$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json) Hash identifier: inXcdkAc9gxmJPoToth7vbsGmOHbCylLnNbGOWEtI0I= Subject key identifier: 8D:A2:CE:0C:7E:98:D2:F5:80:26:5C:19:5F:90:3F:B4:65:C8:CB:36 Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Certificate serial: 010D0C9F4328584A2ABAE5390D9ADB0275E09860 Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 399494 IP address blocks: 2604:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e5:39:0d:9a:db:02:75:e0:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=db1caef9-2c21-48c0-93d5-2e850ab22c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:43:6c:6e:53:f6:83:e3:68:ba:50:5d:01: 42:94:e4:bb:0c:51:6d:81:ca:2b:b8:d7:30:1b:aa: 92:36:38:fb:1e:d9:54:3a:e6:34:ce:59:30:cd:a0: 09:71:eb:d2:22:bc:98:cf:72:4c:81:f9:8a:df:ea: c5:33:bd:8d:13:d0:4e:cd:f3:fe:37:ac:72:40:bd: 87:64:e5:0a:54:04:16:8e:e2:35:8b:c7:56:eb:6e: bc:11:bf:e9:3a:7d:91:33:7c:2f:00:bd:04:ff:f0: da:da:a8:06:40:41:63:20:93:43:3e:0a:fc:ad:df: f7:8a:61:72:d2:b0:7a:74:c6:f0:81:10:ce:29:2a: 4c:03:5b:64:c0:d9:20:69:1d:26:58:a1:86:39:3f: 96:fb:42:5b:68:cd:12:17:25:12:3c:d1:36:f2:6a: 9b:5c:8f:db:67:ed:46:01:b0:fa:c4:e0:8d:15:06: 10:3d:cc:28:2d:80:cb:13:4a:43:6c:74:10:b9:9b: 25:ff:19:b8:d1:bc:7c:39:fd:b4:2c:ea:26:1a:5a: 6c:4a:29:fb:6d:c4:4d:60:a0:a4:2e:68:44:e2:e3: 23:6c:5a:5a:d9:3e:ba:3e:85:64:9a:70:05:7e:c1: 0f:6c:b1:e8:cc:18:6f:cd:34:d5:7e:05:0c:75:5b: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:CE:0C:7E:98:D2:F5:80:26:5C:19:5F:90:3F:B4:65:C8:CB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl X509v3 Authority Key Identifier: keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer sbgp-ipAddrBlock: critical IPv6: 2604:3b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:40:d6:25:06:75:80:34:7d:e1:0a:77:bd:71:50:4b:d5:5b: a8:b5:7f:fb:28:3c:0d:51:f2:09:83:c8:23:f4:83:e7:87:78: a7:07:bc:0e:ed:ba:85:ad:c9:f2:67:7d:e5:87:3a:28:5c:20: 2f:94:90:b1:ea:10:b0:8e:0a:56:3d:aa:94:f8:00:d2:54:aa: dc:49:4c:a7:49:b5:0e:ce:cb:84:cd:52:3e:47:44:1b:3c:b7: 4c:4a:e8:17:55:38:e4:9e:74:a7:1c:c7:6a:91:66:df:dc:c2: 5f:08:05:f3:be:85:e4:c5:67:ab:57:7f:bf:97:39:da:4a:9b: 36:41:f1:c9:b5:64:e0:3c:fd:23:32:4f:40:3e:2e:16:9b:15: 6b:ae:f3:32:9e:1b:26:86:c7:99:6b:2c:d9:a8:ae:2c:35:cb: 27:82:cf:5f:6d:53:4b:07:64:7a:8d:9a:36:59:c4:ad:40:9a: 2b:ce:26:05:98:1f:7c:c0:3c:1e:43:a0:33:1d:1d:a2:8c:d2: fa:66:29:f8:a6:dd:74:f7:a8:60:00:9a:5e:e6:eb:4d:ce:01: ae:c3:77:70:4f:d0:19:38:e4:bf:c6:da:57:eb:ee:19:cb:99: 02:d1:e3:06:79:d7:c1:b4:7b:63:87:d0:4e:4c:d8:72:5c:c5: ef:e1:dd:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoquuU5DZrbAnXgmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYjM4OTctZmQxNC00OGVlLWFkODQtODEyYzQwOGNm NDZlMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGIxY2FlZjktMmMyMS00OGMwLTkzZDUtMmU4NTBhYjIyYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhDbG5T9oPjaLpQXQFClOS7DFFtgcoruNcw G6qSNjj7HtlUOuY0zlkwzaAJcevSIryYz3JMgfmK3+rFM72NE9BOzfP+N6xyQL2H ZOUKVAQWjuI1i8dW6268Eb/pOn2RM3wvAL0E//Da2qgGQEFjIJNDPgr8rd/3imFy 0rB6dMbwgRDOKSpMA1tkwNkgaR0mWKGGOT+W+0JbaM0SFyUSPNE28mqbXI/bZ+1G AbD6xOCNFQYQPcwoLYDLE0pDbHQQuZsl/xm40bx8Of20LOomGlpsSin7bcRNYKCk LmhE4uMjbFpa2T66PoVkmnAFfsEPbLHozBhvzTTVfgUMdVsrpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2izgx+mNL1gCZcGV+QP7RlyMs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Zi Mzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJjNDA4Y2Y0NmUvNDEwYjc0NjctOGRjMS0z NDNkLWJlNjItNmVjYTU5NTQxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNmYjM4OTctZmQxNC00OGVlLWFk ODQtODEyYzQwOGNmNDZlL2MzZmIzODk3LWZkMTQtNDhlZS1hZDg0LTgxMmM0MDhj ZjQ2ZS5jcmwwHwYDVR0jBBgwFoAUgZwK5yjcYjVE9BCFuNcSWRpX3fYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2ZiMzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJj NDA4Y2Y0NmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpQNYlBnWANH3hCne9cVBL1VuotX/7KDwNUfIJg8gj9IPnh3inB7wO 7bqFrcnyZ33lhzooXCAvlJCx6hCwjgpWPaqU+ADSVKrcSUynSbUOzsuEzVI+R0Qb PLdMSugXVTjknnSnHMdqkWbf3MJfCAXzvoXkxWerV3+/lznaSps2QfHJtWTgPP0j Mk9APi4WmxVrrvMynhsmhseZayzZqK4sNcsngs9fbVNLB2R6jZo2WcStQJorziYF mB98wDweQ6AzHR2ijNL6Zin4pt1096hgAJpe5utNzgGuw3dwT9AZOOS/xtpX6+4Z y5kC0eMGedfBtHtjh9BOTNhyXMXv4d2A -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:30 2025 by rpki-client