$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa File: 3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json) Hash identifier: IZTf7JmTBJjN+7GqUzek5W9rWcEj8EOP7FymhY9S/08= Subject key identifier: 6A:01:C9:FE:C2:60:E5:2E:08:FC:8A:60:3C:4A:87:E5:DB:0E:95:A5 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858495EEEED05B2131C7CA394ED00 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ed:05:b2:13:1c:7c:a3:94:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=1a470dc2-8366-4280-a3a7-c64bfb7cf308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:e8:95:bd:aa:1e:80:aa:2b:cc:93:ca:f5: 27:c2:2e:2a:d2:df:e3:96:29:d7:0b:20:f6:d9:cd: f7:61:0f:7f:9f:dc:4b:1b:d2:a4:8f:22:fc:c4:53: 4c:95:94:89:1a:0c:bc:29:0c:4f:20:46:89:27:81: c3:68:05:66:08:ea:c0:ab:6e:91:74:54:65:27:93: b9:7d:95:2e:e7:7b:10:55:d2:5c:75:71:c8:48:98: b8:4a:1e:3b:16:b1:94:a4:e4:b6:6f:6b:76:4a:24: 5f:ef:d3:6c:d2:cc:3c:fe:ca:99:8f:2d:6c:23:53: 26:50:25:80:f3:82:31:be:52:d3:8e:6f:10:e5:f9: 64:80:ac:ba:05:f0:ec:c7:af:ce:90:cc:44:34:56: dd:a9:b5:f1:a5:17:b4:ae:f5:d1:55:dc:38:47:e3: 20:37:a8:58:a7:8b:2c:ae:26:d0:bb:4e:f3:33:58: 00:e7:90:c8:80:54:cd:e6:d5:23:e5:c5:8d:de:02: 1c:6d:c5:ef:fc:09:44:92:f9:a8:53:1b:80:6e:b9: 4e:a2:cb:10:ac:79:a0:99:08:02:30:cb:f5:08:c8: 3e:0d:24:37:de:4f:ea:4e:a6:48:28:92:19:b2:35: 94:3d:4d:00:f4:a0:4e:d9:1a:73:60:df:cd:5a:9f: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:C9:FE:C2:60:E5:2E:08:FC:8A:60:3C:4A:87:E5:DB:0E:95:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:07:95:d2:21:23:3f:0b:21:df:48:d0:6c:d3:f4:f5:6a:61: 8f:05:86:9f:ae:0b:bd:c9:36:e9:87:0e:50:3e:15:57:64:02: e4:fd:55:f8:71:ee:45:22:f6:44:21:f4:e8:f5:15:c6:ab:94: 3d:2c:04:f6:c2:b5:e6:98:b0:f4:2f:04:64:47:e3:33:7e:43: f1:75:a3:ff:84:37:51:53:f9:d8:28:1c:c9:b7:55:0d:a1:45: e4:d1:db:52:af:90:ac:17:5d:52:df:22:4f:21:29:40:cc:f3: df:d2:4d:aa:73:12:8e:c4:6c:83:40:b9:45:48:2d:03:c7:3e: 21:46:02:1e:7a:66:64:39:02:db:2d:a2:14:8a:19:1f:33:52: 8a:29:cf:f8:ac:91:ad:2b:5b:d1:5e:7b:6e:22:54:ff:6e:8e: e5:7f:f5:4f:b4:1d:fc:db:25:c4:c0:bc:85:b6:07:1e:2f:67: 87:09:20:c6:d0:bc:82:8f:50:1a:28:5d:d4:1e:57:23:6d:e1: 34:10:74:0d:69:0a:d2:5f:ab:39:a9:25:f6:b4:17:2b:08:c1: 60:ed:67:02:6f:bf:b5:79:65:08:cc:92:72:33:09:94:f0:b0: 21:1b:4a:97:82:95:41:11:13:ca:47:81:c8:7d:0b:c6:36:d9: 50:7d:79:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEle7u0FshMcfKOU7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MWE0NzBkYzItODM2Ni00MjgwLWEzYTctYzY0YmZiN2NmMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPjolb2qHoCqK8yTyvUnwi4q0t/jlinXCyD2 2c33YQ9/n9xLG9KkjyL8xFNMlZSJGgy8KQxPIEaJJ4HDaAVmCOrAq26RdFRlJ5O5 fZUu53sQVdJcdXHISJi4Sh47FrGUpOS2b2t2SiRf79Ns0sw8/sqZjy1sI1MmUCWA 84IxvlLTjm8Q5flkgKy6BfDsx6/OkMxENFbdqbXxpRe0rvXRVdw4R+MgN6hYp4ss ribQu07zM1gA55DIgFTN5tUj5cWN3gIcbcXv/AlEkvmoUxuAbrlOossQrHmgmQgC MMv1CMg+DSQ33k/qTqZIKJIZsjWUPU0A9KBO2RpzYN/NWp983QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGoByf7CYOUuCPyKYDxKh+XbDpWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACAeV0iEjPwsh30jQbNP09WphjwWGn64Lvck26YcOUD4VV2QC5P1V +HHuRSL2RCH06PUVxquUPSwE9sK15piw9C8EZEfjM35D8XWj/4Q3UVP52CgcybdV DaFF5NHbUq+QrBddUt8iTyEpQMzz39JNqnMSjsRsg0C5RUgtA8c+IUYCHnpmZDkC 2y2iFIoZHzNSiinP+KyRrStb0V57biJU/26O5X/1T7Qd/NslxMC8hbYHHi9nhwkg xtC8go9QGihd1B5XI23hNBB0DWkK0l+rOakl9rQXKwjBYO1nAm+/tXllCMyScjMJ lPCwIRtKl4KVQRETykeByH0LxjbZUH15Rg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:19 2025 by rpki-client