$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa File: 2064d786-143a-30d6-b028-aba4222934c5.roa (raw, json) Hash identifier: iXTXqpaZqC+r9IrQdHLxdthvj7a4FRVfb7T/tYnDVTw= Subject key identifier: EC:93:8B:7A:9B:49:69:06:07:2A:0F:1B:A5:C6:A1:51:EC:D5:EC:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201DFD4C89AD67AA4F3040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1d:fd:4c:89:ad:67:aa:4f:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=caa99099-b766-497d-bc79-37bd9a1f1d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:62:f0:b7:49:73:e5:49:d4:ef:d8:31:72: 19:f4:be:a6:55:33:83:44:4d:9a:0e:67:53:b2:42: 00:9b:8e:02:b1:51:0f:b7:7d:f5:60:5a:83:cf:85: e3:9b:8a:de:32:8f:3b:c3:f8:0b:7b:88:37:e3:28: e1:e3:d2:18:51:c5:d7:16:80:f5:d5:5f:ba:d6:b0: c4:c3:57:0c:f2:da:75:d6:e3:f5:6f:3d:f0:f9:4e: 55:47:85:58:95:d0:64:18:91:0f:3f:14:c4:43:69: bd:32:71:01:f0:c4:eb:da:56:02:3e:f4:21:c6:ba: 1d:41:df:40:dd:94:00:4d:84:8a:ae:9e:c2:40:4b: 38:1c:41:c7:7e:62:62:14:93:79:c5:1f:d7:28:83: 1f:76:2d:bc:7b:da:c0:c5:34:a8:7d:5f:e2:cf:ed: 9b:d0:a6:ba:8f:69:c5:6a:65:99:2a:cd:9e:50:bd: 10:67:6b:88:ae:0b:83:dd:bd:c8:38:6e:1c:05:e3: 8d:7e:87:42:83:eb:51:07:c4:fa:21:57:22:25:8b: dc:8a:e3:f2:4b:b5:0b:2d:fd:71:f1:c4:1c:4c:ba: 99:43:5c:5f:80:35:14:66:98:aa:c3:e1:60:73:55: 21:ed:69:64:4f:37:06:bd:41:fc:0a:20:88:f2:8f: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:8B:7A:9B:49:69:06:07:2A:0F:1B:A5:C6:A1:51:EC:D5:EC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:26:42:b3:a4:01:b3:2d:10:94:b3:af:4c:c9:2c:7c:94:16: 00:ec:ec:03:32:34:da:d2:4d:5a:c5:66:58:7a:91:dd:9d:34: 34:fd:27:c1:64:b0:82:d2:2f:21:00:87:9d:8c:0f:a2:b4:bb: b3:04:5c:10:46:83:e2:91:71:05:af:34:52:cf:0a:d5:df:9d: 1c:4e:43:03:92:92:bc:cb:60:91:de:6b:6e:e4:11:41:23:cb: 89:32:9e:c7:5c:16:ee:ea:44:4b:40:25:9f:71:d7:ef:4f:18: 38:d3:14:db:8f:98:9c:cd:15:31:38:d9:71:a7:f9:9f:ac:c0: d9:ad:1d:92:6a:2b:24:61:41:a9:fe:d5:52:8c:ce:11:cb:55: 81:dc:80:1b:a9:9a:cf:b8:8a:8e:9f:00:44:b2:e3:3c:f3:90: 71:70:9f:57:57:05:ef:ed:e1:90:09:51:d6:ec:b1:3a:97:b5: 4f:5b:02:55:58:87:a4:b9:b9:24:14:66:ca:a9:5e:43:01:eb: ed:b7:34:6b:d6:d6:70:4f:95:63:30:1a:a4:fc:8a:95:12:19: 49:ea:2b:42:19:b0:e0:9e:61:83:e7:b4:1e:91:e1:fa:e2:e6: f0:b4:15:97:d8:7b:5c:f2:39:13:55:35:c3:a7:eb:9c:60:55: fc:2d:9a:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB39TImtZ6pPMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Y2FhOTkwOTktYjc2Ni00OTdkLWJjNzktMzdiZDlhMWYxZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRi8LdJc+VJ1O/YMXIZ9L6mVTODRE2aDmdT skIAm44CsVEPt331YFqDz4Xjm4reMo87w/gLe4g34yjh49IYUcXXFoD11V+61rDE w1cM8tp11uP1bz3w+U5VR4VYldBkGJEPPxTEQ2m9MnEB8MTr2lYCPvQhxrodQd9A 3ZQATYSKrp7CQEs4HEHHfmJiFJN5xR/XKIMfdi28e9rAxTSofV/iz+2b0Ka6j2nF amWZKs2eUL0QZ2uIrguD3b3IOG4cBeONfodCg+tRB8T6IVciJYvciuPyS7ULLf1x 8cQcTLqZQ1xfgDUUZpiqw+Fgc1Uh7WlkTzcGvUH8CiCI8o8/lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyTi3qbSWkGByoPG6XGoVHs1eyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA2NGQ3ODYtMTQzYS0z MGQ2LWIwMjgtYWJhNDIyMjkzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAImQrOkAbMtEJSzr0zJLHyUFgDs7AMyNNrSTVrFZlh6kd2dNDT9 J8FksILSLyEAh52MD6K0u7MEXBBGg+KRcQWvNFLPCtXfnRxOQwOSkrzLYJHea27k EUEjy4kynsdcFu7qREtAJZ9x1+9PGDjTFNuPmJzNFTE42XGn+Z+swNmtHZJqKyRh Qan+1VKMzhHLVYHcgBupms+4io6fAESy4zzzkHFwn1dXBe/t4ZAJUdbssTqXtU9b AlVYh6S5uSQUZsqpXkMB6+23NGvW1nBPlWMwGqT8ipUSGUnqK0IZsOCeYYPntB6R 4fri5vC0FZfYe1zyORNVNcOn65xgVfwtmpg= -----END CERTIFICATE-----Generated at Sun Jun 15 13:04:15 2025 by rpki-client