$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/4aa0f64a-969c-34a6-9d11-1dc65fbdc995.roa File: 4aa0f64a-969c-34a6-9d11-1dc65fbdc995.roa (raw, json) Hash identifier: J6MmiOOe/AXLi2vDLbcTpqsWgoEEizxzQNRtclcDVjg= Subject key identifier: 67:77:98:E5:C3:85:71:1C:25:AC:FE:D7:4C:35:DA:6D:07:9D:DB:12 Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584A67C41CB7D5849684468D2900 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/4aa0f64a-969c-34a6-9d11-1dc65fbdc995.roa Signing time: Fri 04 Jul 2025 09:44:10 +0000 ROA not before: Fri 04 Jul 2025 09:44:10 +0000 ROA not after: Thu 02 Oct 2025 09:44:10 +0000 asID: 26383 IP address blocks: 2605:e440:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:67:c4:1c:b7:d5:84:96:84:46:8d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Jul 4 09:44:10 2025 GMT Not After : Oct 2 09:44:10 2025 GMT Subject: CN=d39ca9c5-cb2a-41c0-bdba-486f94566698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:a1:eb:d0:83:16:9b:14:c9:8f:f6:93:6b: 1e:81:0e:81:61:cf:94:34:17:af:dd:94:cd:f9:42: 85:ab:4d:ec:1a:3d:80:62:4c:80:c9:c2:9b:05:34: f7:03:bd:8e:32:34:84:c8:df:15:aa:34:cc:d0:f8: 90:4e:8b:13:25:20:b5:9a:92:1f:58:44:15:6d:aa: c5:74:20:63:98:fd:a6:77:d1:3d:bc:af:da:31:14: 87:5b:c6:d2:1a:53:b1:00:76:c7:72:db:ce:d4:9e: d0:13:f3:7d:bc:db:df:d8:02:94:d5:98:28:87:bc: f4:fa:31:53:3f:8d:fb:07:cd:b2:82:1c:94:46:53: d1:c4:dd:3e:6d:7d:a0:02:15:66:71:c4:71:88:52: 68:36:50:c7:b4:be:f2:e7:c3:27:49:74:2f:d9:0e: 0f:2a:3e:6d:1e:37:af:1a:cb:2e:61:be:8a:7b:fd: 4b:57:f9:85:55:d2:80:98:b6:0b:01:1b:24:40:57: dc:50:79:33:d8:07:91:f2:1e:ba:24:be:78:e9:33: 6c:c4:9a:b3:3e:f9:f6:a8:ee:b0:28:00:0b:07:ab: 57:32:1b:81:ca:19:fc:36:49:80:07:78:71:f5:e8: ba:72:94:d8:0d:e5:77:5d:71:39:42:e1:b0:c0:82: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:98:E5:C3:85:71:1C:25:AC:FE:D7:4C:35:DA:6D:07:9D:DB:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/4aa0f64a-969c-34a6-9d11-1dc65fbdc995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv6: 2605:e440:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ad:62:7d:f0:d1:97:8f:fa:b7:32:a5:e8:f7:cc:00:ac:18: 88:43:e3:2b:92:45:d9:f5:63:52:3c:24:c4:e1:09:78:c1:98: 85:9b:0f:c8:c9:2d:1f:1b:33:e0:88:06:07:f6:26:fa:0f:a8: 37:08:d2:da:99:fe:0f:bb:6f:d9:d2:82:bc:bd:a2:26:be:a9: 54:7a:e7:54:b0:0d:ea:09:bc:43:93:33:a3:13:8f:91:db:13: b7:9f:70:4a:60:6b:f0:b2:7f:44:4f:3a:77:25:f3:84:dd:ab: f2:42:cf:18:7a:a5:be:e0:09:f4:7e:d0:79:5f:49:e9:1c:bb: 5d:d0:ab:4e:ce:69:b3:d1:c2:5c:4d:02:46:2b:4d:66:b2:eb: 67:fa:cc:85:da:aa:7d:d0:c1:d8:ed:46:9a:08:67:d5:f5:a5: 85:05:93:25:71:af:6e:1f:aa:6d:f2:3c:a0:24:88:13:b9:fe: a9:dc:dd:69:05:57:bb:0e:da:17:4c:6f:67:2f:2f:49:60:18: 02:b6:5f:5a:64:f4:d9:7d:84:e7:0c:cd:7c:b8:24:b5:d9:73: 2d:eb:95:20:ef:2d:91:8f:92:f6:07:da:08:5d:97:c9:2c:08: a6:ed:e3:bd:0f:a1:aa:57:28:f8:37:54:40:1c:4e:78:e9:05: c9:01:e3:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpnxBy31YSWhEaNKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI1MDcwNDA5NDQxMFoXDTI1MTAwMjA5NDQxMFowLzEtMCsGA1UEAxMk ZDM5Y2E5YzUtY2IyYS00MWMwLWJkYmEtNDg2Zjk0NTY2Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlKh69CDFpsUyY/2k2segQ6BYc+UNBev3ZTN +UKFq03sGj2AYkyAycKbBTT3A72OMjSEyN8VqjTM0PiQTosTJSC1mpIfWEQVbarF dCBjmP2md9E9vK/aMRSHW8bSGlOxAHbHctvO1J7QE/N9vNvf2AKU1Zgoh7z0+jFT P437B82yghyURlPRxN0+bX2gAhVmccRxiFJoNlDHtL7y58MnSXQv2Q4PKj5tHjev GssuYb6Ke/1LV/mFVdKAmLYLARskQFfcUHkz2AeR8h66JL546TNsxJqzPvn2qO6w KAALB6tXMhuByhn8NkmAB3hx9ei6cpTYDeV3XXE5QuGwwIKhwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGd3mOXDhXEcJaz+10w12m0HndsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvNGFhMGY2NGEtOTY5Yy0z NGE2LTlkMTEtMWRjNjVmYmRjOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6tYn3w0ZeP+rcypej3zACsGIhD4yuSRdn1Y1I8JMThCXjBmIWb D8jJLR8bM+CIBgf2JvoPqDcI0tqZ/g+7b9nSgry9oia+qVR651SwDeoJvEOTM6MT j5HbE7efcEpga/Cyf0RPOncl84Tdq/JCzxh6pb7gCfR+0HlfSekcu13Qq07OabPR wlxNAkYrTWay62f6zIXaqn3QwdjtRpoIZ9X1pYUFkyVxr24fqm3yPKAkiBO5/qnc 3WkFV7sO2hdMb2cvL0lgGAK2X1pk9Nl9hOcMzXy4JLXZcy3rlSDvLZGPkvYH2ghd l8ksCKbt470PoapXKPg3VEAcTnjpBckB45g= -----END CERTIFICATE-----Generated at Mon Jul 7 00:55:06 2025 by rpki-client