$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b568376f-a965-3fe5-9196-e3109c22e2c4.roa File: b568376f-a965-3fe5-9196-e3109c22e2c4.roa (raw, json) Hash identifier: VldZ2Hu7LlEHRaFcK3c8ZU13rOlrmovh6vG2JWeet4s= Subject key identifier: 8A:55:60:98:71:C4:F3:C7:2B:65:F0:D3:2F:44:D7:DC:B0:B7:2A:76 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F180227FFD84253ADF035601 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b568376f-a965-3fe5-9196-e3109c22e2c4.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397214 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:22:7f:fd:84:25:3a:df:03:56:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=a91e3f41-715e-4c16-9dff-32a4ac975a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:85:62:ee:25:74:2a:07:8e:a0:9b:92:f4: d3:7a:64:6e:16:40:80:81:45:e0:5c:65:7a:16:92: 3e:a2:d5:f9:98:ce:5c:dc:06:c7:a9:22:d7:65:a9: 95:91:c2:77:4d:7b:8f:df:d0:48:fb:cb:c5:e3:ef: b7:f8:eb:ab:36:92:43:72:bd:50:19:73:0d:7c:4e: 63:66:ab:78:2c:83:98:c4:f8:12:a9:38:78:5c:31: 4f:f5:57:2e:31:42:6d:d3:c9:ee:ac:53:14:4f:12: 72:c2:1c:d3:aa:52:93:5c:e5:e7:4d:f7:6f:89:50: b5:ef:3d:ee:12:4e:af:06:eb:5d:a2:ec:d8:10:78: 95:63:86:b7:7c:94:7f:b6:00:03:5b:a3:bb:40:9c: d0:7e:2b:10:b3:1d:af:8e:f3:3d:fe:c9:4d:54:e7: 6d:77:fc:66:7e:83:00:3d:33:6c:6f:42:38:4d:a1: 32:d5:95:d9:fc:7a:6d:46:79:93:79:fd:6a:a0:fb: 4a:50:98:0f:11:49:db:d7:6e:68:89:ca:10:5a:b5: 0a:37:6f:87:aa:09:ac:e7:51:51:de:41:05:70:53: f6:03:73:d4:fc:ee:e8:03:34:87:3a:eb:89:f9:7d: 46:fb:40:d9:6e:a9:30:1d:64:75:48:f2:ba:83:9f: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:60:98:71:C4:F3:C7:2B:65:F0:D3:2F:44:D7:DC:B0:B7:2A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b568376f-a965-3fe5-9196-e3109c22e2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d8:b9:fe:5c:4f:7d:98:91:fd:07:29:17:8d:71:66:bb:c0: 7b:2c:1c:f4:a3:d5:31:cd:f0:1d:72:43:09:91:44:4e:f2:03: af:0f:9f:c3:b6:68:32:df:64:b0:93:5a:1d:56:77:d4:f7:49: a5:da:45:38:a0:e6:53:65:51:9c:4e:c7:27:af:15:9d:d0:d4: 81:50:64:ce:cc:2b:94:11:fb:30:f7:7f:43:92:80:37:fd:c6: d5:7f:3d:7e:5c:0f:aa:f0:d3:6a:14:65:1f:b4:2f:e0:c2:33: 41:9c:43:4e:7e:66:06:cc:56:51:68:5c:e4:f6:71:a7:bd:56: 20:53:3a:6c:06:a0:a7:23:79:de:d9:30:5e:45:36:70:c0:1c: bc:1d:bd:65:72:41:7a:a1:fc:54:2a:7a:f6:09:aa:46:76:2c: 4d:8c:d3:b4:8c:e6:f5:dc:81:5e:df:54:d5:65:a0:12:56:e5: 5f:19:97:1e:39:4d:5c:21:97:22:bf:ef:9e:e7:98:65:5a:ff: c3:0d:91:51:80:22:c7:36:49:1a:29:f1:0b:cc:38:90:13:22: bb:95:35:24:60:a9:e3:ea:cb:01:fa:5f:87:73:a3:e5:f7:5c: 93:54:40:ac:d9:bc:37:56:b1:4c:85:39:fd:e2:a1:6a:31:67: b3:41:33:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgCJ//YQlOt8DVgEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTkxZTNmNDEtNzE1ZS00YzE2LTlkZmYtMzJhNGFjOTc1YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEiFYu4ldCoHjqCbkvTTemRuFkCAgUXgXGV6 FpI+otX5mM5c3AbHqSLXZamVkcJ3TXuP39BI+8vF4++3+OurNpJDcr1QGXMNfE5j Zqt4LIOYxPgSqTh4XDFP9VcuMUJt08nurFMUTxJywhzTqlKTXOXnTfdviVC17z3u Ek6vButdouzYEHiVY4a3fJR/tgADW6O7QJzQfisQsx2vjvM9/slNVOdtd/xmfoMA PTNsb0I4TaEy1ZXZ/HptRnmTef1qoPtKUJgPEUnb125oicoQWrUKN2+Hqgms51FR 3kEFcFP2A3PU/O7oAzSHOuuJ+X1G+0DZbqkwHWR1SPK6g5+XJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIpVYJhxxPPHK2Xw0y9E19ywtyp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjU2ODM3NmYtYTk2NS0z ZmU1LTkxOTYtZTMxMDljMjJlMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDYuf5cT32Ykf0HKReNcWa7wHssHPSj1THN8B1yQwmRRE7yA68P n8O2aDLfZLCTWh1Wd9T3SaXaRTig5lNlUZxOxyevFZ3Q1IFQZM7MK5QR+zD3f0OS gDf9xtV/PX5cD6rw02oUZR+0L+DCM0GcQ05+ZgbMVlFoXOT2cae9ViBTOmwGoKcj ed7ZMF5FNnDAHLwdvWVyQXqh/FQqevYJqkZ2LE2M07SM5vXcgV7fVNVloBJW5V8Z lx45TVwhlyK/757nmGVa/8MNkVGAIsc2SRop8QvMOJATIruVNSRgqePqywH6X4dz o+X3XJNUQKzZvDdWsUyFOf3ioWoxZ7NBMxM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:15:07 2025 by rpki-client