$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a8632e-77e9-3d4c-a3db-d520e810500f.roa File: 57a8632e-77e9-3d4c-a3db-d520e810500f.roa (raw, json) Hash identifier: dNcCCSmI3TGr9+yssI+BVZX6IVgCoRvevFtct2FdKNA= Subject key identifier: 0C:73:7C:03:C5:86:AB:73:D4:33:2A:19:F2:FA:37:70:76:9D:EF:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A00DAE8FCBD41A9451EE22C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a8632e-77e9-3d4c-a3db-d520e810500f.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 33655 IP address blocks: 2601:300::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:e8:fc:bd:41:a9:45:1e:e2:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=d957f58d-b076-44eb-9e91-74d4cb8390f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:00:94:32:a6:cd:1b:17:aa:df:c8:15:fb: e4:f1:54:a2:d8:52:da:2d:a7:93:8b:8f:34:b6:b6: 09:77:40:b6:ee:c2:79:f5:1c:9e:ac:5e:fc:58:2e: 6f:af:c3:0c:4c:94:cb:74:12:b2:ca:ea:c2:74:ae: 45:9f:4e:69:57:94:bd:46:d0:1e:1a:91:e9:93:f9: bc:59:51:3d:57:0e:78:86:27:d7:0f:84:dd:d1:1c: 7a:da:3a:6b:e0:b1:1a:bb:1b:29:23:55:0d:7e:aa: 28:49:5c:8a:87:da:f9:65:ce:a6:ac:51:2f:f1:0c: c3:7d:f7:b9:3f:60:2c:6c:29:a3:9d:b9:68:b6:c3: 5c:68:7e:a2:6f:96:41:8f:2a:5d:e3:df:5a:b3:ce: 69:db:39:63:8a:4f:56:7b:26:a2:0e:ce:90:c4:0e: 0c:10:b4:4f:4f:a8:dd:0a:50:34:f1:35:df:04:24: 97:c6:ac:62:19:47:34:22:c0:91:9b:d6:c6:86:55: e7:be:2d:72:6a:34:11:46:96:fd:31:31:74:4d:fe: 55:bb:46:3b:4f:8c:bf:b8:9d:cc:66:0e:4d:dd:e0: b6:0c:5d:1e:47:c2:bb:81:a3:a8:02:85:25:26:66: f3:d7:db:90:84:d6:48:e1:54:74:64:b7:4a:cf:62: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:7C:03:C5:86:AB:73:D4:33:2A:19:F2:FA:37:70:76:9D:EF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a8632e-77e9-3d4c-a3db-d520e810500f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:300::/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:78:1d:2b:a3:24:6a:bf:d6:dc:74:51:73:40:ec:f9:98:ec: 97:0f:11:a0:64:17:38:93:27:34:ed:bb:1e:52:df:0d:69:91: 9f:d8:d3:7e:df:55:d0:34:8f:56:d1:0b:3a:d5:fa:f4:9f:9b: 7d:2b:05:0f:d9:9a:5b:c7:7d:9c:7a:40:0b:28:3e:eb:66:37: 7a:94:b3:05:67:b1:42:29:b6:26:74:48:15:6b:fd:2f:76:64: b0:f9:43:cd:6d:ad:65:1b:a0:c6:d0:55:05:73:44:58:18:19: aa:2f:4e:bb:48:e6:a6:75:87:f6:e4:f6:2a:53:0c:8f:10:ce: 29:0c:0c:eb:1f:eb:4d:32:fd:bc:c7:ee:fb:9b:b3:f6:15:00: ed:59:25:1c:fa:52:f8:b2:e0:01:3b:7f:9b:fd:b2:56:15:1e: bc:be:9a:03:e9:94:1a:b4:34:4b:5a:2f:0c:56:d5:0e:68:95: 23:aa:a0:06:7b:d5:f2:f8:ce:70:b1:00:53:c8:3c:44:06:2f: 2f:f7:d4:bf:70:fa:2e:1a:3e:4d:85:37:4e:fe:d9:55:b7:2b: 8d:3a:83:4d:a8:b2:83:71:4c:a2:af:39:e1:09:bc:34:c4:b5: 00:14:57:0b:ef:a3:12:f7:59:a1:d6:af:c3:5f:7d:8c:ce:33: ff:87:83:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2uj8vUGpRR7iLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZDk1N2Y1OGQtYjA3Ni00NGViLTllOTEtNzRkNGNiODM5MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQYAlDKmzRsXqt/IFfvk8VSi2FLaLaeTi480 trYJd0C27sJ59RyerF78WC5vr8MMTJTLdBKyyurCdK5Fn05pV5S9RtAeGpHpk/m8 WVE9Vw54hifXD4Td0Rx62jpr4LEauxspI1UNfqooSVyKh9r5Zc6mrFEv8QzDffe5 P2AsbCmjnblotsNcaH6ib5ZBjypd499as85p2zljik9WeyaiDs6QxA4MELRPT6jd ClA08TXfBCSXxqxiGUc0IsCRm9bGhlXnvi1yajQRRpb9MTF0Tf5Vu0Y7T4y/uJ3M Zg5N3eC2DF0eR8K7gaOoAoUlJmbz19uQhNZI4VR0ZLdKz2LeZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAxzfAPFhqtz1DMqGfL6N3B2ne+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTdhODYzMmUtNzdlOS0z ZDRjLWEzZGItZDUyMGU4MTA1MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUGJgEDADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyeB0royRqv9bcdFFzQOz5mOyXDxGgZBc4kyc07bseUt8NaZGf2NN+ 31XQNI9W0Qs61fr0n5t9KwUP2Zpbx32cekALKD7rZjd6lLMFZ7FCKbYmdEgVa/0v dmSw+UPNba1lG6DG0FUFc0RYGBmqL067SOamdYf25PYqUwyPEM4pDAzrH+tNMv28 x+77m7P2FQDtWSUc+lL4suABO3+b/bJWFR68vpoD6ZQatDRLWi8MVtUOaJUjqqAG e9Xy+M5wsQBTyDxEBi8v99S/cPouGj5NhTdO/tlVtyuNOoNNqLKDcUyirznhCbw0 xLUAFFcL76MS91mh1q/DX32MzjP/h4Od -----END CERTIFICATE-----Generated at Tue Jun 3 04:49:34 2025 by rpki-client