$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cae1f9c-30a1-3aea-9770-1c7dfc1d1a84.roa File: 3cae1f9c-30a1-3aea-9770-1c7dfc1d1a84.roa (raw, json) Hash identifier: NLdRs2kgOHvAdkfFKrTXuLPJ6KzZ8/EYpO2aRXN3pBw= Subject key identifier: 71:CC:E2:DC:FE:44:23:E5:7A:7A:EF:BF:0E:63:68:BC:15:2A:A4:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43087224A78E70191327220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cae1f9c-30a1-3aea-9770-1c7dfc1d1a84.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 2603:2408:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:87:22:4a:78:e7:01:91:32:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=df2fce44-3bee-4bc7-a8a3-5a2d13fd4df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:98:04:0c:b4:b3:7e:b9:81:1e:44:b1:49: fe:f7:e2:f3:6e:57:b3:92:97:bf:96:7d:2a:66:bb: c3:06:6b:9e:1d:a0:95:6e:e4:bb:0b:d7:48:68:41: a8:1a:ad:f3:8c:6a:83:21:04:ae:66:4b:98:d0:f2: 34:ca:be:3e:fb:be:44:94:d7:79:6c:bb:e2:18:a3: 8b:23:bd:eb:4a:4b:44:f5:47:63:5f:55:5e:da:9f: 54:9a:3e:31:39:70:82:ae:29:ec:1e:e6:29:4e:72: 4b:94:f3:9c:3a:cc:1a:da:e6:6c:0a:c6:41:1b:1e: c6:07:69:76:a5:21:16:c2:5c:b1:9e:76:a4:61:f3: 61:12:7e:5d:49:a6:51:08:92:a5:dc:d6:0a:95:48: ed:bc:59:a4:30:14:05:60:48:c7:7f:62:9a:39:1b: 7a:f0:8e:58:81:4d:82:33:df:61:56:4b:f2:57:a6: 22:f4:76:c0:85:30:e8:fd:15:20:69:15:bf:3c:0e: c5:13:62:fa:c8:7e:81:48:a5:89:63:64:b2:87:2c: b2:49:bd:33:5c:2c:78:d9:d2:dc:57:2c:0c:48:22: 7c:84:11:ba:af:3c:d5:73:a7:10:e0:f1:22:a5:2d: 29:c1:b7:63:60:10:71:c0:76:f7:60:ad:c0:0a:7c: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:E2:DC:FE:44:23:E5:7A:7A:EF:BF:0E:63:68:BC:15:2A:A4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cae1f9c-30a1-3aea-9770-1c7dfc1d1a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2408:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:8c:37:55:58:ee:6b:e6:9f:5c:96:cf:3d:f3:24:d5:54: 73:f2:a6:2c:0d:21:b4:bd:dd:4b:8a:58:14:60:32:e7:bb:bd: 60:51:ac:37:59:7b:a0:aa:81:19:1f:ef:08:bd:04:24:23:d3: 2e:fb:3c:eb:02:10:f5:5a:e3:f8:0c:f4:cd:26:5a:ea:58:ad: e8:f7:fc:3b:75:a5:9b:49:29:aa:c1:5a:d4:53:9a:bb:40:01: 38:f0:0e:d3:af:dd:4d:c6:0f:a9:a5:90:23:10:30:48:30:20: 82:40:bb:18:1a:91:2d:45:a7:47:94:01:79:08:55:7b:f4:1e: 83:e7:bf:dd:67:94:59:91:04:e3:0c:d6:a6:9e:5a:7f:80:3d: 63:82:6f:7e:44:80:de:93:e8:07:fe:33:6b:b9:de:69:ba:1b: ea:68:e1:d3:50:76:d5:88:8d:95:0c:7a:6d:7a:1e:9b:a5:fb: 23:1f:d0:13:44:8e:3a:3e:0d:1b:03:ca:bc:38:ab:21:87:7f: 03:0d:55:06:b7:0d:dd:49:77:e3:ce:08:63:fb:f0:5e:72:03: 44:76:cf:4b:2b:bd:5f:01:ef:c6:cb:fb:6f:9b:24:bc:51:ed: f8:49:0e:1d:32:28:c0:d5:94:4c:f4:01:8e:30:8b:01:f3:c0: 6e:fd:2c:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMIciSnjnAZEyciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGYyZmNlNDQtM2JlZS00YmM3LWE4YTMtNWEyZDEzZmQ0ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbqYBAy0s365gR5EsUn+9+Lzblezkpe/ln0q ZrvDBmueHaCVbuS7C9dIaEGoGq3zjGqDIQSuZkuY0PI0yr4++75ElNd5bLviGKOL I73rSktE9UdjX1Ve2p9Umj4xOXCCrinsHuYpTnJLlPOcOswa2uZsCsZBGx7GB2l2 pSEWwlyxnnakYfNhEn5dSaZRCJKl3NYKlUjtvFmkMBQFYEjHf2KaORt68I5YgU2C M99hVkvyV6Yi9HbAhTDo/RUgaRW/PA7FE2L6yH6BSKWJY2SyhyyySb0zXCx42dLc VywMSCJ8hBG6rzzVc6cQ4PEipS0pwbdjYBBxwHb3YK3ACnzNtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHHM4tz+RCPlenrvvw5jaLwVKqTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NhZTFmOWMtMzBhMS0z YWVhLTk3NzAtMWM3ZGZjMWQxYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkCMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACmKMN1VY7mvmn1yWzz3zJNVUc/KmLA0htL3dS4pYFGAy57u9YFGs N1l7oKqBGR/vCL0EJCPTLvs86wIQ9Vrj+Az0zSZa6lit6Pf8O3Wlm0kpqsFa1FOa u0ABOPAO06/dTcYPqaWQIxAwSDAggkC7GBqRLUWnR5QBeQhVe/Qeg+e/3WeUWZEE 4wzWpp5af4A9Y4JvfkSA3pPoB/4za7neabob6mjh01B21YiNlQx6bXoem6X7Ix/Q E0SOOj4NGwPKvDirIYd/Aw1VBrcN3Ul3484IY/vwXnIDRHbPSyu9XwHvxsv7b5sk vFHt+EkOHTIowNWUTPQBjjCLAfPAbv0seg== -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:32 2025 by rpki-client