$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa File: 2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa (raw, json) Hash identifier: V8/1MSF/osXZMBj8ZuHMNdb//1o0DSeRwnCqo65ZoOo= Subject key identifier: D7:CE:F9:1C:FA:29:19:3A:C0:65:74:A5:B9:33:C5:E4:C6:61:F9:52 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F432858494C5E38D2BE1D3720C4730660 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa Signing time: Mon 24 Mar 2025 21:25:06 +0000 ROA not before: Mon 24 Mar 2025 21:25:06 +0000 ROA not after: Sun 22 Jun 2025 21:25:06 +0000 asID: 10384 IP address blocks: 2604:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:5e:38:d2:be:1d:37:20:c4:73:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Mar 24 21:25:06 2025 GMT Not After : Jun 22 21:25:06 2025 GMT Subject: CN=38dddb0a-7530-44d3-a94c-2f3315fa81a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:21:30:83:56:30:b8:b5:d6:80:1b:5e:e4: 91:ad:02:d7:c0:3b:76:bb:cf:89:ec:7c:e3:a4:17: 3c:b0:60:98:89:9f:6d:6b:3b:39:11:11:de:f0:4e: ed:5d:21:37:b0:24:4d:56:88:c6:2a:27:39:33:77: 9b:56:9b:8e:ac:48:37:37:01:b6:9e:9d:89:23:0d: 07:85:c6:14:5e:fc:37:15:00:40:7a:d8:85:ef:92: 24:83:a4:e0:4f:a0:13:db:c1:d5:d6:c8:81:01:87: 3e:23:b9:1d:69:dd:54:e1:de:81:4c:e9:4f:33:da: e9:a7:f3:ed:4c:07:fb:5f:f5:f8:2c:aa:3e:a1:77: 8a:fd:a2:03:05:10:17:e3:a4:e4:19:94:0b:4c:48: d1:e8:fa:80:9f:d8:fd:14:93:fe:73:d1:62:2f:93: 11:43:7e:90:9f:53:57:59:f8:04:46:4b:c9:bc:bd: e5:2d:73:3d:71:3a:8f:d5:c6:fa:86:e9:d3:65:b1: 15:51:69:90:a7:2e:42:d8:4e:a5:f4:65:fe:41:12: fd:af:67:ee:37:45:c3:e1:8c:c4:81:6d:61:d5:df: 50:98:5f:de:63:9d:73:de:ab:bf:0e:26:f8:90:1f: f2:7e:5e:c4:07:13:cb:ef:70:54:81:72:18:9b:7c: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:F9:1C:FA:29:19:3A:C0:65:74:A5:B9:33:C5:E4:C6:61:F9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv6: 2604:700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:19:82:c0:fa:ef:66:84:fe:12:4a:e4:8f:19:a6:37:3e:7d: 71:72:8e:77:a7:06:c5:0b:ab:a0:c2:46:ee:12:54:b0:8d:72: 5f:56:58:0c:e6:27:c0:c6:a9:26:3b:64:0e:e7:d8:18:d3:08: 8a:53:5d:03:9f:c8:9b:3b:5d:0c:05:c4:10:27:24:36:75:4e: e0:79:f8:0e:d0:4b:68:7b:37:d1:f0:c4:9c:19:5a:b8:94:3b: 44:11:2c:54:33:8f:30:a1:97:91:00:56:45:f9:ca:23:b3:f8: 5f:2d:4b:82:66:b4:b6:43:32:90:16:9b:e8:e2:dd:47:3b:78: 0a:b5:3c:10:cf:6b:db:d5:a9:5a:1e:a2:32:25:71:80:6d:80: 6e:2f:be:1d:da:8f:06:0f:df:0a:e3:68:32:af:ed:04:50:44: e8:5c:ba:a5:e4:8b:d5:42:48:6b:2b:18:01:f8:32:9d:ce:5f: ae:37:40:7c:d8:14:9d:01:6d:8b:df:2a:c1:45:52:82:b0:36: 82:75:04:4c:28:31:43:d6:3d:84:03:a0:52:b7:9b:ee:a2:76: 15:c2:88:66:ec:fa:4b:42:09:2b:fc:f0:46:96:f9:ab:2d:8f: db:6c:7c:95:40:1b:68:94:53:3e:0a:39:5a:d0:1a:89:d6:f4: 33:ec:41:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElMXjjSvh03IMRzBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDMyNDIxMjUwNloXDTI1MDYyMjIxMjUwNlowLzEtMCsGA1UEAxMk MzhkZGRiMGEtNzUzMC00NGQzLWE5NGMtMmYzMzE1ZmE4MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGAhMINWMLi11oAbXuSRrQLXwDt2u8+J7Hzj pBc8sGCYiZ9tazs5ERHe8E7tXSE3sCRNVojGKic5M3ebVpuOrEg3NwG2np2JIw0H hcYUXvw3FQBAetiF75Ikg6TgT6AT28HV1siBAYc+I7kdad1U4d6BTOlPM9rpp/Pt TAf7X/X4LKo+oXeK/aIDBRAX46TkGZQLTEjR6PqAn9j9FJP+c9FiL5MRQ36Qn1NX WfgERkvJvL3lLXM9cTqP1cb6hunTZbEVUWmQpy5C2E6l9GX+QRL9r2fuN0XD4YzE gW1h1d9QmF/eY51z3qu/Dib4kB/yfl7EBxPL73BUgXIYm3zn6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNfO+Rz6KRk6wGV0pbkzxeTGYflSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvMmQ3ZGFhNTgtMjE4Zi0z OWFmLWIxYTYtZDgwMWMwYWE3OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXGYLA+u9mhP4SSuSPGaY3Pn1xco53pwbFC6ugwkbuElSwjXJfVlgM 5ifAxqkmO2QO59gY0wiKU10Dn8ibO10MBcQQJyQ2dU7gefgO0EtoezfR8MScGVq4 lDtEESxUM48woZeRAFZF+cojs/hfLUuCZrS2QzKQFpvo4t1HO3gKtTwQz2vb1ala HqIyJXGAbYBuL74d2o8GD98K42gyr+0EUEToXLql5IvVQkhrKxgB+DKdzl+uN0B8 2BSdAW2L3yrBRVKCsDaCdQRMKDFD1j2EA6BSt5vuonYVwohm7PpLQgkr/PBGlvmr LY/bbHyVQBtolFM+Cjla0BqJ1vQz7EGL -----END CERTIFICATE-----Generated at Sun May 4 04:39:40 2025 by rpki-client