$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa File: 0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa (raw, json) Hash identifier: I8rYuLZIHhcG638mee0k8pQlUcpFRiw+5kFrO20oGIo= Subject key identifier: 5E:46:30:BD:1E:28:F7:5E:2A:8B:6D:B8:B6:0F:DC:51:7B:06:BD:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4AD4DA9E0A8D0346B0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 2603:3011:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:ad:4d:a9:e0:a8:d0:34:6b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=aff766b1-f164-4f2e-a529-08b8b86c6a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:10:6e:03:d4:3e:7c:d3:6c:0a:ab:24:52: d2:b4:7f:97:dd:5c:87:d4:87:cb:c8:a9:46:ac:e5: ef:df:67:51:00:85:4b:25:ed:3c:a4:2c:e1:3a:ee: 9f:7d:e1:28:be:6b:fc:e0:4a:67:10:03:43:d7:bd: 3d:27:1f:bc:a1:bc:0b:34:b1:04:70:9e:0c:4f:97: d1:ca:3b:75:9b:ca:cf:ca:2b:8a:61:e7:6d:5c:2e: 52:99:99:48:54:74:c3:99:d9:51:b7:84:a1:f8:d0: af:42:8b:75:58:3f:e2:7b:4b:f0:a5:c7:f2:f2:96: 5f:e0:46:6d:cf:31:93:a3:ec:62:fd:ee:c2:53:13: 46:48:6f:8e:cf:77:a9:4f:1c:fb:52:52:c0:4e:cb: 09:f4:22:ef:8c:f7:97:1b:5f:54:5c:b4:3d:7d:a0: 43:27:67:90:1a:63:02:cc:66:63:1b:65:9b:b4:6a: 16:85:d3:8c:7b:aa:77:d4:c4:78:b8:27:c2:e7:8d: 40:b0:e7:42:6d:bf:69:fe:b5:27:98:94:6f:b6:ef: fd:70:e0:2c:42:ca:0a:3d:f0:51:e9:03:64:b3:79: 5b:92:f9:be:d7:d8:2e:21:2c:26:c5:ac:a0:ce:98: 8a:61:b2:3a:c4:6e:aa:16:3e:07:b7:a3:cf:22:86: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:30:BD:1E:28:F7:5E:2A:8B:6D:B8:B6:0F:DC:51:7B:06:BD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3011:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f0:fd:71:75:80:5e:99:fe:9c:0d:32:df:3e:53:70:4d:dd: f2:1e:3d:1b:df:a9:f0:fe:fb:5e:76:28:40:82:5d:c8:6b:3d: 35:11:b4:9c:04:49:60:d9:94:6a:22:13:b9:19:ba:16:0a:a2: fc:c9:2c:0d:11:c7:92:b2:a5:50:25:d6:1a:2a:db:d0:4c:e2: c5:d7:ba:85:69:12:c5:f4:18:34:28:6e:c4:db:d1:56:0a:5b: 95:22:fa:5d:99:6c:50:96:8b:b3:dd:3c:05:89:24:93:b4:3b: a9:ca:2f:ff:60:05:2b:9c:a3:ea:a0:25:8f:18:0a:df:8c:4c: ec:a1:37:d4:28:15:37:2a:3d:ee:e4:04:0d:47:ed:58:e5:8a: ca:dc:ed:b4:8f:04:f5:40:5e:ed:ed:09:e0:e2:97:e0:c6:10: 3c:27:66:49:39:16:6a:e5:0e:36:ce:cb:c2:de:d7:31:0c:97: 1b:10:9f:1e:86:b3:7e:ce:6c:50:e5:18:3c:c0:00:4b:11:04: 62:51:70:80:97:d1:d8:72:e3:a2:b8:0e:98:fa:e1:06:fb:70: a5:9a:01:84:35:1c:02:9d:59:9a:f1:e9:55:f4:6f:24:e4:ad: 0e:e7:21:d3:4e:f2:b0:cc:39:e9:ba:cc:21:dd:43:30:25:5d: 09:4f:1a:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl9pK1NqeCo0DRrAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YWZmNzY2YjEtZjE2NC00ZjJlLWE1MjktMDhiOGI4NmM2YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4YQbgPUPnzTbAqrJFLStH+X3VyH1IfLyKlG rOXv32dRAIVLJe08pCzhOu6ffeEovmv84EpnEAND1709Jx+8obwLNLEEcJ4MT5fR yjt1m8rPyiuKYedtXC5SmZlIVHTDmdlRt4Sh+NCvQot1WD/ie0vwpcfy8pZf4EZt zzGTo+xi/e7CUxNGSG+Oz3epTxz7UlLATssJ9CLvjPeXG19UXLQ9faBDJ2eQGmMC zGZjG2WbtGoWhdOMe6p31MR4uCfC541AsOdCbb9p/rUnmJRvtu/9cOAsQsoKPfBR 6QNks3lbkvm+19guISwmxaygzpiKYbI6xG6qFj4Ht6PPIoYJrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF5GML0eKPdeKottuLYP3FF7Br0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM4ZDE1MmYtMmY4YS0z NzI3LTg5YTItNTlhMzJiMTBiZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwEQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfPD9cXWAXpn+nA0y3z5TcE3d8h49G9+p8P77XnYoQIJdyGs9NRG0 nARJYNmUaiITuRm6Fgqi/MksDRHHkrKlUCXWGirb0Ezixde6hWkSxfQYNChuxNvR VgpblSL6XZlsUJaLs908BYkkk7Q7qcov/2AFK5yj6qAljxgK34xM7KE31CgVNyo9 7uQEDUftWOWKytzttI8E9UBe7e0J4OKX4MYQPCdmSTkWauUONs7Lwt7XMQyXGxCf Hoazfs5sUOUYPMAASxEEYlFwgJfR2HLjorgOmPrhBvtwpZoBhDUcAp1ZmvHpVfRv JOStDuch007ysMw56brMId1DMCVdCU8axQ== -----END CERTIFICATE-----Generated at Sat Apr 12 09:29:59 2025 by rpki-client