$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e7dafe-8e6d-3250-a76e-e6a181e85d6f.roa File: 12e7dafe-8e6d-3250-a76e-e6a181e85d6f.roa (raw, json) Hash identifier: Mt1xQVUbeeEflfKpRr4DxfWrgwiYh169+A8hhLTdQh0= Subject key identifier: 4C:65:D2:7D:F1:39:48:4D:AC:3B:C8:36:65:BF:24:D0:87:C6:42:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8D3995803F248F9FB4380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e7dafe-8e6d-3250-a76e-e6a181e85d6f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 2603:2400:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:d3:99:58:03:f2:48:f9:fb:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ee41f346-b741-45fc-9239-8cadc9ab3e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:6a:65:61:24:62:89:af:b1:74:f5:c9:1c: 31:57:34:f5:89:01:26:14:b4:53:e7:f6:75:ac:1d: f0:9f:4e:87:14:73:d8:93:e4:84:c9:cc:5f:5a:32: 56:49:37:b7:a9:05:3d:3e:b0:11:36:85:0b:c3:ce: 38:5c:e5:5a:c9:b1:fc:98:45:97:fa:ea:23:55:56: 81:80:24:71:47:cd:43:e3:44:ac:8e:68:85:7b:c6: 2c:28:6f:18:65:3e:7c:57:5a:ee:fb:d3:58:90:aa: 6b:ca:85:a5:cc:70:79:b2:4a:05:72:d8:58:d6:49: 2b:3b:c1:1b:61:06:f3:6e:53:f8:e9:23:f2:8e:18: d6:35:cc:bd:e2:64:63:74:66:ce:fd:d8:3b:34:22: 49:71:43:f1:bf:7f:29:79:e5:36:a5:75:06:9d:03: b7:c3:18:26:ca:b1:a1:4d:6b:93:71:c7:2f:26:6b: 71:84:b5:b7:39:51:f5:56:1e:98:1f:ef:9d:c4:50: 7b:69:c1:0c:43:ab:78:7b:7a:b3:e1:4c:80:6d:71: 6f:0d:6b:0b:03:15:3e:95:dc:d9:a3:85:33:3e:89: 98:60:a6:91:49:87:00:75:33:01:ce:6f:8c:ce:cd: ef:6e:74:8b:00:a6:6e:68:f3:8c:f5:e0:aa:b7:f3: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:65:D2:7D:F1:39:48:4D:AC:3B:C8:36:65:BF:24:D0:87:C6:42:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e7dafe-8e6d-3250-a76e-e6a181e85d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2400:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:66:4a:5c:7a:9b:c2:a4:84:bc:7c:95:c8:d3:10:f8:07:f6: b6:93:cb:68:25:0f:a4:1e:11:43:7d:e7:b5:72:07:80:eb:bc: e3:2c:30:a5:a6:ae:28:6c:6e:9c:b1:35:9c:21:b8:d0:86:b6: b7:1e:b1:25:6b:30:f1:cc:19:62:9d:c7:47:bf:f9:c5:d4:9e: 99:78:a3:a3:ab:dc:ce:f3:53:a8:89:92:46:85:07:e5:62:56: de:b5:26:c7:a2:fd:cb:45:fb:82:89:59:1c:42:a7:78:2a:3d: b7:91:c7:7c:b9:77:94:66:4b:f6:76:05:4d:14:bd:8d:21:08: 5d:fb:87:f5:5b:d3:a1:5f:2a:bc:7b:45:3a:a4:76:53:fd:2f: 04:14:58:5e:0d:81:7b:08:01:00:86:be:03:cd:3e:6c:b1:67: b8:54:12:6b:ca:53:62:3a:0e:41:c3:83:d8:e5:73:0d:4d:b0: 21:7a:f8:27:c1:07:15:e5:42:51:5d:93:9b:bf:f8:9b:2c:d2: b0:29:1c:f5:61:5e:b0:09:54:74:d3:9b:72:1f:9a:5a:72:5b: 22:0e:2f:b6:2d:39:f6:24:a0:b3:33:da:9c:2d:e8:26:5d:02: 43:95:bc:7e:7d:c4:d8:4e:df:cf:bb:8b:b2:cf:70:f4:4d:4c: 0a:40:7c:1b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj0+NOZWAPySPn7Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWU0MWYzNDYtYjc0MS00NWZjLTkyMzktOGNhZGM5YWIzZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpxqZWEkYomvsXT1yRwxVzT1iQEmFLRT5/Z1 rB3wn06HFHPYk+SEycxfWjJWSTe3qQU9PrARNoULw844XOVaybH8mEWX+uojVVaB gCRxR81D40SsjmiFe8YsKG8YZT58V1ru+9NYkKpryoWlzHB5skoFcthY1kkrO8Eb YQbzblP46SPyjhjWNcy94mRjdGbO/dg7NCJJcUPxv38peeU2pXUGnQO3wxgmyrGh TWuTcccvJmtxhLW3OVH1Vh6YH++dxFB7acEMQ6t4e3qz4UyAbXFvDWsLAxU+ldzZ o4UzPomYYKaRSYcAdTMBzm+Mzs3vbnSLAKZuaPOM9eCqt/OdWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFExl0n3xOUhNrDvINmW/JNCHxkJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJlN2RhZmUtOGU2ZC0z MjUwLWE3NmUtZTZhMTgxZTg1ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkAMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAs2ZKXHqbwqSEvHyVyNMQ+Af2tpPLaCUPpB4RQ33ntXIHgOu84yww paauKGxunLE1nCG40Ia2tx6xJWsw8cwZYp3HR7/5xdSemXijo6vczvNTqImSRoUH 5WJW3rUmx6L9y0X7golZHEKneCo9t5HHfLl3lGZL9nYFTRS9jSEIXfuH9VvToV8q vHtFOqR2U/0vBBRYXg2BewgBAIa+A80+bLFnuFQSa8pTYjoOQcOD2OVzDU2wIXr4 J8EHFeVCUV2Tm7/4myzSsCkc9WFesAlUdNObch+aWnJbIg4vti059iSgszPanC3o Jl0CQ5W8fn3E2E7fz7uLss9w9E1MCkB8Gw== -----END CERTIFICATE-----Generated at Mon Apr 7 05:50:56 2025 by rpki-client