$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67a9f051-669e-39cd-ab24-d9b0bcddf375.roa File: 67a9f051-669e-39cd-ab24-d9b0bcddf375.roa (raw, json) Hash identifier: Ts7zYR4xzf3TzV3BOYhExQddnpOJOvoFMwA7LcSiC8Y= Subject key identifier: 1D:C5:7B:F8:A3:0B:89:08:A6:78:83:89:4F:76:F7:7A:7A:DD:17:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6267633EFB4B769807680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67a9f051-669e-39cd-ab24-d9b0bcddf375.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33490 IP address blocks: 2603:3004::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:26:76:33:ef:b4:b7:69:80:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=73a6f8e3-b75f-4b67-8806-bdde087f7ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:cb:96:11:bf:1f:f8:fd:44:b5:d9:6d:46: 32:21:9f:c6:02:9d:82:a2:ed:46:ad:87:0a:48:6c: 17:ba:fd:30:5f:da:0b:89:44:12:8c:a6:2b:8b:7a: d6:4b:ce:21:44:df:f8:d2:4a:ab:3f:24:d5:76:67: bc:ac:05:97:6b:58:11:3c:03:d3:6e:e4:e5:d4:74: 01:85:78:2a:e7:85:87:21:cf:41:33:38:5e:1a:1a: 8e:72:7f:50:d9:95:ce:55:d3:aa:31:ce:0e:0e:69: 44:4e:51:f0:6a:a8:7f:41:57:d5:58:1c:eb:ee:9f: b4:67:fc:a1:bb:d3:de:0a:36:31:7e:a1:d3:87:54: 2f:44:dc:a7:58:4a:8a:2e:ec:88:e6:35:e5:db:12: 4a:ba:fd:fb:59:c5:4f:8b:c6:ed:6c:a5:28:2a:8a: 1f:bb:ba:7b:98:a3:88:bd:3b:f5:f0:16:36:75:b3: 56:be:8c:3e:5c:4b:71:62:9a:19:b9:2c:90:7e:1f: 5a:4f:d3:83:71:32:4e:d2:cf:89:15:de:aa:4a:f8: 0c:92:67:21:de:10:4f:f7:35:c7:b6:23:be:da:8a: 4a:f6:f2:18:4e:08:3b:b5:f0:0e:5b:38:90:5e:7e: f8:36:51:6c:3c:ed:b3:ed:1b:26:23:e8:56:96:af: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:7B:F8:A3:0B:89:08:A6:78:83:89:4F:76:F7:7A:7A:DD:17:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67a9f051-669e-39cd-ab24-d9b0bcddf375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3004::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:da:96:f0:ee:13:9f:57:cf:9d:77:6b:cb:86:5c:a9:a1:85: a5:ed:cf:67:3a:24:e6:39:c4:a8:f3:29:55:a2:d9:88:33:56: 37:fb:51:dd:77:4d:bc:fe:e3:9f:64:aa:32:f9:f2:8d:e7:f3: 09:a5:04:08:44:35:4c:a9:62:1c:1c:2e:80:1d:66:f1:fa:09: 33:a6:70:de:04:48:79:4b:3e:2b:86:47:76:4c:02:bb:98:38: de:ba:24:e1:09:80:a1:32:05:90:a9:c9:15:6b:00:e9:dc:b9: 58:fc:25:17:0f:6e:73:77:1b:c0:c1:0f:ee:c6:23:58:07:4c: 7c:a0:68:29:45:e5:8f:ef:0c:3a:0b:dc:7d:3a:69:8b:40:f4: 9d:48:cb:20:5d:36:cb:d5:0c:5c:f6:ef:02:f7:f1:54:c4:d7: e3:9b:aa:7c:7d:31:5c:81:9d:3e:30:cf:aa:3f:c9:3d:f8:6f: f3:60:0d:54:d5:bc:be:dc:4f:04:ee:10:79:73:9f:d0:5d:55: 80:e8:83:e8:ed:1a:23:95:a9:d9:6e:66:e5:98:f4:c6:29:91: 45:4a:ce:de:40:9a:66:b4:78:9e:88:07:94:cd:b3:42:3e:d8: a8:ef:d3:c5:29:c2:f7:c9:38:c7:30:ae:4f:41:d6:15:df:68: a2:ea:d0:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl9piZ2M++0t2mAdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzNhNmY4ZTMtYjc1Zi00YjY3LTg4MDYtYmRkZTA4N2Y3YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0jLlhG/H/j9RLXZbUYyIZ/GAp2Cou1GrYcK SGwXuv0wX9oLiUQSjKYri3rWS84hRN/40kqrPyTVdme8rAWXa1gRPAPTbuTl1HQB hXgq54WHIc9BMzheGhqOcn9Q2ZXOVdOqMc4ODmlETlHwaqh/QVfVWBzr7p+0Z/yh u9PeCjYxfqHTh1QvRNynWEqKLuyI5jXl2xJKuv37WcVPi8btbKUoKoofu7p7mKOI vTv18BY2dbNWvow+XEtxYpoZuSyQfh9aT9ODcTJO0s+JFd6qSvgMkmch3hBP9zXH tiO+2opK9vIYTgg7tfAOWziQXn74NlFsPO2z7RsmI+hWlq+7aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB3Fe/ijC4kIpniDiU9293p63RdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjdhOWYwNTEtNjY5ZS0z OWNkLWFiMjQtZDliMGJjZGRmMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA42pbw7hOfV8+dd2vLhlypoYWl7c9nOiTmOcSo8ylVotmIM1Y3+1Hd d028/uOfZKoy+fKN5/MJpQQIRDVMqWIcHC6AHWbx+gkzpnDeBEh5Sz4rhkd2TAK7 mDjeuiThCYChMgWQqckVawDp3LlY/CUXD25zdxvAwQ/uxiNYB0x8oGgpReWP7ww6 C9x9OmmLQPSdSMsgXTbL1Qxc9u8C9/FUxNfjm6p8fTFcgZ0+MM+qP8k9+G/zYA1U 1by+3E8E7hB5c5/QXVWA6IPo7RojlanZbmblmPTGKZFFSs7eQJpmtHieiAeUzbNC Ptio79PFKcL3yTjHMK5PQdYV32ii6tC4 -----END CERTIFICATE-----Generated at Sun Apr 27 17:52:36 2025 by rpki-client