$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c63a1cc-e506-38a4-9634-f1499a2dfec0.roa File: 3c63a1cc-e506-38a4-9634-f1499a2dfec0.roa (raw, json) Hash identifier: kwoimrcqohwDcLOyFTiZH9KVW8iqYaY6JVEcutbwqrU= Subject key identifier: A0:C2:08:D1:EA:CD:41:3E:3B:A7:31:9A:96:98:FB:A5:1F:60:5E:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75342EE7AAB3CCDBAADDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c63a1cc-e506-38a4-9634-f1499a2dfec0.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 2603:20c7:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:34:2e:e7:aa:b3:cc:db:aa:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=e87fa1d8-8052-48e7-9661-7c18ac439d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:42:38:73:be:46:7e:89:12:3f:fb:f0:95: d0:36:a0:87:10:2d:ba:07:c0:86:e4:5b:64:f8:da: 72:4a:27:ee:99:18:44:bd:0d:81:5c:78:4d:08:c6: 38:34:4a:05:2d:64:e4:7d:cb:43:2e:0b:5a:23:b4: 79:60:1d:98:c3:d5:8a:4b:73:15:64:bd:67:2f:4a: 93:c2:7e:ce:d5:34:c9:46:3b:0e:03:e6:82:d4:75: 8b:05:e6:ea:6e:84:11:fe:89:c9:17:2a:55:87:d0: 23:a3:27:6d:35:9b:9c:01:a7:e9:bd:1d:b7:3d:ba: 7a:cf:16:ff:c1:d9:d7:9e:6b:35:23:11:19:0b:ff: 5f:83:86:a6:44:05:f1:2e:7d:14:ad:74:af:65:c4: 72:4b:5b:60:2e:cc:cf:56:90:ba:05:4d:a3:a6:43: e7:b2:9b:ae:4a:86:a1:e2:6c:eb:d0:0e:30:bd:6c: 29:41:d3:18:a1:d8:41:61:72:34:b9:f6:da:25:f2: 2a:17:07:16:ee:db:01:6e:ba:47:b7:3c:05:01:a5: 38:df:e8:72:80:28:75:3f:e4:a7:05:86:29:41:be: b6:46:07:1e:aa:da:ee:3c:e1:26:f2:12:93:83:23: 3b:eb:13:82:8e:cb:47:81:11:21:f5:cb:5a:18:45: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:08:D1:EA:CD:41:3E:3B:A7:31:9A:96:98:FB:A5:1F:60:5E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c63a1cc-e506-38a4-9634-f1499a2dfec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:20c7:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ab:56:d6:c2:68:aa:6c:79:19:8b:cc:9d:25:93:6f:74:8f: 5b:c6:fa:b6:8d:38:a2:cd:98:83:ad:5a:5d:c8:30:3e:81:66: 2c:f0:fb:f1:90:6e:6e:cc:99:d3:a0:b6:8b:3a:63:51:1e:52: df:2b:79:eb:0f:00:7e:27:ee:40:63:da:2c:89:39:51:2a:1e: 27:77:67:ed:58:ae:33:5d:65:f1:46:5e:9d:d7:35:36:6c:0d: d2:8c:78:0a:7a:4e:22:24:00:83:0b:6c:ca:dc:d1:66:04:a2: e9:a8:c7:b6:da:d0:f0:e7:a2:a5:ee:05:43:41:bc:c0:8f:86: bd:f1:a9:4a:c2:5a:73:8b:a0:7c:bb:8a:45:ff:bc:43:fd:68: c0:b2:c5:55:c2:7c:bf:82:5e:8f:1c:21:32:1c:61:5a:f2:14: c5:cb:08:cc:22:65:35:57:fc:2d:fe:5c:f9:3e:e6:a4:f2:e9: b5:24:cf:2f:0c:c9:5f:33:b9:d6:cf:45:03:f8:5f:9d:04:35: ff:c4:97:28:43:fe:49:94:e3:d0:b5:f9:37:3e:ef:79:c7:e6: 6f:de:53:3d:d7:fe:78:08:a6:49:33:04:94:e8:27:e1:b6:7f: aa:c7:fd:52:ac:22:a3:7b:d7:38:38:f5:c6:a8:d5:10:6d:7c: e2:9a:24:62 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn/dTQu56qzzNuq3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZTg3ZmExZDgtODA1Mi00OGU3LTk2NjEtN2MxOGFjNDM5ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOJCOHO+Rn6JEj/78JXQNqCHEC26B8CG5Ftk +NpySifumRhEvQ2BXHhNCMY4NEoFLWTkfctDLgtaI7R5YB2Yw9WKS3MVZL1nL0qT wn7O1TTJRjsOA+aC1HWLBebqboQR/onJFypVh9AjoydtNZucAafpvR23Pbp6zxb/ wdnXnms1IxEZC/9fg4amRAXxLn0UrXSvZcRyS1tgLszPVpC6BU2jpkPnspuuSoah 4mzr0A4wvWwpQdMYodhBYXI0ufbaJfIqFwcW7tsBbrpHtzwFAaU43+hygCh1P+Sn BYYpQb62RgceqtruPOEm8hKTgyM76xOCjstHgREh9ctaGEWZTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKDCCNHqzUE+O6cxmpaY+6UfYF6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2M2ExY2MtZTUwNi0z OGE0LTk2MzQtZjE0OTlhMmRmZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgx0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiKtW1sJoqmx5GYvMnSWTb3SPW8b6to04os2Yg61aXcgwPoFmLPD7 8ZBubsyZ06C2izpjUR5S3yt56w8AfifuQGPaLIk5USoeJ3dn7ViuM11l8UZendc1 NmwN0ox4CnpOIiQAgwtsytzRZgSi6ajHttrQ8Oeipe4FQ0G8wI+GvfGpSsJac4ug fLuKRf+8Q/1owLLFVcJ8v4JejxwhMhxhWvIUxcsIzCJlNVf8Lf5c+T7mpPLptSTP LwzJXzO51s9FA/hfnQQ1/8SXKEP+SZTj0LX5Nz7vecfmb95TPdf+eAimSTMElOgn 4bZ/qsf9Uqwio3vXODj1xqjVEG184pokYg== -----END CERTIFICATE-----Generated at Wed Jun 4 23:29:24 2025 by rpki-client