$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa File: 611c5848-7847-37af-bcd8-ea93e742fac5.roa (raw, json) Hash identifier: VYODdx+JRNdcQoQZIK5aqWuQK5ksVj5fRDXNOBcdO3U= Subject key identifier: 44:2E:D6:BA:10:61:AD:46:45:7D:EA:15:5D:95:0B:15:D7:60:61:3B Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F43285849E91FA37737E174394FA25200 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 136473 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a3:77:37:e1:74:39:4f:a2:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=b1407798-176f-4957-afd2-65f31defdf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:43:d1:c7:f0:0a:94:af:16:0b:ca:a4:8e: 16:13:b5:87:8e:0b:85:bf:85:4d:56:b2:0b:ac:90: b6:0b:a6:26:ea:4f:1c:7d:2b:99:9b:07:8d:c5:69: 99:02:4d:8e:07:8b:8e:16:19:9b:75:ff:b5:e8:86: ca:7a:23:96:46:e7:54:2e:f0:b2:9f:8a:b3:f2:76: 02:d0:e2:0a:12:0f:72:7e:16:27:af:4b:58:3c:15: b9:b4:07:af:12:87:82:19:62:5c:7d:f1:e2:ea:b1: 6f:2d:a1:48:3f:5e:06:10:29:64:f4:c7:cb:08:c4: f8:19:73:4c:2e:57:06:04:e8:2f:bf:a0:1f:54:82: b2:85:12:3c:1f:eb:e6:a0:93:36:37:62:93:a8:85: 26:66:eb:dd:c5:38:5c:42:1f:04:3a:fe:83:1f:0e: 2f:11:c6:af:6e:59:2f:bc:af:9a:28:38:6e:f0:d6: 5f:5e:1d:36:83:cf:af:08:bc:f4:fc:8c:31:bb:0d: bc:2c:60:f5:73:fc:77:72:48:6a:81:5a:49:54:d7: 62:a1:aa:e0:bc:2f:52:9f:d9:9c:a7:4e:34:9e:8a: d4:f9:70:da:d7:ac:a3:9b:26:3f:83:de:20:61:6a: ff:40:68:88:df:25:2a:e9:de:be:c3:fa:de:89:f5: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2E:D6:BA:10:61:AD:46:45:7D:EA:15:5D:95:0B:15:D7:60:61:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:94:2d:0f:0b:b4:a3:45:40:29:a5:11:97:0b:20:c1:09:4c: 3d:40:90:0d:50:0c:68:30:17:5e:19:1e:14:1a:5f:2b:7a:bc: 39:05:cb:ca:0b:46:05:36:8a:a0:91:f8:21:91:c7:77:dd:3f: 69:92:e9:52:5a:38:ae:4b:0b:07:c1:ce:97:ed:05:b2:33:fc: 4b:5d:7a:22:bd:b4:8a:2e:49:de:a6:9b:ff:4b:1b:7d:60:b8: 8b:26:51:67:a1:ce:36:c8:05:8b:3c:d5:11:cf:8c:39:89:bf: 20:db:01:f0:3b:96:bb:0c:53:78:75:62:59:07:ca:82:5d:12: 0e:19:b5:ce:ff:6b:23:05:67:44:f3:18:6f:26:58:c7:28:f5: e8:d9:1f:00:8d:cc:ce:8b:e0:a1:4f:b1:15:b8:70:8b:dd:91: a8:60:79:04:44:0a:b5:cc:4f:49:37:39:86:c9:01:44:93:32: 1b:69:ba:32:ae:70:20:78:ef:b1:f9:4c:1e:5b:c0:1b:80:e7: 38:f8:cb:e2:71:14:5e:44:42:85:f0:e1:f6:a5:cb:78:11:95: e6:e1:fa:2d:d3:68:3c:27:8d:3e:8b:88:dd:df:88:2b:ce:88: a0:d8:93:e9:cb:d9:65:dc:b3:dd:4c:c8:3b:41:99:2d:27:38: d6:0f:e9:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnpH6N3N+F0OU+iUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YjE0MDc3OTgtMTc2Zi00OTU3LWFmZDItNjVmMzFkZWZkZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7hD0cfwCpSvFgvKpI4WE7WHjguFv4VNVrIL rJC2C6Ym6k8cfSuZmweNxWmZAk2OB4uOFhmbdf+16IbKeiOWRudULvCyn4qz8nYC 0OIKEg9yfhYnr0tYPBW5tAevEoeCGWJcffHi6rFvLaFIP14GEClk9MfLCMT4GXNM LlcGBOgvv6AfVIKyhRI8H+vmoJM2N2KTqIUmZuvdxThcQh8EOv6DHw4vEcavblkv vK+aKDhu8NZfXh02g8+vCLz0/Iwxuw28LGD1c/x3ckhqgVpJVNdioargvC9Sn9mc p040norU+XDa16yjmyY/g94gYWr/QGiI3yUq6d6+w/reifU3rwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEQu1roQYa1GRX3qFV2VCxXXYGE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjExYzU4NDgtNzg0Ny0z N2FmLWJjZDgtZWE5M2U3NDJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2lC0PC7SjRUAppRGXCyDBCUw9QJANUAxoMBdeGR4UGl8rerw5BcvK C0YFNoqgkfghkcd33T9pkulSWjiuSwsHwc6X7QWyM/xLXXoivbSKLkneppv/Sxt9 YLiLJlFnoc42yAWLPNURz4w5ib8g2wHwO5a7DFN4dWJZB8qCXRIOGbXO/2sjBWdE 8xhvJljHKPXo2R8AjczOi+ChT7EVuHCL3ZGoYHkERAq1zE9JNzmGyQFEkzIbaboy rnAgeO+x+UweW8AbgOc4+MvicRReREKF8OH2pct4EZXm4fot02g8J40+i4jd34gr zoig2JPpy9ll3LPdTMg7QZktJzjWD+nk -----END CERTIFICATE-----Generated at Sun Jun 15 07:04:43 2025 by rpki-client