$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa File: 4043f796-836e-3b35-b717-405964e82e07.roa (raw, json) Hash identifier: SXl+Wjndkx4kXGBFYt3N17Krg2J/XiKODr8uIl7hM8I= Subject key identifier: 7D:0A:9D:F9:85:69:44:97:21:E2:1F:3A:14:95:64:64:1B:40:49:24 Certificate issuer: /CN=7801f48a-31fe-43fd-b9d7-b370febfe411 Certificate serial: 010D0C9F4328584A2EEAB8645796ABC4D5CCF600 Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 399007 IP address blocks: 2605:f340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:b8:64:57:96:ab:c4:d5:cc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=e1d88e34-7d15-4001-8d96-3dcce479a8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:ca:6a:f7:75:5c:e5:56:13:cf:8f:99:b1: 60:f3:8b:32:1d:f9:95:83:77:00:a1:f3:08:5b:b8: c5:e5:a8:f5:76:60:25:50:f8:8c:2e:2a:bb:6b:fc: 5e:bd:5d:0d:98:bc:4b:14:9b:6a:58:ca:b3:85:80: 87:cc:bd:7b:d9:a5:f7:57:7d:6f:41:87:5d:56:9d: a8:1e:3c:6b:f3:90:c3:0a:c5:6a:e7:97:a1:91:1a: 24:1a:ee:a2:93:cc:85:cf:24:43:da:1a:fd:73:35: a9:54:e2:d9:15:1e:b0:83:c8:c6:4e:96:48:81:9b: 66:c9:23:c6:0c:5c:e3:64:ab:1d:54:d6:24:fb:f9: 49:7d:57:bf:3a:89:2e:aa:06:39:85:29:89:03:67: 28:8f:2f:c9:e5:e2:81:af:ce:8f:53:6a:ae:de:fe: 5a:0d:71:fe:0d:36:8d:8d:22:97:97:77:7f:79:d3: 19:53:8d:4b:d9:05:e4:00:ed:b1:54:0f:98:97:c6: bb:31:70:eb:5c:63:52:7e:82:3e:01:30:04:44:a4: 1e:24:e5:4e:e0:f0:94:ec:68:62:6d:35:6c:9e:33: 9c:3d:98:3e:1a:b1:82:2b:19:c8:17:e0:58:59:b2: 8b:6c:ed:53:c2:e4:cd:4d:61:ce:70:a1:0e:b4:e3: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0A:9D:F9:85:69:44:97:21:E2:1F:3A:14:95:64:64:1B:40:49:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl X509v3 Authority Key Identifier: keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer sbgp-ipAddrBlock: critical IPv6: 2605:f340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c4:22:9e:6f:fa:d5:c6:80:77:6a:9b:b1:8c:47:72:e2:6e: e9:f6:11:7a:f8:ac:ea:05:1c:02:e4:ca:16:60:bb:51:04:b1: 78:98:ff:55:25:cc:10:b6:6b:af:a2:92:25:60:29:36:af:d8: da:f5:69:4d:72:3a:52:1e:79:e2:e3:59:c2:2a:85:36:6e:ab: b6:33:f2:97:f8:bc:84:89:43:60:df:c7:37:80:d6:5e:23:ed: 0a:27:87:0c:d4:85:7f:bd:8e:cd:2c:d2:6c:5b:5c:79:f6:73: 97:be:80:89:b8:43:58:69:a0:58:7a:72:27:c3:eb:db:4f:03: 94:62:13:46:75:b1:43:ef:3e:ef:80:c6:6f:04:1f:e7:42:c9: 12:36:ac:77:a8:bb:2d:0f:af:3a:cc:44:45:9d:12:cd:ca:da: 35:51:2e:94:ab:10:9b:11:9d:de:af:72:e3:72:bb:2a:ac:93: a5:d1:39:a1:07:21:21:5b:d5:40:e5:ab:22:9a:37:b0:e7:17: 5b:81:e8:48:e2:2b:5d:93:d1:49:fc:21:d9:86:40:09:23:80: 4a:37:e8:8d:5a:a0:47:75:b8:5e:ce:ca:11:3c:1b:fa:90:92: d9:44:85:40:4f:c7:90:f9:93:b6:98:ba:57:71:d3:b5:b2:84: 73:4c:23:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEou6rhkV5arxNXM9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgwMWY0OGEtMzFmZS00M2ZkLWI5ZDctYjM3MGZlYmZl NDExMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk ZTFkODhlMzQtN2QxNS00MDAxLThkOTYtM2RjY2U0NzlhOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlzKavd1XOVWE8+PmbFg84syHfmVg3cAofMI W7jF5aj1dmAlUPiMLiq7a/xevV0NmLxLFJtqWMqzhYCHzL172aX3V31vQYddVp2o Hjxr85DDCsVq55ehkRokGu6ik8yFzyRD2hr9czWpVOLZFR6wg8jGTpZIgZtmySPG DFzjZKsdVNYk+/lJfVe/OokuqgY5hSmJA2cojy/J5eKBr86PU2qu3v5aDXH+DTaN jSKXl3d/edMZU41L2QXkAO2xVA+Yl8a7MXDrXGNSfoI+ATAERKQeJOVO4PCU7Ghi bTVsnjOcPZg+GrGCKxnIF+BYWbKLbO1TwuTNTWHOcKEOtOOeQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH0KnfmFaUSXIeIfOhSVZGQbQEkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ODAx ZjQ4YS0zMWZlLTQzZmQtYjlkNy1iMzcwZmViZmU0MTEvNDA0M2Y3OTYtODM2ZS0z YjM1LWI3MTctNDA1OTY0ZTgyZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzgwMWY0OGEtMzFmZS00M2ZkLWI5 ZDctYjM3MGZlYmZlNDExLzc4MDFmNDhhLTMxZmUtNDNmZC1iOWQ3LWIzNzBmZWJm ZTQxMS5jcmwwHwYDVR0jBBgwFoAU9XoPhZWJxKWDtdLcbFq/BX6aeJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83ODAxZjQ4YS0zMWZlLTQzZmQtYjlkNy1iMzcw ZmViZmU0MTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4xCKeb/rVxoB3apuxjEdy4m7p9hF6+KzqBRwC5MoWYLtRBLF4mP9V JcwQtmuvopIlYCk2r9ja9WlNcjpSHnni41nCKoU2bqu2M/KX+LyEiUNg38c3gNZe I+0KJ4cM1IV/vY7NLNJsW1x59nOXvoCJuENYaaBYenInw+vbTwOUYhNGdbFD7z7v gMZvBB/nQskSNqx3qLstD686zERFnRLNyto1US6UqxCbEZ3er3LjcrsqrJOl0Tmh ByEhW9VA5asimjew5xdbgehI4itdk9FJ/CHZhkAJI4BKN+iNWqBHdbhezsoRPBv6 kJLZRIVAT8eQ+ZO2mLpXcdO1soRzTCOM -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:43 2025 by rpki-client