$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa File: aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa (raw, json) Hash identifier: DDs65KnnEjvqoe0Lew9Po365r8LdoFQ/sJha2kCkBis= Subject key identifier: 48:E1:4F:76:84:D4:90:78:DC:F9:1B:7E:0E:F9:1A:40:04:BE:47:41 Certificate issuer: /CN=71b34d11-5c74-4013-a0ad-639513ebea8c Certificate serial: 010D0C9F4328584A6C55DD4FC22C1724D18B6B80 Authority key identifier: 4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14579 IP address blocks: 2620:1b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dd:4f:c2:2c:17:24:d1:8b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b34d11-5c74-4013-a0ad-639513ebea8c Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=e7bb3647-f567-4ff9-b3dd-9f4cc93c0c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:b3:d4:bd:1b:7c:45:cd:bc:29:f7:da:5c: 16:ab:7a:82:ba:b1:c5:61:d1:bd:20:12:3d:3d:eb: cc:1f:49:97:b4:76:31:49:73:e0:3d:54:8e:be:07: 19:9d:1f:34:70:fa:47:fa:f5:24:b7:2c:f2:98:86: 9d:3a:11:ff:dc:49:84:a6:b2:9f:c1:39:03:9e:88: 2d:3c:df:73:17:0e:a4:42:dc:01:b6:ee:42:a7:b2: ff:48:e6:69:30:1c:4f:af:27:c1:ee:e5:7c:63:e2: b4:f5:8b:23:12:6c:ad:9a:99:2d:1c:22:f0:a0:8b: f6:1f:56:b2:1c:0b:d4:fb:19:eb:f0:0d:ed:d2:9f: b6:63:e4:75:7d:12:f5:93:93:78:c9:15:4b:f6:a2: d5:be:d4:02:5c:78:3a:6e:53:25:26:de:8a:8e:55: b4:b7:79:34:0e:1d:c6:65:35:87:3c:66:56:a8:7f: 55:4e:a3:66:42:46:d0:09:98:e7:96:bf:5d:4f:5f: 90:22:90:21:6d:e7:ba:37:ff:19:02:81:50:e0:f4: a2:e5:5f:ae:74:48:b9:3c:b6:07:4a:7d:d0:f4:52: 0d:1a:82:22:a7:6c:4e:41:fa:fa:30:82:f3:1f:27: 86:fb:cf:ec:08:a6:ab:d2:b0:af:a2:0e:1f:5f:44: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E1:4F:76:84:D4:90:78:DC:F9:1B:7E:0E:F9:1A:40:04:BE:47:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl X509v3 Authority Key Identifier: keyid:4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7b:9d:72:32:e4:10:2d:95:70:a9:00:42:4e:19:a0:e5:3e: 01:8a:ef:f1:5c:5e:c0:a2:68:89:b3:a7:50:7d:80:84:0d:76: ee:f2:36:87:5b:73:26:88:74:f8:6a:ce:00:d6:04:45:35:19: 41:8c:81:88:82:ce:37:09:02:91:7b:7f:93:b4:a0:d5:4c:3b: 44:9a:ae:d4:9c:59:74:df:d1:24:23:6e:28:70:29:87:05:94: 97:cb:ed:a8:09:ce:29:d7:b8:5d:15:de:ed:04:59:dd:5f:1b: 72:62:27:95:f0:a0:ac:b3:45:9b:ee:46:74:db:da:2a:4f:c6: d8:42:24:e1:4c:8f:ee:1d:98:03:70:77:5a:b6:26:b3:7f:73: fc:05:12:fe:c0:48:43:bc:7f:5f:e1:44:a4:d8:d6:82:74:b4: 11:d4:75:3f:85:2a:b1:d3:a7:76:63:b5:76:c1:48:0b:58:14: 0e:5a:f2:4e:da:40:2b:8b:7f:cf:d5:71:55:5e:03:3c:fc:49: 12:15:7b:d9:c5:50:18:fd:63:fa:2e:83:1f:83:0d:11:b5:d3: 1a:23:7f:ba:32:5f:59:24:23:04:0d:ca:51:7c:17:cd:64:bd: 3c:92:c6:f0:fa:1e:c5:19:eb:7f:b8:4c:c2:8f:ed:9e:ae:d5: 71:14:39:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpsVd1PwiwXJNGLa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFiMzRkMTEtNWM3NC00MDEzLWEwYWQtNjM5NTEzZWJl YThjMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTdiYjM2NDctZjU2Ny00ZmY5LWIzZGQtOWY0Y2M5M2MwYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Cz1L0bfEXNvCn32lwWq3qCurHFYdG9IBI9 PevMH0mXtHYxSXPgPVSOvgcZnR80cPpH+vUktyzymIadOhH/3EmEprKfwTkDnogt PN9zFw6kQtwBtu5Cp7L/SOZpMBxPryfB7uV8Y+K09YsjEmytmpktHCLwoIv2H1ay HAvU+xnr8A3t0p+2Y+R1fRL1k5N4yRVL9qLVvtQCXHg6blMlJt6KjlW0t3k0Dh3G ZTWHPGZWqH9VTqNmQkbQCZjnlr9dT1+QIpAhbee6N/8ZAoFQ4PSi5V+udEi5PLYH Sn3Q9FINGoIip2xOQfr6MILzHyeG+8/sCKar0rCvog4fX0R66wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEjhT3aE1JB43Pkbfg75GkAEvkdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWIz NGQxMS01Yzc0LTQwMTMtYTBhZC02Mzk1MTNlYmVhOGMvYWE1NWVlYTgtN2U0NS0z NGQyLWEzNmQtZjZjYWZiZDM2Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFiMzRkMTEtNWM3NC00MDEzLWEw YWQtNjM5NTEzZWJlYThjLzcxYjM0ZDExLTVjNzQtNDAxMy1hMGFkLTYzOTUxM2Vi ZWE4Yy5jcmwwHwYDVR0jBBgwFoAUTHHQFsoPFoFsyziFCoFpTvMR8r0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWIzNGQxMS01Yzc0LTQwMTMtYTBhZC02Mzk1 MTNlYmVhOGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBe51yMuQQLZVwqQBCThmg5T4Biu/xXF7AomiJs6dQfYCEDXbu8jaH W3MmiHT4as4A1gRFNRlBjIGIgs43CQKRe3+TtKDVTDtEmq7UnFl039EkI24ocCmH BZSXy+2oCc4p17hdFd7tBFndXxtyYieV8KCss0Wb7kZ029oqT8bYQiThTI/uHZgD cHdatiazf3P8BRL+wEhDvH9f4USk2NaCdLQR1HU/hSqx06d2Y7V2wUgLWBQOWvJO 2kAri3/P1XFVXgM8/EkSFXvZxVAY/WP6LoMfgw0RtdMaI3+6Ml9ZJCMEDcpRfBfN ZL08ksbw+h7FGet/uEzCj+2ertVxFDlm -----END CERTIFICATE-----Generated at Wed Jul 9 19:52:10 2025 by rpki-client