$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796e3b94-3bb1-3a14-bd65-3add9513fe6a.roa File: 796e3b94-3bb1-3a14-bd65-3add9513fe6a.roa (raw, json) Hash identifier: LCuwqEXTC0kWlWeZgB1cBqkHkWg2EnEN/kwE1twVAsY= Subject key identifier: 35:49:15:56:83:F1:4A:5D:F7:EB:6A:77:4A:1E:E8:6A:C0:44:35:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF7535A0A65F3B6DCDB0AD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796e3b94-3bb1-3a14-bd65-3add9513fe6a.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 2603:3001:d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:35:a0:a6:5f:3b:6d:cd:b0:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=02d293ce-d236-4766-8f02-4c7e542da6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:d5:f9:7b:59:ea:e9:f1:2f:e0:d4:e2:77: 84:19:ec:32:0b:56:bc:d2:ed:24:d4:99:a2:93:ab: 13:8c:cc:a3:f3:a0:cd:eb:6d:d5:95:41:89:35:04: d8:eb:de:36:3f:9f:cc:98:72:d9:6b:83:4e:c7:24: bf:bf:fa:9e:33:09:85:b6:1d:5f:b7:73:21:d8:02: 62:96:d5:b9:c3:1d:26:73:3b:6e:85:1b:4c:52:9c: 02:28:46:92:41:69:38:0f:43:c1:cc:69:54:ad:a6: 4a:e9:f3:39:0d:f3:be:63:e0:68:41:d3:c7:5c:6f: 8f:4e:97:0a:cb:3f:ed:c4:91:b0:76:4d:b1:ad:d9: 98:83:ef:9f:69:e1:38:c6:dc:cc:98:02:3f:46:3b: 00:47:ae:91:2b:ba:3c:4a:09:56:17:2c:0e:f8:39: d2:91:0e:1c:bd:cc:9c:9a:6d:68:58:23:f8:d4:cd: fe:b8:82:c2:94:4b:6c:99:02:52:78:7f:9d:cd:35: 21:f3:a3:0c:b1:e5:14:58:66:60:bc:76:46:ea:28: b1:3b:d6:4c:ad:4a:7d:b8:df:5a:af:39:2f:bd:db: 72:9b:49:e6:02:ba:b1:38:19:b6:12:6e:96:04:46: 44:95:dc:4e:5d:3b:e1:2c:ad:b0:f3:90:ac:0f:db: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:49:15:56:83:F1:4A:5D:F7:EB:6A:77:4A:1E:E8:6A:C0:44:35:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/796e3b94-3bb1-3a14-bd65-3add9513fe6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3001:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:3d:24:84:7d:c5:f8:39:53:9d:a8:b1:1e:dd:52:59:99:c4: 77:c6:2a:91:2d:fb:39:c8:ff:e9:d9:51:fd:94:26:ad:7a:bf: 9f:b7:e5:71:81:f2:7d:2f:6f:d9:99:ba:19:d3:8a:c3:66:85: b5:ca:5e:89:a1:94:13:09:68:c9:d4:fb:d0:11:bc:b9:ea:a4: a9:cf:af:3a:7f:03:a9:1f:56:ff:54:a0:c2:0d:30:f6:6c:10: c7:b2:81:6c:89:5b:ed:04:b2:6c:d6:96:e7:b7:97:b5:c4:35: 77:ff:24:77:d0:3d:76:48:5b:84:15:c3:de:ab:42:b9:a4:92: ec:2a:ff:9e:10:44:f6:53:76:b6:74:28:0a:ea:51:2d:ef:4f: 7a:b1:c9:46:ca:0b:c8:05:18:08:2a:af:aa:56:6c:8c:94:f2: 69:28:e1:a0:c0:f3:ad:ec:38:90:3a:fc:da:bb:33:fc:b3:5e: 9e:2b:9e:7a:de:70:74:ab:66:40:37:9d:fc:13:d6:28:e7:7f: ae:69:c7:57:06:4e:44:6d:64:3d:aa:7d:cf:b7:b6:9a:52:e7: e6:2d:df:b3:41:48:6b:06:a0:65:cb:ec:b7:fe:f0:60:28:58: 97:fb:58:22:de:60:ff:69:22:ea:91:45:55:bb:7e:00:0d:c0: c7:d3:db:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn/dTWgpl87bc2wrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MDJkMjkzY2UtZDIzNi00NzY2LThmMDItNGM3ZTU0MmRhNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u3V+XtZ6unxL+DU4neEGewyC1a80u0k1Jmi k6sTjMyj86DN623VlUGJNQTY6942P5/MmHLZa4NOxyS/v/qeMwmFth1ft3Mh2AJi ltW5wx0mcztuhRtMUpwCKEaSQWk4D0PBzGlUraZK6fM5DfO+Y+BoQdPHXG+PTpcK yz/txJGwdk2xrdmYg++faeE4xtzMmAI/RjsAR66RK7o8SglWFywO+DnSkQ4cvcyc mm1oWCP41M3+uILClEtsmQJSeH+dzTUh86MMseUUWGZgvHZG6iixO9ZMrUp9uN9a rzkvvdtym0nmArqxOBm2Em6WBEZEldxOXTvhLK2w85CsD9ufGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDVJFVaD8Upd9+tqd0oe6GrARDWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzk2ZTNiOTQtM2JiMS0z YTE0LWJkNjUtM2FkZDk1MTNmZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwAQ0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAzD0khH3F+DlTnaixHt1SWZnEd8YqkS37Ocj/6dlR/ZQmrXq/n7fl cYHyfS9v2Zm6GdOKw2aFtcpeiaGUEwloydT70BG8ueqkqc+vOn8DqR9W/1Sgwg0w 9mwQx7KBbIlb7QSybNaW57eXtcQ1d/8kd9A9dkhbhBXD3qtCuaSS7Cr/nhBE9lN2 tnQoCupRLe9PerHJRsoLyAUYCCqvqlZsjJTyaSjhoMDzrew4kDr82rsz/LNeniue et5wdKtmQDed/BPWKOd/rmnHVwZORG1kPap9z7e2mlLn5i3fs0FIawagZcvst/7w YChYl/tYIt5g/2ki6pFFVbt+AA3Ax9PbZQ== -----END CERTIFICATE-----Generated at Tue Jun 3 06:15:49 2025 by rpki-client