$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa File: 0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa (raw, json) Hash identifier: 2S1uoGaUqdKccXBxbRHPKSyp6yCkDszSv3YRD+cGAeo= Subject key identifier: EC:5B:82:3D:0C:12:29:20:94:24:9D:90:6A:7D:0D:03:DA:DC:3C:5F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849A1EF774C73D5098FDEB8F880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 8070 IP address blocks: 2603:1063:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:77:4c:73:d5:09:8f:de:b8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8d4df399-8f8c-49ec-96a7-7e92489865c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:f1:5b:d2:4d:b5:f5:9e:3d:99:94:ab:0d: 78:11:89:36:2b:5c:f7:0c:59:42:26:99:03:b6:f8: d6:e7:d3:7e:7e:33:f8:a6:37:68:cd:91:e1:94:c0: 8c:4a:33:69:d5:bb:82:32:25:93:ef:95:26:c1:91: 31:c6:1e:48:a3:b5:d6:80:38:20:51:71:85:2e:78: 9e:8f:40:9d:3e:6d:a8:09:4c:2a:28:55:d7:cf:88: 16:5d:cb:e7:f4:48:c1:40:62:8c:b1:71:ce:d9:95: b2:cc:6a:bd:8a:76:5d:63:cd:a7:e8:fc:9f:74:f7: 68:56:29:9b:85:36:b8:04:88:f0:fa:9c:b3:39:c9: b9:48:f6:bc:7e:c5:ba:ef:dc:cd:cd:16:27:93:04: db:83:85:c8:7a:13:c8:a2:e5:17:1f:97:2a:d7:96: c6:1b:b7:a6:3f:81:aa:a7:d9:1a:e2:50:4d:45:b4: b7:32:66:56:72:5c:cf:2c:12:f5:d3:31:43:50:80: 13:00:f8:8d:c8:b5:25:89:1b:c0:e8:d3:18:e5:8b: ff:cd:b1:79:94:07:08:08:1a:0e:b4:30:89:0b:51: 9f:a9:52:42:b7:0b:63:98:64:b1:1c:dd:44:ff:32: c7:3f:a8:db:6b:69:f9:ae:af:54:12:dc:2a:cc:68: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5B:82:3D:0C:12:29:20:94:24:9D:90:6A:7D:0D:03:DA:DC:3C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1063:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1a:ee:21:63:d0:92:df:2b:73:46:7a:8c:3a:61:cb:cd:36: 1f:f1:0e:f1:94:b8:05:bf:ef:85:da:08:6c:4b:41:71:1a:dd: 84:f4:72:41:59:f9:cc:7c:86:00:df:7b:c6:df:48:73:b3:37: 5d:18:3f:63:d0:8f:4d:6c:ec:8d:6e:48:02:24:d9:86:0b:a6: 78:b7:93:34:a9:b9:bc:b6:6a:05:bd:d9:0f:be:b2:c3:db:ed: dd:f8:0d:13:3b:0f:0c:ff:d7:16:37:c3:a6:60:d4:73:e7:b9: d3:0b:73:1b:e5:eb:10:e2:10:54:46:e7:6c:5a:f8:48:09:f0: 14:7b:b2:1f:1d:8d:10:09:5e:68:f2:4f:f5:70:ae:44:63:3a: 31:0c:af:a3:b2:98:d8:03:57:01:a7:ec:96:b4:8f:3c:75:b4: 9a:c6:52:01:9a:a6:e3:58:3f:c9:7a:9a:36:b6:5b:1d:7b:10: a7:af:60:23:03:07:f5:47:49:15:6f:5e:c6:88:56:af:40:8c: 1f:f0:1c:bc:5e:77:33:94:c0:f0:85:2a:93:36:32:30:20:2a: 27:3c:78:c7:a7:52:8e:41:32:55:1a:6d:6a:73:a6:f4:9e:01: 35:0f:25:26:77:7c:26:95:cd:f8:07:28:96:83:56:21:f4:ad: 95:cc:54:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh73dMc9UJj964+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGQ0ZGYzOTktOGY4Yy00OWVjLTk2YTctN2U5MjQ4OTg2NWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uzxW9JNtfWePZmUqw14EYk2K1z3DFlCJpkD tvjW59N+fjP4pjdozZHhlMCMSjNp1buCMiWT75UmwZExxh5Io7XWgDggUXGFLnie j0CdPm2oCUwqKFXXz4gWXcvn9EjBQGKMsXHO2ZWyzGq9inZdY82n6PyfdPdoVimb hTa4BIjw+pyzOcm5SPa8fsW679zNzRYnkwTbg4XIehPIouUXH5cq15bGG7emP4Gq p9ka4lBNRbS3MmZWclzPLBL10zFDUIATAPiNyLUliRvA6NMY5Yv/zbF5lAcICBoO tDCJC1GfqVJCtwtjmGSxHN1E/zLHP6jba2n5rq9UEtwqzGj19wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOxbgj0MEikglCSdkGp9DQPa3DxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNmYWE3MWItYTNiNS0z ZDhlLTg4MTEtOTk4OWNjYTMzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMQYyEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYxruIWPQkt8rc0Z6jDphy802H/EO8ZS4Bb/vhdoIbEtBcRrdhPRy QVn5zHyGAN97xt9Ic7M3XRg/Y9CPTWzsjW5IAiTZhgumeLeTNKm5vLZqBb3ZD76y w9vt3fgNEzsPDP/XFjfDpmDUc+e50wtzG+XrEOIQVEbnbFr4SAnwFHuyHx2NEAle aPJP9XCuRGM6MQyvo7KY2ANXAafslrSPPHW0msZSAZqm41g/yXqaNrZbHXsQp69g IwMH9UdJFW9exohWr0CMH/AcvF53M5TA8IUqkzYyMCAqJzx4x6dSjkEyVRptanOm 9J4BNQ8lJnd8JpXN+AcoloNWIfStlcxUMg== -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:19 2025 by rpki-client