$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa File: 16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa (raw, json) Hash identifier: 6i8lGlRe/O31ODV3BPSpA3Yi9uNqJS2Zqo49TI6e7nI= Subject key identifier: 87:02:EE:16:15:93:1A:65:C8:09:1B:50:20:8E:27:03:F2:CD:BD:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E644F30F4421541D700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:e0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:64:4f:30:f4:42:15:41:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=d4ee6722-c8d2-4fbd-9721-82bd1ac0e676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:37:2d:40:69:c1:b4:29:f0:ae:78:26:24: fd:59:4e:32:ad:93:09:0e:1b:6c:70:ee:10:0f:7f: 38:dc:b7:5a:07:76:a2:5f:a3:b9:76:d1:c1:16:e5: 0e:03:c2:61:45:0f:31:2e:ca:e3:38:c1:6a:d1:d7: 45:e7:dc:05:77:ab:a3:cd:da:f8:75:c2:d2:b0:0b: 12:72:af:42:81:63:27:5a:26:41:ff:b3:0b:c5:bf: 79:77:37:f4:65:b1:bb:82:2c:ee:00:4b:cf:3b:26: ff:0e:fe:7f:ca:21:aa:74:03:d1:ca:99:be:b4:2e: d2:68:88:2b:ab:02:c1:09:3b:f9:96:07:f1:87:4f: 68:7a:f0:ec:63:70:87:91:f8:ae:57:37:fa:e2:14: 02:22:c6:9c:9b:67:41:66:95:ad:7d:72:8e:8f:6b: 4c:0a:71:38:28:0a:ae:30:b7:65:c4:bc:c8:60:1d: 5a:be:5b:b3:70:05:01:71:33:c8:ac:f6:40:d8:15: fb:e9:df:f8:56:0c:4b:4c:a3:58:3e:e9:5c:bf:f5: 09:e6:fb:51:e8:0d:15:46:1a:69:f9:94:8a:26:7f: 6f:e9:4a:3a:ba:21:3d:e4:7e:f2:8d:4e:a3:1d:e3: d2:8a:72:ff:72:08:6e:01:f9:2f:e1:47:6d:42:40: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:02:EE:16:15:93:1A:65:C8:09:1B:50:20:8E:27:03:F2:CD:BD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:e0::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:88:0c:b9:23:15:70:19:3a:39:c4:3b:98:84:aa:34:e4:17: 2e:00:cd:86:c4:4a:0d:77:df:3d:ca:93:f6:62:9c:31:c6:f0: 9c:0c:2e:db:a3:f2:46:1c:b1:87:e0:39:4f:eb:88:ba:14:06: 54:62:1f:ac:13:70:eb:d6:58:92:6f:11:99:d5:e8:c6:ce:d0: 4e:bc:81:2f:8e:4d:d2:ac:4a:e0:6b:85:da:81:ab:3a:b2:ca: 50:78:b3:b9:38:be:e1:0d:76:5b:2a:ad:6c:9b:2d:a6:de:da: b4:ab:5f:c1:7a:a4:75:d3:21:9e:78:30:7c:19:fc:24:3b:9c: d3:00:e3:60:1b:61:7d:38:41:97:62:9d:cb:d1:a9:1b:ed:db: b5:68:61:12:d5:0c:43:05:b3:a3:01:a5:41:b5:2d:b5:6f:e4: 0c:46:2d:b0:5f:e9:de:69:ab:f4:51:b5:3d:07:23:bf:8b:f8: 95:d3:39:98:19:aa:19:af:1f:84:75:7e:16:df:0f:a3:e2:3d: 42:38:cc:f9:8c:35:80:4b:77:a7:43:f9:dc:b8:81:4a:cf:36: dc:29:26:03:54:e0:b3:6b:56:29:20:39:38:79:cf:2c:d1:8f: 73:02:d7:29:6a:e4:a5:f6:e3:40:e5:4b:c4:ae:b1:9e:c3:93: 62:95:35:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB5kTzD0QhVB1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZDRlZTY3MjItYzhkMi00ZmJkLTk3MjEtODJiZDFhYzBlNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt43LUBpwbQp8K54JiT9WU4yrZMJDhtscO4Q D3843LdaB3aiX6O5dtHBFuUOA8JhRQ8xLsrjOMFq0ddF59wFd6ujzdr4dcLSsAsS cq9CgWMnWiZB/7MLxb95dzf0ZbG7gizuAEvPOyb/Dv5/yiGqdAPRypm+tC7SaIgr qwLBCTv5lgfxh09oevDsY3CHkfiuVzf64hQCIsacm2dBZpWtfXKOj2tMCnE4KAqu MLdlxLzIYB1avluzcAUBcTPIrPZA2BX76d/4VgxLTKNYPulcv/UJ5vtR6A0VRhpp +ZSKJn9v6Uo6uiE95H7yjU6jHePSinL/cghuAfkv4UdtQkCsnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcC7hYVkxplyAkbUCCOJwPyzb3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTZhZjRhMGQtMjRmOC0z MmIxLTk3MDAtZGQ5YWMzYTQzNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAdADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqIDLkjFXAZOjnEO5iEqjTkFy4AzYbESg133z3Kk/ZinDHG8JwM Ltuj8kYcsYfgOU/riLoUBlRiH6wTcOvWWJJvEZnV6MbO0E68gS+OTdKsSuBrhdqB qzqyylB4s7k4vuENdlsqrWybLabe2rSrX8F6pHXTIZ54MHwZ/CQ7nNMA42AbYX04 QZdincvRqRvt27VoYRLVDEMFs6MBpUG1LbVv5AxGLbBf6d5pq/RRtT0HI7+L+JXT OZgZqhmvH4R1fhbfD6PiPUI4zPmMNYBLd6dD+dy4gUrPNtwpJgNU4LNrVikgOTh5 zyzRj3MC1ylq5KX240DlS8SusZ7Dk2KVNcU= -----END CERTIFICATE-----Generated at Sun Jun 15 18:49:14 2025 by rpki-client