$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa File: 38a03247-5407-3471-a614-36ff41fe4307.roa (raw, json) Hash identifier: 9YULA/k62Y6PXEwKqEjzKNGrn+eqHZpNgKkyYHzQSxQ= Subject key identifier: A9:CB:87:E8:1D:0F:7F:60:33:D6:3D:AB:69:21:D8:F5:18:A7:8E:F7 Certificate issuer: /CN=ae459c49-adf3-48bc-a738-d940977d540e Certificate serial: 010D0C9F4328584944692C38F99B600D3C811F00 Authority key identifier: B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 21976 IP address blocks: 2620:3a:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2c:38:f9:9b:60:0d:3c:81:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae459c49-adf3-48bc-a738-d940977d540e Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=90e0d35c-40c5-4f4e-a42d-fca145bc11b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:74:09:6e:fa:ab:c2:c6:32:ae:b6:1a:a0:cf: e5:48:83:bd:0d:6c:e9:e7:e8:f6:9e:f6:e8:a9:ea: 12:29:3b:0e:9a:db:42:ea:30:50:e2:66:31:b5:52: 23:4d:4c:08:92:75:92:7e:5e:ea:cf:4f:fc:9a:5f: 27:84:c5:4a:1e:81:fb:d2:9c:3b:6a:99:5f:81:61: 21:6a:93:84:5a:c9:8e:49:dd:3b:92:46:ae:d3:d3: 66:d9:1b:fc:a9:0a:d1:64:76:62:05:a4:eb:62:12: ca:1a:f0:c1:6d:ce:5d:43:91:25:20:6a:85:0b:43: a7:1c:fc:1d:57:7e:b1:31:04:90:c6:f7:2f:3b:7a: 3c:97:2f:43:5e:30:33:f8:be:be:da:0f:ee:9d:b6: 59:ff:75:e4:b6:d3:14:13:39:80:6e:a4:30:b5:6d: fc:3a:25:da:f4:16:79:00:50:c4:dd:08:97:f7:63: f4:e7:1d:99:52:cd:df:98:8a:4d:f9:95:93:dc:c3: 61:85:cc:dd:7f:0e:ee:64:99:18:a3:d2:ee:2b:ed: 60:9f:be:d6:88:1e:d8:f2:35:32:b8:1b:e1:59:12: 5c:90:1d:e4:75:88:61:d9:7d:bf:01:cb:de:cd:58: 99:47:af:1a:b1:8f:91:13:e1:17:e9:ae:be:9c:d5: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CB:87:E8:1D:0F:7F:60:33:D6:3D:AB:69:21:D8:F5:18:A7:8E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.crl X509v3 Authority Key Identifier: keyid:B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer sbgp-ipAddrBlock: critical IPv6: 2620:3a:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f7:09:53:27:1d:65:9d:9b:89:d8:83:8e:ff:c2:d0:dc:7c: 42:31:d6:77:72:6d:f3:97:c2:4c:52:ca:94:1a:a5:82:e1:ec: 97:c3:35:07:66:ad:65:ef:bd:ba:6b:cb:dd:79:fb:ad:09:60: e9:d3:d3:6a:b6:f9:49:58:87:a6:b2:c5:d8:d3:9d:22:2a:76: 60:16:b2:34:65:14:4a:86:a0:fc:f9:61:61:65:cf:ff:e5:72: a1:dd:21:3a:b3:43:c3:69:ab:74:52:6f:bb:be:c5:65:ec:34: 98:17:49:c0:11:84:db:7e:01:3b:94:93:6d:7b:3d:81:87:70: 5c:b6:a8:09:93:f8:ef:cf:e6:b7:18:ca:72:7f:66:1d:21:12: 31:4d:aa:a5:61:38:42:36:b8:a0:42:d3:39:50:3c:43:de:8f: 30:2e:68:91:7e:42:05:97:c7:bb:89:d3:d4:26:9d:0a:b2:58: b9:69:82:05:0b:8d:49:e4:fd:d4:e0:66:2e:46:d9:b3:b8:3c: f5:0a:10:18:9b:e1:79:3f:ed:e3:29:e1:75:55:ff:6f:3b:a6: 8e:95:7a:6b:fc:1a:0e:1c:4a:13:ea:d9:8c:ae:89:93:c1:79: 07:fd:23:2b:22:b3:ea:43:35:e5:e9:3b:a2:a4:f6:29:f8:c6: f4:2a:70:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaSw4+ZtgDTyBHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0NTljNDktYWRmMy00OGJjLWE3MzgtZDk0MDk3N2Q1 NDBlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OTBlMGQzNWMtNDBjNS00ZjRlLWE0MmQtZmNhMTQ1YmMxMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnQJbvqrwsYyrrYaoM/lSIO9DWzp5+j2nvbo qeoSKTsOmttC6jBQ4mYxtVIjTUwIknWSfl7qz0/8ml8nhMVKHoH70pw7aplfgWEh apOEWsmOSd07kkau09Nm2Rv8qQrRZHZiBaTrYhLKGvDBbc5dQ5ElIGqFC0OnHPwd V36xMQSQxvcvO3o8ly9DXjAz+L6+2g/unbZZ/3XkttMUEzmAbqQwtW38OiXa9BZ5 AFDE3QiX92P05x2ZUs3fmIpN+ZWT3MNhhczdfw7uZJkYo9LuK+1gn77WiB7Y8jUy uBvhWRJckB3kdYhh2X2/AcvezViZR68asY+RE+EX6a6+nNViIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnLh+gdD39gM9Y9q2kh2PUYp473MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZTQ1 OWM0OS1hZGYzLTQ4YmMtYTczOC1kOTQwOTc3ZDU0MGUvMzhhMDMyNDctNTQwNy0z NDcxLWE2MTQtMzZmZjQxZmU0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWU0NTljNDktYWRmMy00OGJjLWE3 MzgtZDk0MDk3N2Q1NDBlL2FlNDU5YzQ5LWFkZjMtNDhiYy1hNzM4LWQ5NDA5Nzdk NTQwZS5jcmwwHwYDVR0jBBgwFoAUsO4wMU3oE12cT17SQ63RV+wyXV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZTQ1OWM0OS1hZGYzLTQ4YmMtYTczOC1kOTQw OTc3ZDU0MGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOsAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/3CVMnHWWdm4nYg47/wtDcfEIx1ndybfOXwkxSypQapYLh7JfD NQdmrWXvvbpry915+60JYOnT02q2+UlYh6ayxdjTnSIqdmAWsjRlFEqGoPz5YWFl z//lcqHdITqzQ8Npq3RSb7u+xWXsNJgXScARhNt+ATuUk217PYGHcFy2qAmT+O/P 5rcYynJ/Zh0hEjFNqqVhOEI2uKBC0zlQPEPejzAuaJF+QgWXx7uJ09QmnQqyWLlp ggULjUnk/dTgZi5G2bO4PPUKEBib4Xk/7eMp4XVV/287po6Vemv8Gg4cShPq2Yyu iZPBeQf9Iysis+pDNeXpO6Kk9in4xvQqcHM= -----END CERTIFICATE-----Generated at Tue Apr 29 07:56:50 2025 by rpki-client