$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa File: 1ef3825e-f90a-3a97-aaff-27789621c9c6.roa (raw, json) Hash identifier: ts5rGmtR7cFT/8xNFBCiAeZmJCUc/xETBs743FT0VZI= Subject key identifier: 89:89:3C:2D:14:36:D8:57:93:65:17:8C:B8:69:AD:10:2B:E3:21:2C Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584A30502B6338C331041747F038 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 11017 IP address blocks: 2620:41::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:2b:63:38:c3:31:04:17:47:f0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=604a6060-ab26-4f35-90fa-b5d98921ce43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f9:eb:0e:2e:71:05:07:5e:4d:5b:cd:b0:7b: a0:c5:9e:01:3b:1b:c6:54:de:45:eb:ba:77:42:8b: 06:63:74:8b:45:68:18:e0:70:93:ad:28:2b:80:cf: 67:72:02:89:82:fc:57:e3:57:2e:b6:9d:83:d5:f5: fe:c7:16:08:09:b1:fd:c9:16:b0:b8:8a:59:2f:17: e2:56:aa:0c:b1:70:f3:3d:a3:6e:81:94:67:00:b2: 0c:80:c6:c9:9b:41:7d:10:f7:4f:f0:b3:35:07:2f: 28:3a:54:2a:b2:be:94:89:ff:d5:38:46:f5:d8:33: a8:63:94:8d:ec:e8:24:54:a7:1f:6c:b9:4d:d3:43: ea:9d:e8:a4:56:87:d0:0e:0e:83:22:2b:28:3e:02: e6:fe:6d:76:7f:01:24:ef:f9:87:a0:e9:0b:91:6a: 58:49:1e:9b:67:9c:90:1f:61:71:0f:0f:92:c9:ed: 2b:89:10:a1:ee:f1:5e:5f:3e:61:99:84:b8:15:26: d2:aa:36:d5:24:7c:bf:94:0b:cf:a8:90:7f:99:9b: 8a:18:b2:60:b5:8a:ca:b4:3d:1b:81:28:f9:39:89: c9:67:6a:aa:63:dd:55:8c:37:3f:fd:f4:61:83:63: 0d:65:90:ac:78:43:d2:6b:1a:2d:89:05:a8:e8:a1: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:89:3C:2D:14:36:D8:57:93:65:17:8C:B8:69:AD:10:2B:E3:21:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d8:85:a5:a7:87:6c:a6:24:1b:a9:80:67:4e:0c:8e:19:23: 55:56:c9:0e:f5:31:83:d6:54:f2:6b:58:da:d5:ab:56:76:49: 36:41:88:c3:f6:c4:f8:3f:3a:bd:1e:a5:5c:fe:56:ba:39:d9: f3:3e:f9:6b:6c:40:db:c6:51:60:f8:2b:88:9e:45:88:84:4e: 64:d2:cf:ec:0e:f3:7a:5b:2b:fc:95:11:f3:41:e2:fb:58:bd: 23:ca:dc:b5:f2:12:d1:38:1c:13:d7:f9:a8:33:82:df:1a:e9: 03:a8:1f:da:7c:c7:85:7c:4f:93:43:62:4e:b9:ad:cb:cb:60: 10:49:92:27:bd:56:f9:2a:27:6a:75:5b:17:9c:0c:48:8c:ef: 4f:2b:59:4e:1c:d6:44:0c:65:cb:e1:be:12:59:f8:b0:a8:dc: 52:83:a3:1a:3b:5e:d4:d4:50:d2:fb:4b:2d:de:d8:2e:d6:b9: 07:37:9e:bc:ca:c6:26:8f:ef:a3:62:1b:c0:40:fd:72:50:d8: 04:51:73:a9:ad:f9:3c:31:f9:bd:e5:71:4f:67:b5:e2:4f:a9: e7:ed:05:ba:38:25:0f:ae:52:a7:82:85:de:86:85:71:9e:1e: 55:8c:fc:d9:2a:1a:0b:dd:a0:07:3d:fd:1a:32:df:d8:0f:d6: 78:b0:85:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUCtjOMMxBBdH8DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjA0YTYwNjAtYWIyNi00ZjM1LTkwZmEtYjVkOTg5MjFjZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PnrDi5xBQdeTVvNsHugxZ4BOxvGVN5F67p3 QosGY3SLRWgY4HCTrSgrgM9ncgKJgvxX41cutp2D1fX+xxYICbH9yRawuIpZLxfi VqoMsXDzPaNugZRnALIMgMbJm0F9EPdP8LM1By8oOlQqsr6Uif/VOEb12DOoY5SN 7OgkVKcfbLlN00PqneikVofQDg6DIisoPgLm/m12fwEk7/mHoOkLkWpYSR6bZ5yQ H2FxDw+Sye0riRCh7vFeXz5hmYS4FSbSqjbVJHy/lAvPqJB/mZuKGLJgtYrKtD0b gSj5OYnJZ2qqY91VjDc//fRhg2MNZZCseEPSaxotiQWo6KF6YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImJPC0UNthXk2UXjLhprRAr4yEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMWVmMzgyNWUtZjkwYS0z YTk3LWFhZmYtMjc3ODk2MjFjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLYhaWnh2ymJBupgGdODI4ZI1VWyQ71MYPWVPJrWNrVq1Z2STZB iMP2xPg/Or0epVz+Vro52fM++WtsQNvGUWD4K4ieRYiETmTSz+wO83pbK/yVEfNB 4vtYvSPK3LXyEtE4HBPX+agzgt8a6QOoH9p8x4V8T5NDYk65rcvLYBBJkie9Vvkq J2p1WxecDEiM708rWU4c1kQMZcvhvhJZ+LCo3FKDoxo7XtTUUNL7Sy3e2C7WuQc3 nrzKxiaP76NiG8BA/XJQ2ARRc6mt+Twx+b3lcU9nteJPqeftBbo4JQ+uUqeChd6G hXGeHlWM/NkqGgvdoAc9/Roy39gP1niwhXs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:59 2025 by rpki-client