$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa File: c4857446-b975-344a-92ee-72145ac9e316.roa (raw, json) Hash identifier: Iue7z9DkWQVSxzDm+oVcImFwAi6ELKq9BR7DBp8S9gs= Subject key identifier: 00:9F:56:D8:43:99:C5:96:4D:FC:72:19:23:B2:AA:5C:DB:1A:67:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1F90551C81DD457E00C82AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 7342 IP address blocks: 2620:74:83:101::7/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:55:1c:81:dd:45:7e:00:c8:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=5063f28c-b802-4da0-b314-4fa892d7949a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:e1:7d:5f:26:ac:d6:16:7f:10:10:3a:db: 1f:79:e7:39:c6:1a:c6:85:9d:61:a6:74:2c:03:a0: 95:80:73:6a:4c:58:72:a1:22:7f:1b:97:7a:ff:dd: f5:73:ed:46:48:db:89:5d:0b:25:6d:0f:6f:6a:07: e7:31:fb:f1:5c:0f:82:a8:b6:1f:e1:85:61:cb:6c: 2b:49:e5:59:9a:97:e5:d6:9a:c5:bf:cc:3f:85:79: a2:00:51:79:00:02:d5:57:c5:85:8b:f4:2e:08:71: 50:70:86:8c:71:df:5d:6c:3c:b8:af:76:17:cb:77: 8e:91:5c:bb:be:8a:6c:f5:84:f2:f4:78:93:98:48: 1f:94:cf:8b:5d:51:ce:af:a8:43:55:fa:0b:e1:b7: 1a:5b:3f:3e:26:46:8e:91:69:f9:20:5a:b3:b6:53: 61:d6:ee:c2:c3:d7:85:aa:d5:0b:b5:c0:c4:98:57: af:47:dd:a7:48:44:d8:e4:f8:ac:e5:f7:a9:46:81: bd:0c:a0:a4:a2:48:9e:74:cb:1b:db:c0:71:c6:a9: bd:d2:ca:f5:e2:b8:f6:51:68:24:f7:29:7f:a4:7a: 93:5e:ad:44:5c:cf:69:c1:63:87:03:54:9a:71:59: b7:11:88:e6:0e:0f:14:06:2e:23:4d:f3:56:26:a1: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:56:D8:43:99:C5:96:4D:FC:72:19:23:B2:AA:5C:DB:1A:67:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:83:101:0:0:0:7/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:24:e4:6c:42:33:d6:f0:05:93:9d:64:83:48:a4:f7:08: 48:47:a6:93:21:57:d5:4d:51:bf:d5:58:a6:e3:6d:d7:f8:40: d1:27:5f:08:36:08:a1:a7:9a:6c:04:4f:a9:8d:8e:1a:35:61: fb:e7:69:bc:ab:b7:67:3d:d3:98:b0:86:d4:d9:7e:f4:dd:aa: 48:7e:65:8b:cd:a2:ff:23:10:c0:3e:88:42:59:d7:a6:0e:a7: b3:3f:19:40:a1:58:5a:b9:b6:96:d4:f6:62:cd:d4:49:d7:f8: d4:d0:90:c7:45:25:a2:b0:6f:67:4f:e7:c9:96:76:f7:4d:db: 38:05:8e:a1:d6:65:b4:9c:6a:37:96:62:73:42:1b:eb:91:ed: f7:99:0d:55:6a:18:05:b7:fc:91:51:c5:a9:e3:d8:a4:ce:4b: a9:4b:bc:27:93:ea:c3:81:4d:7b:b4:8d:dc:5f:e6:1a:ae:4a: 23:89:bb:4c:1c:a3:df:93:49:72:fa:8a:e0:da:b3:de:2e:15: e3:8a:b9:8f:d9:45:3d:e7:2d:46:f8:aa:41:67:6c:57:d4:a0: cf:f5:17:90:91:cd:90:71:76:b1:b9:1f:7a:af:1f:e0:ae:16: a6:22:3c:bb:c1:15:1d:d8:99:28:36:34:61:62:b6:88:b0:a1: 96:75:86:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFUcgd1FfgDIKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NTA2M2YyOGMtYjgwMi00ZGEwLWIzMTQtNGZhODkyZDc5NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6PhfV8mrNYWfxAQOtsfeec5xhrGhZ1hpnQs A6CVgHNqTFhyoSJ/G5d6/931c+1GSNuJXQslbQ9vagfnMfvxXA+CqLYf4YVhy2wr SeVZmpfl1prFv8w/hXmiAFF5AALVV8WFi/QuCHFQcIaMcd9dbDy4r3YXy3eOkVy7 vops9YTy9HiTmEgflM+LXVHOr6hDVfoL4bcaWz8+JkaOkWn5IFqztlNh1u7Cw9eF qtULtcDEmFevR92nSETY5Pis5fepRoG9DKCkokiedMsb28Bxxqm90sr14rj2UWgk 9yl/pHqTXq1EXM9pwWOHA1SacVm3EYjmDg8UBi4jTfNWJqFzpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFACfVthDmcWWTfxyGSOyqlzbGmeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQ4NTc0NDYtYjk3NS0z NDRhLTkyZWUtNzIxNDVhYzllMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdACD AQEAAAAAAAAABzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQByayTkbEIz1vAFk51kg0ik9whIR6aTIVfVTVG/ 1Vim423X+EDRJ18INgihp5psBE+pjY4aNWH752m8q7dnPdOYsIbU2X703apIfmWL zaL/IxDAPohCWdemDqezPxlAoVhaubaW1PZizdRJ1/jU0JDHRSWisG9nT+fJlnb3 Tds4BY6h1mW0nGo3lmJzQhvrke33mQ1VahgFt/yRUcWp49ikzkupS7wnk+rDgU17 tI3cX+YarkojibtMHKPfk0ly+org2rPeLhXjirmP2UU95y1G+KpBZ2xX1KDP9ReQ kc2QcXaxuR96rx/grhamIjy7wRUd2JkoNjRhYraIsKGWdYav -----END CERTIFICATE-----Generated at Mon Jun 16 07:49:47 2025 by rpki-client