$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa File: a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa (raw, json) Hash identifier: HR1uz6N0+LpLsNLUl0RzOZ/zOs79t77GmCY5Yfw32wo= Subject key identifier: A4:11:E8:FF:41:2F:46:A1:14:85:68:D2:60:27:DD:06:FB:8A:18:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E1A02A04A43CFD18450 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:1a:02:a0:4a:43:cf:d1:84:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=15abc030-415c-4709-ad8f-96a245ca6a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:16:24:c2:7f:95:80:97:c2:44:20:dc:a2: 71:ba:73:c7:4d:bd:a4:ac:57:ab:df:49:64:9e:e5: 0a:90:a9:89:ff:0d:3d:90:c5:3a:e9:69:8b:56:ff: 1f:ec:12:59:33:bc:1b:f9:1e:6a:bf:e8:15:7d:18: 96:7f:35:29:64:a7:35:8a:a2:e3:0d:3e:3d:d3:eb: 28:bc:f0:6a:7f:96:81:73:6c:8e:30:19:5c:f9:6b: c7:5e:d7:0b:25:60:7e:26:63:55:3e:2b:f0:7c:e1: e9:d3:92:d1:73:fc:e6:8d:5c:0d:75:a1:30:ef:d9: 8d:2a:8c:23:71:76:90:12:22:b6:5b:5a:1e:06:16: 35:2c:3a:d5:87:93:42:8a:2c:ac:05:a3:10:7a:0f: 35:45:e0:c9:31:e5:63:91:25:09:fc:e5:b1:75:e6: a7:bc:97:89:d6:33:51:04:3b:07:76:76:b5:c5:4a: 9d:12:66:65:1c:46:75:67:cd:ed:a9:4d:72:af:dc: 72:64:ec:6b:d5:9c:8e:fd:b7:cd:be:06:b4:54:87: e1:0c:46:6b:db:0e:7c:db:ab:18:21:b2:d4:b7:1d: 59:4b:6d:aa:2e:17:c7:8e:b3:49:89:8f:48:ec:d2: 07:e4:f3:21:44:61:d8:73:83:a2:9d:e1:3d:53:83: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:E8:FF:41:2F:46:A1:14:85:68:D2:60:27:DD:06:FB:8A:18:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1a:8f:fe:f1:e0:c1:6d:92:c0:a1:0c:fb:5e:bd:58:0c:99: 04:a4:fb:a4:80:72:8f:1c:24:40:0b:7c:5b:86:08:46:7f:d3: 61:b6:24:25:80:9f:1b:49:f1:4c:d0:51:1d:30:4d:8f:a0:71: 69:3d:71:09:de:d2:3a:bf:e0:7d:78:c8:62:b4:e4:3e:93:0c: 0a:9c:9a:59:b0:df:c5:ba:5f:bb:15:09:94:bb:9a:76:cb:ef: 9d:1f:0f:da:6f:17:1f:53:2a:4c:7f:28:af:92:73:68:d7:29: fd:6e:9c:74:27:61:3c:e3:fc:3b:a2:7a:2b:34:f6:a3:5f:24: ac:a6:4e:5e:8c:9f:35:d4:5e:c6:43:55:50:ad:98:9b:e1:c6: 0b:e3:3d:fa:16:10:e6:82:8f:d1:ff:44:8a:2f:3a:70:34:b2: 44:42:dc:16:59:40:8d:6f:b5:d7:72:36:60:58:6e:d0:d7:24: 8b:a2:cc:fc:c2:f4:3f:6d:cb:73:cc:ae:9c:19:ac:ec:a0:fe: 41:07:9a:09:32:3e:73:f8:b2:90:99:54:20:8c:e9:7a:f1:0c: 73:5e:89:72:5f:1c:56:58:b5:09:74:33:b4:46:b5:e2:33:26: 6a:52:19:42:2a:6f:e4:5c:02:5d:72:62:41:b6:85:df:1a:ae: e9:b3:d2:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB4aAqBKQ8/RhFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MTVhYmMwMzAtNDE1Yy00NzA5LWFkOGYtOTZhMjQ1Y2E2YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtAWJMJ/lYCXwkQg3KJxunPHTb2krFer30lk nuUKkKmJ/w09kMU66WmLVv8f7BJZM7wb+R5qv+gVfRiWfzUpZKc1iqLjDT490+so vPBqf5aBc2yOMBlc+WvHXtcLJWB+JmNVPivwfOHp05LRc/zmjVwNdaEw79mNKowj cXaQEiK2W1oeBhY1LDrVh5NCiiysBaMQeg81ReDJMeVjkSUJ/OWxdeanvJeJ1jNR BDsHdna1xUqdEmZlHEZ1Z83tqU1yr9xyZOxr1ZyO/bfNvga0VIfhDEZr2w5826sY IbLUtx1ZS22qLhfHjrNJiY9I7NIH5PMhRGHYc4OineE9U4PZzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQR6P9BL0ahFIVo0mAn3Qb7ihhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQxMWUyYzYtM2FlNC0z MDQ4LWE2YjktMTBiOWY0NGVjZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4aj/7x4MFtksChDPtevVgMmQSk+6SAco8cJEALfFuGCEZ/02G2 JCWAnxtJ8UzQUR0wTY+gcWk9cQne0jq/4H14yGK05D6TDAqcmlmw38W6X7sVCZS7 mnbL750fD9pvFx9TKkx/KK+Sc2jXKf1unHQnYTzj/Duieis09qNfJKymTl6MnzXU XsZDVVCtmJvhxgvjPfoWEOaCj9H/RIovOnA0skRC3BZZQI1vtddyNmBYbtDXJIui zPzC9D9ty3PMrpwZrOyg/kEHmgkyPnP4spCZVCCM6XrxDHNeiXJfHFZYtQl0M7RG teIzJmpSGUIqb+RcAl1yYkG2hd8arumz0hM= -----END CERTIFICATE-----Generated at Sun Jun 15 18:27:14 2025 by rpki-client