$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa File: 3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa (raw, json) Hash identifier: gxnzLVJTyeV4HiVfFyGn+opYGPg+EVKORSlOlqSAYe0= Subject key identifier: 38:FD:B5:66:B9:BA:90:0A:9B:7A:7F:04:B3:44:8C:67:B1:81:B5:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4300E9FDFCDC6FA7AED3D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2603:2191:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:0e:9f:df:cd:c6:fa:7a:ed:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f66a22de-2521-47eb-b7ce-5fc04bb33293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:24:d6:ee:28:47:c3:39:ba:52:17:69:9d:da: d2:e3:d2:64:6e:d8:93:ea:f2:28:37:18:6d:4b:99: ad:c5:ab:55:67:45:c4:b5:f9:d3:2a:59:b0:77:42: b5:50:1b:c5:9e:c2:9a:2c:38:1f:39:bb:7d:14:11: 8b:ae:e4:bc:47:ea:75:bc:64:14:7f:cf:e0:c0:24: 68:11:10:17:d5:58:d9:0f:39:4f:db:21:88:a4:da: 67:27:e4:02:78:66:a3:a9:8f:46:b9:cf:64:0e:3c: 48:09:f9:f5:e6:e7:52:3f:ea:f4:d1:c1:82:4a:b7: 9c:d5:98:b4:2f:00:3f:a0:21:00:ff:53:4c:08:4a: 0c:f6:84:6a:44:91:21:22:b0:a4:8e:4a:ae:c3:70: 06:0f:95:79:b2:4b:23:f4:3f:af:a8:11:57:0d:d2: 47:36:ce:7a:c7:5b:1d:e4:c7:6a:38:ba:ee:fe:ce: 7a:82:26:8b:c4:85:d4:18:67:be:d1:67:49:b7:4f: ef:06:e0:5c:63:95:3f:20:42:82:50:01:f7:85:70: 86:2a:93:62:48:f4:8a:d6:55:25:0e:91:14:35:90: 76:26:d2:4c:d1:d7:6e:fa:52:67:1e:da:5f:5f:d5: 63:7f:1d:55:ba:21:9c:e0:70:a7:34:4f:88:e3:0b: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FD:B5:66:B9:BA:90:0A:9B:7A:7F:04:B3:44:8C:67:B1:81:B5:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2191:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d4:ba:34:c7:6d:a1:bd:0b:d6:33:a5:e2:1c:42:8f:54:f5: ac:a2:91:49:b6:f8:1e:02:bc:bb:b8:10:45:22:f6:a1:11:b9: 2c:3d:08:c4:01:f1:26:11:68:5c:c7:0e:dc:93:3d:df:4b:08: 1b:f2:ca:a7:2b:e3:56:50:7e:49:4a:d0:52:3d:96:cf:01:31: 35:22:76:a4:18:25:47:84:3d:63:3f:b6:b5:94:4d:6e:df:92: c2:dd:ac:be:0f:8e:8b:68:8b:1c:87:b2:22:21:b3:4d:98:da: 6d:a2:90:2c:ad:8f:a5:65:50:d4:d8:8b:ac:45:1e:16:d3:0c: 78:73:64:32:39:fa:0b:d2:9a:56:47:81:86:98:c1:1f:4b:6c: 96:02:ec:cc:40:c4:79:7d:2a:b7:05:63:ee:26:c7:f7:da:a9: 6c:f6:ec:e4:56:79:c3:25:ec:63:2d:95:fa:a7:6f:88:70:c2: 7c:d4:cd:43:fe:dd:42:3b:ec:df:62:7a:78:50:64:fe:f3:bd: 7a:95:69:59:02:b4:05:4e:77:a7:3e:63:0d:57:ad:33:d5:05: 0c:09:f2:4c:34:69:43:a0:68:8e:ff:8a:62:13:52:dc:cc:72: 6d:d4:98:a2:ff:a8:71:02:c5:6d:d2:a9:b9:10:e3:08:de:b9: 99:33:87:58 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMA6f383G+nrtPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjY2YTIyZGUtMjUyMS00N2ViLWI3Y2UtNWZjMDRiYjMzMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSTW7ihHwzm6UhdpndrS49JkbtiT6vIoNxht S5mtxatVZ0XEtfnTKlmwd0K1UBvFnsKaLDgfObt9FBGLruS8R+p1vGQUf8/gwCRo ERAX1VjZDzlP2yGIpNpnJ+QCeGajqY9Guc9kDjxICfn15udSP+r00cGCSrec1Zi0 LwA/oCEA/1NMCEoM9oRqRJEhIrCkjkquw3AGD5V5sksj9D+vqBFXDdJHNs56x1sd 5MdqOLru/s56giaLxIXUGGe+0WdJt0/vBuBcY5U/IEKCUAH3hXCGKpNiSPSK1lUl DpEUNZB2JtJM0ddu+lJnHtpfX9Vjfx1VuiGc4HCnNE+I4wvvzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDj9tWa5upAKm3p/BLNEjGexgbUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhY2Q1NTMtYzZlNi0z YTQzLTk3NGItYWM4N2NiZjJkNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhkUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAptS6NMdtob0L1jOl4hxCj1T1rKKRSbb4HgK8u7gQRSL2oRG5LD0I xAHxJhFoXMcO3JM930sIG/LKpyvjVlB+SUrQUj2WzwExNSJ2pBglR4Q9Yz+2tZRN bt+Swt2svg+Oi2iLHIeyIiGzTZjabaKQLK2PpWVQ1NiLrEUeFtMMeHNkMjn6C9Ka VkeBhpjBH0tslgLszEDEeX0qtwVj7ibH99qpbPbs5FZ5wyXsYy2V+qdviHDCfNTN Q/7dQjvs32J6eFBk/vO9epVpWQK0BU53pz5jDVetM9UFDAnyTDRpQ6Bojv+KYhNS 3MxybdSYov+ocQLFbdKpuRDjCN65mTOHWA== -----END CERTIFICATE-----Generated at Tue Jun 3 06:09:13 2025 by rpki-client