$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa File: 408dc68f-c76d-3da2-b2ce-f04c23661355.roa (raw, json) Hash identifier: /bKuGyhMUMvEGrlbm8ebf3/mT4Lg1VLMzB0veRI0DbU= Subject key identifier: 0E:2E:77:1E:8F:9F:AA:EB:90:65:7D:39:44:F7:16:C8:A3:A3:90:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA62B8287D307D470FDC8A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33650 IP address blocks: 2603:3023::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:2b:82:87:d3:07:d4:70:fd:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=4fd952e6-46b0-403a-9cea-f72582f63623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:4e:e2:e6:2d:41:c5:f5:91:d9:0e:86:6e: 32:b5:fd:30:80:5d:46:0c:dc:57:72:bf:3b:4c:ac: d0:67:a6:27:cf:bb:80:c4:ee:c8:55:76:61:f8:84: 4c:25:e2:06:7a:21:f1:4d:34:b4:91:b5:e0:92:65: f1:e7:7b:34:2a:df:58:f7:f3:e2:7d:37:b9:c6:50: f3:8c:76:1d:24:5f:bf:75:69:28:f1:91:c3:b9:cb: 9f:bc:cf:d4:b3:83:ae:5f:02:f0:9b:fe:eb:96:82: f7:4d:ed:e3:17:35:0e:4e:b0:5a:2c:6b:30:ab:48: 8e:08:f6:b3:9f:6a:cc:27:23:cd:f0:ae:aa:dc:63: 91:c8:2b:4b:bf:31:66:43:67:fe:1d:63:24:b8:0f: 64:d8:bc:a2:af:13:ba:de:22:6e:8c:a7:8c:5f:81: a2:9d:7f:c4:1a:70:f4:d0:b5:9e:da:78:a7:27:f2: 09:81:40:0c:a1:08:42:2f:3f:3f:bd:0a:4c:af:80: 8b:45:be:e6:6c:2e:db:f4:f4:85:71:40:38:33:f4: b0:10:d7:87:05:c2:6a:a1:bc:27:12:f7:72:b3:07: 45:02:43:40:c8:d7:39:68:f5:13:26:c6:3c:1c:08: 38:8a:f7:7e:eb:8c:2d:9f:6b:7e:1d:f6:83:bd:ee: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:77:1E:8F:9F:AA:EB:90:65:7D:39:44:F7:16:C8:A3:A3:90:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3023::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:11:6a:c3:36:3b:27:c1:19:82:64:0c:56:09:bc:4e:b8:30: 14:11:dc:79:a2:03:2a:37:d2:16:8c:ab:36:30:bb:2f:da:50: 5b:15:6a:ba:61:22:07:f1:a4:72:d3:73:53:29:36:06:1b:da: bc:46:6b:e0:af:f4:52:ec:e0:91:00:8a:5d:a6:c6:c3:1f:fa: ce:3f:8f:a4:91:dd:e0:08:de:dc:de:91:0e:74:03:0e:3d:38: 93:19:eb:ae:30:64:13:ea:e6:45:78:7e:a5:ad:17:9d:be:83: 0e:20:c2:9c:a5:b8:7d:d8:e5:54:b8:6a:cd:08:22:65:41:8d: 26:2f:3f:62:da:ba:85:4c:a1:2e:c9:bc:7d:29:77:39:fc:25: c2:8d:c1:52:02:bb:35:92:ef:53:32:c7:c4:6e:73:16:da:dd: c9:ce:44:72:5c:a3:54:52:09:9e:6a:1a:1c:e1:6d:6b:2d:1f: ee:b2:29:1c:03:87:2e:8a:1b:0a:df:42:7d:e2:c6:91:00:7c: 07:2e:29:94:99:08:5b:0c:47:f7:4b:33:1a:9d:ca:c8:9a:62: 3e:d2:c4:a7:f1:5e:9a:1d:ef:94:4b:8d:b8:37:93:ee:5b:c7: f9:be:c2:b1:14:61:7d:96:29:94:db:8b:a0:7a:db:b1:d8:96: 77:e6:20:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl9piuCh9MH1HD9yKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGZkOTUyZTYtNDZiMC00MDNhLTljZWEtZjcyNTgyZjYzNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVhO4uYtQcX1kdkOhm4ytf0wgF1GDNxXcr87 TKzQZ6Ynz7uAxO7IVXZh+IRMJeIGeiHxTTS0kbXgkmXx53s0Kt9Y9/PifTe5xlDz jHYdJF+/dWko8ZHDucufvM/Us4OuXwLwm/7rloL3Te3jFzUOTrBaLGswq0iOCPaz n2rMJyPN8K6q3GORyCtLvzFmQ2f+HWMkuA9k2LyirxO63iJujKeMX4GinX/EGnD0 0LWe2ninJ/IJgUAMoQhCLz8/vQpMr4CLRb7mbC7b9PSFcUA4M/SwENeHBcJqobwn EvdyswdFAkNAyNc5aPUTJsY8HAg4ivd+64wtn2t+HfaDve4dSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA4udx6Pn6rrkGV9OUT3Fsijo5B5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA4ZGM2OGYtYzc2ZC0z ZGEyLWIyY2UtZjA0YzIzNjYxMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwIzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwEWrDNjsnwRmCZAxWCbxOuDAUEdx5ogMqN9IWjKs2MLsv2lBbFWq6 YSIH8aRy03NTKTYGG9q8Rmvgr/RS7OCRAIpdpsbDH/rOP4+kkd3gCN7c3pEOdAMO PTiTGeuuMGQT6uZFeH6lrRedvoMOIMKcpbh92OVUuGrNCCJlQY0mLz9i2rqFTKEu ybx9KXc5/CXCjcFSArs1ku9TMsfEbnMW2t3JzkRyXKNUUgmeahoc4W1rLR/usikc A4cuihsK30J94saRAHwHLimUmQhbDEf3SzMancrImmI+0sSn8V6aHe+US424N5Pu W8f5vsKxFGF9limU24ugetux2JZ35iC3 -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:18 2025 by rpki-client