$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abd8a67-6d9a-3192-84f7-5260aa2d5748.roa File: 3abd8a67-6d9a-3192-84f7-5260aa2d5748.roa (raw, json) Hash identifier: 7DcbHaX24wWNdad+Jm3WwLH+yWSZ2ijP5Hz4z2Xs+Oc= Subject key identifier: 43:1E:37:CF:18:94:A7:C1:C8:FB:2E:97:21:19:99:AF:04:61:0C:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D165250A97F4AC32573E6240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abd8a67-6d9a-3192-84f7-5260aa2d5748.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7016 IP address blocks: 2603:3007:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:25:0a:97:f4:ac:32:57:3e:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=74d00aff-4e55-484c-9d3c-a9708d633c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:94:2a:cf:c3:86:d5:39:49:5e:ef:d0:c5: 4e:70:d1:b7:6b:7f:5c:65:c7:60:15:d5:c8:37:8c: 67:ed:8c:bd:3a:f4:7f:e2:dd:36:07:5e:7e:77:92: fa:c3:9c:27:46:98:e6:08:3a:41:40:9d:1d:24:be: 0b:01:af:2f:70:99:d3:16:84:86:92:c0:52:43:33: b9:42:a8:f7:95:f0:d2:1a:d8:ce:43:47:61:f5:4c: f8:04:ed:a8:9e:7f:79:c9:9e:77:22:25:6f:5a:fd: 8b:ad:18:47:93:43:04:8a:ae:a1:fb:45:3f:85:1d: c8:da:bb:5a:d2:38:2e:bc:06:1d:bb:36:b8:3a:b4: ec:ad:3c:f1:ca:56:cc:3f:ab:76:94:6f:f7:f0:f9: 33:7e:91:c2:af:9a:5b:de:c8:71:9a:ee:19:26:a4: 69:27:7e:73:6e:d0:fa:3b:28:1a:7b:6d:5a:59:b2: 41:6e:77:fd:cc:3c:bb:e6:39:80:e6:18:c4:e4:a1: 6f:8b:fe:7d:a2:bd:91:a8:48:61:29:ad:32:03:55: 8a:e2:1e:07:fb:e8:da:f6:a4:5a:a5:26:89:44:b5: 9f:cd:2a:5a:11:df:ad:1d:32:4b:71:2f:79:ac:ab: da:b5:2e:f2:40:3b:e5:6d:36:93:1c:ad:2f:19:50: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:37:CF:18:94:A7:C1:C8:FB:2E:97:21:19:99:AF:04:61:0C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abd8a67-6d9a-3192-84f7-5260aa2d5748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3007:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:bd:f6:ef:6a:da:aa:c7:0a:1b:87:0c:0c:59:57:84:b6: b1:78:3a:9e:70:b4:8b:08:53:88:82:c6:4d:e2:12:ed:e3:4d: b8:76:77:12:a8:be:50:29:e9:0b:50:06:39:89:54:9a:92:05: ea:04:2c:68:85:4f:2c:a9:1b:d1:4a:f6:d5:94:93:ec:fc:53: 0d:43:0e:38:d3:38:89:ec:6c:05:dd:73:80:15:cf:77:d6:63: 26:e3:7f:85:00:ab:7e:95:df:42:2a:41:f7:ab:3f:f4:00:82: 2d:ab:05:9c:b0:27:04:af:4a:93:79:81:b7:a9:91:ca:11:15: d7:3f:c1:d5:ac:6b:39:84:8c:82:c1:8a:93:f0:1d:87:9c:04: b3:3b:6c:8b:07:66:02:fc:96:03:c9:b7:17:20:69:9c:3a:16: ff:3c:16:1f:a1:28:72:90:06:ff:12:46:f6:5f:81:b9:08:f5: 7a:5d:71:1b:00:8e:23:5d:10:40:6d:17:69:94:08:09:7b:3b: 43:25:c4:50:93:66:76:1e:18:f9:5e:00:6b:8b:a9:de:e1:46: ee:16:77:a3:df:7c:fa:d3:75:c3:0b:13:87:cc:cf:e2:e3:df: 24:d1:9e:72:e0:ed:4f:cc:d7:b6:15:30:ae:92:ce:a3:58:9a: 5c:6d:4c:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnRZSUKl/SsMlc+YkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzRkMDBhZmYtNGU1NS00ODRjLTlkM2MtYTk3MDhkNjMzYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwGUKs/DhtU5SV7v0MVOcNG3a39cZcdgFdXI N4xn7Yy9OvR/4t02B15+d5L6w5wnRpjmCDpBQJ0dJL4LAa8vcJnTFoSGksBSQzO5 Qqj3lfDSGtjOQ0dh9Uz4BO2onn95yZ53IiVvWv2LrRhHk0MEiq6h+0U/hR3I2rta 0jguvAYduza4OrTsrTzxylbMP6t2lG/38PkzfpHCr5pb3shxmu4ZJqRpJ35zbtD6 Oygae21aWbJBbnf9zDy75jmA5hjE5KFvi/59or2RqEhhKa0yA1WK4h4H++ja9qRa pSaJRLWfzSpaEd+tHTJLcS95rKvatS7yQDvlbTaTHK0vGVAgZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEMeN88YlKfByPsulyEZma8EYQwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FiZDhhNjctNmQ5YS0z MTkyLTg0ZjctNTI2MGFhMmQ1NzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALS299u9q2qrHChuHDAxZV4S2sXg6nnC0iwhTiILGTeIS7eNNuHZ3 Eqi+UCnpC1AGOYlUmpIF6gQsaIVPLKkb0Ur21ZST7PxTDUMOONM4iexsBd1zgBXP d9ZjJuN/hQCrfpXfQipB96s/9ACCLasFnLAnBK9Kk3mBt6mRyhEV1z/B1axrOYSM gsGKk/Adh5wEsztsiwdmAvyWA8m3FyBpnDoW/zwWH6EocpAG/xJG9l+BuQj1el1x GwCOI10QQG0XaZQICXs7QyXEUJNmdh4Y+V4Aa4up3uFG7hZ3o998+tN1wwsTh8zP 4uPfJNGecuDtT8zXthUwrpLOo1iaXG1MgQ== -----END CERTIFICATE-----Generated at Tue Jun 3 06:57:22 2025 by rpki-client