$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa File: 43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa (raw, json) Hash identifier: FQ1XjVnbrORFlLNuiMAXvXCG/Vn+FX9qd9ZuNdmlcTM= Subject key identifier: 03:5E:95:A4:95:8C:9C:C3:0C:AB:99:F7:2B:5C:BE:17:1B:A9:E4:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F77AA03B2897BEE5A3CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 2603:3015:4200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:7a:a0:3b:28:97:be:e5:a3:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ea94e80f-27fb-4da7-8945-1ea10dc5d03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:b1:0d:d2:1f:c0:c2:1d:0c:d4:71:95:b5: 66:01:80:c6:c4:10:95:0e:76:19:35:9a:3f:c6:7e: 24:4b:02:3c:02:29:be:92:da:83:9b:4e:e2:08:23: 64:19:47:8a:e3:c9:61:e9:0f:d6:2c:96:19:32:f1: 47:f5:de:b7:b0:ff:3d:31:82:82:22:77:4d:54:2d: cf:c3:ab:5b:50:b8:54:99:a7:d3:b1:0e:d1:2a:85: bf:01:2d:a4:e0:13:fd:18:cd:67:81:f2:3e:b4:63: 27:ac:e3:59:65:35:8e:ab:08:72:e3:43:19:fa:30: 30:32:01:20:66:ba:c9:8e:3f:64:ff:bd:25:bb:92: 94:41:2a:61:1e:98:99:8a:1d:e7:d6:db:2f:58:70: 00:e2:3a:6e:89:b8:a7:f2:08:31:9b:bb:ba:53:ad: b1:c3:eb:43:a5:f8:ca:ca:d5:ec:22:e6:89:f5:e6: 4e:9d:b2:4c:34:14:7e:0c:a7:a4:fc:f7:f4:e7:f2: 5b:71:d7:0b:76:db:c0:80:cb:33:28:db:e4:52:11: 9b:49:1e:14:d3:d4:08:86:d7:f9:77:92:a1:e2:7b: e5:8d:d2:fc:ca:15:f9:cc:eb:db:4e:09:bd:ac:93: 90:c8:95:8d:3d:0e:5a:ca:0b:c0:d3:0a:b1:0e:20: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:95:A4:95:8C:9C:C3:0C:AB:99:F7:2B:5C:BE:17:1B:A9:E4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3015:4200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:19:2c:9c:4f:e2:2a:51:05:ab:63:4e:66:29:d3:4d:98:c2: 67:6c:8b:08:a1:59:29:79:6c:e1:68:45:1f:cc:8d:e8:66:80: 45:ac:4d:6c:92:bb:dd:9c:4e:5f:22:38:19:e6:a2:40:0b:27: 80:4f:96:50:0f:b3:8e:73:d8:6f:21:e9:8b:95:23:ed:4d:bb: 80:32:61:b7:5f:aa:fe:38:38:a2:54:07:a2:71:30:07:f1:93: 7b:04:27:5a:eb:8a:e8:eb:7d:26:1c:b9:e3:ca:d5:37:5b:f5: a9:97:46:d1:72:a7:3f:d1:43:0e:a9:54:d2:20:e9:61:89:ea: cf:c6:a2:de:69:3e:c8:1f:ca:63:df:4c:69:ac:d9:ee:16:1f: 17:84:03:0a:2a:d8:f6:2d:8e:32:18:e4:c7:c6:95:06:2b:84: f7:59:46:4f:68:16:8e:7e:88:8a:52:69:3d:21:d0:0b:07:1f: b2:d5:43:bb:6e:1d:e9:df:bf:70:18:ef:f1:58:2d:c2:89:5f: ae:74:06:59:57:dd:c1:89:d2:d9:cb:dc:16:6e:9f:0d:a8:32: d4:25:54:aa:3a:a0:3b:53:ce:26:ac:74:fc:2c:3f:0a:7b:d8: 86:1f:2f:e7:67:c2:1b:e1:fd:ce:81:2d:6e:df:7a:1e:ee:2c: 41:20:bb:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj093qgOyiXvuWjzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWE5NGU4MGYtMjdmYi00ZGE3LTg5NDUtMWVhMTBkYzVkMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdqxDdIfwMIdDNRxlbVmAYDGxBCVDnYZNZo/ xn4kSwI8Aim+ktqDm07iCCNkGUeK48lh6Q/WLJYZMvFH9d63sP89MYKCIndNVC3P w6tbULhUmafTsQ7RKoW/AS2k4BP9GM1ngfI+tGMnrONZZTWOqwhy40MZ+jAwMgEg ZrrJjj9k/70lu5KUQSphHpiZih3n1tsvWHAA4jpuibin8ggxm7u6U62xw+tDpfjK ytXsIuaJ9eZOnbJMNBR+DKek/Pf05/JbcdcLdtvAgMszKNvkUhGbSR4U09QIhtf5 d5Kh4nvljdL8yhX5zOvbTgm9rJOQyJWNPQ5aygvA0wqxDiBCyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFANelaSVjJzDDKuZ9ytcvhcbqeR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNkZmIyMTYtY2NmNS0z OWQ2LWJiNWItMGQ3YzAzM2M0ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFUIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmBksnE/iKlEFq2NOZinTTZjCZ2yLCKFZKXls4WhFH8yN6GaARaxN bJK73ZxOXyI4GeaiQAsngE+WUA+zjnPYbyHpi5Uj7U27gDJht1+q/jg4olQHonEw B/GTewQnWuuK6Ot9Jhy548rVN1v1qZdG0XKnP9FDDqlU0iDpYYnqz8ai3mk+yB/K Y99MaazZ7hYfF4QDCirY9i2OMhjkx8aVBiuE91lGT2gWjn6IilJpPSHQCwcfstVD u24d6d+/cBjv8VgtwolfrnQGWVfdwYnS2cvcFm6fDagy1CVUqjqgO1POJqx0/Cw/ CnvYhh8v52fCG+H9zoEtbt96Hu4sQSC7eg== -----END CERTIFICATE-----Generated at Sun Apr 27 10:37:33 2025 by rpki-client