b4:80:0d:f1:47:35:36:10:f4:44:00:b1: aa:a5:42:62:54:d0:c0:7d:2a:77:a7:3e:bb:d2:51: 89:16:dc:4b:e5:ba:c7:8a:7f:d9:c5:cb:0c:5e:44: e6:0f:d4:52:b3:be:f6:d2:b2:5e:9d:fc:58:70:45: 8b:5e:bb:6e:15:26:e1:c3:1b:cf:29:43:60:e9:84: 20:07:34:d6:cf:64:bf:4e:9a:5f:c5:bd:78:cb:54: 7e:e6:ee:9a:49:3b:e5:7f:75:fd:8b:6d:b8:ad:ef: d6:2e:69:ff:71:33:d3:b4:66:99:38:1c:f7:50:84: 08:90:2e:80:7c:b3:07:2a:5f:9c:29:73:48:50:79: 40:63:f6:10:fb:db:ab:32:4e:3b:e2:52:9e:e9:c9: d8:c4:38:c7:15:66:9e:d5:8a:30:d3:f4:88:31:3d: 1a:d8:72:03:c4:2d:2d:b3:62:36:21:79:6f:e3:fe: 54:42:ba:8d:98:a1:25:b0:fa:1f:b4:f3:6f:31:4c: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BA:37:84:79:B9:BB:F5:53:41:C7:BD:7D:DA:33:88:00:1B:44:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:29:ee:04:9a:a1:d8:7b:05:ce:45:da:14:22:07:9d:85:52: 48:c3:20:59:23:fa:bc:c2:bc:c3:9f:94:0d:67:fd:9b:1b:66: fd:9b:88:7d:68:cf:d8:76:d3:fd:2d:dd:ec:a1:a9:62:2c:4b: d1:15:2c:22:a9:e1:0f:34:1b:95:b9:ab:fb:05:87:a2:92:dd: 76:cf:2d:70:27:15:20:2b:a1:01:26:d8:80:94:52:b3:14:02: f3:dc:ee:df:b5:b2:57:15:89:8b:79:ec:be:c0:b9:4a:8c:e3: 2a:f0:5d:58:1e:d3:2f:01:4c:a5:a1:c8:df:2a:ec:6d:24:5e: 4f:f2:93:d9:a4:85:46:a1:4b:1c:1c:36:17:b2:04:0b:01:30: 3d:70:d5:42:2a:06:a7:7e:23:bf:9c:db:88:dc:f7:18:52:05: 0e:53:c6:3e:4c:d4:cd:d1:8e:90:8b:0b:db:20:02:17:b7:cc: ba:26:78:d6:0a:54:ae:d5:c2:44:81:8b:24:3e:5e:6f:04:07: cf:27:9e:2c:f6:56:4e:86:4d:ab:6d:27:e3:78:0c:10:85:ae: 2f:89:37:c9:a2:b7:98:f9:c6:fd:33:be:8f:f2:8e:88:25:c1: 3c:21:46:44:2e:50:22:71:85:a3:88:94:a9:bf:bf:06:8a:c8: c0:42:54:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpYywgPdhhwlvJsuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YjRiYjYwZTUtZGJmYy00N2FiLWEzZWYtYzM3ZGQ3ZDc3ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn9Ru4HKPdtvUMALwKnSoOgMsrryxgMyFmEp hxu3oG05dp75BePgFGzZRkm4CFAw68v5GOQGtjspoPorBxS0gA3xRzU2EPREALGq pUJiVNDAfSp3pz670lGJFtxL5brHin/ZxcsMXkTmD9RSs7720rJenfxYcEWLXrtu FSbhwxvPKUNg6YQgBzTWz2S/Tppfxb14y1R+5u6aSTvlf3X9i224re/WLmn/cTPT tGaZOBz3UIQIkC6AfLMHKl+cKXNIUHlAY/YQ+9urMk474lKe6cnYxDjHFWae1Yow 0/SIMT0a2HIDxC0ts2I2IXlv4/5UQrqNmKElsPoftPNvMUwe/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG66N4R5ubv1U0HHvX3aM4gAG0S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIp7gSaodh7Bc5F2hQiB52FUkjDIFkj+rzCvMOflA1n/ZsbZv2b iH1oz9h20/0t3eyhqWIsS9EVLCKp4Q80G5W5q/sFh6KS3XbPLXAnFSAroQEm2ICU UrMUAvPc7t+1slcViYt57L7AuUqM4yrwXVge0y8BTKWhyN8q7G0kXk/yk9mkhUah SxwcNheyBAsBMD1w1UIqBqd+I7+c24jc9xhSBQ5Txj5M1M3RjpCLC9sgAhe3zLom eNYKVK7VwkSBiyQ+Xm8EB88nniz2Vk6GTattJ+N4DBCFri+JN8mit5j5xv0zvo/y joglwTwhRkQuUCJxhaOIlKm/vwaKyMBCVIE= -----END CERTIFICATE-----Generated at Fri Jul 4 09:53:07 2025 by rpki-client