$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fd62ee-5225-3b49-86e4-e275c6c8b24b.roa File: 89fd62ee-5225-3b49-86e4-e275c6c8b24b.roa (raw, json) Hash identifier: ELEgR+tZ21ofKCKbvSipZq38kbkml8hdrvMKpOEvYzc= Subject key identifier: E7:63:86:3A:33:5C:27:00:80:3E:07:71:56:22:2D:56:DB:FB:98:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0608D3D2D7F8DEADA8F7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fd62ee-5225-3b49-86e4-e275c6c8b24b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2601:4a:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:08:d3:d2:d7:f8:de:ad:a8:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=cad7de4c-aa71-46ad-ab0b-66308f13c106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:9b:c1:3d:b5:16:ce:04:73:05:38:c6:0d: 37:82:83:2d:da:4c:9c:c7:41:46:50:45:9e:4a:3e: 46:23:ea:af:c0:25:de:83:f3:8f:2d:c0:9a:eb:ae: f5:bb:77:a6:b4:25:a5:e5:f5:be:15:60:bb:90:cb: ae:fe:f7:80:95:8c:67:a3:5c:91:35:70:31:a8:f8: 3d:1b:60:71:87:c7:20:b5:5b:93:fc:69:1f:e1:74: a0:51:4e:18:eb:3c:1e:42:42:e5:e0:fa:af:a4:41: b7:e9:21:c2:b6:de:14:68:3c:9f:31:a1:f2:a3:45: 4d:92:6f:19:fb:b1:85:df:6c:48:57:b9:58:04:55: 70:be:a5:8b:81:30:e9:af:4d:df:e4:63:ac:99:e5: 79:3a:84:10:9b:d1:2c:db:23:56:b7:ad:b7:9b:c2: d3:b1:60:3a:cf:20:11:0f:bc:de:59:2b:c9:a4:e4: 70:65:02:ff:96:d3:02:f5:6e:97:c0:cf:e3:7b:f9: 31:b7:6a:be:64:06:c9:3a:dd:4c:fd:af:3d:31:09: 80:c2:e6:71:a0:6a:18:91:f2:10:36:61:ee:18:8d: 46:46:88:db:d8:7d:c8:2f:72:7a:03:27:1d:d2:7d: 14:76:54:37:35:f8:e0:42:8b:44:d2:8b:12:6d:83: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:63:86:3A:33:5C:27:00:80:3E:07:71:56:22:2D:56:DB:FB:98:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fd62ee-5225-3b49-86e4-e275c6c8b24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:4a:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e0:5d:c0:d7:99:7d:f0:8f:14:47:99:43:30:33:67:f5:b2: a3:7d:89:11:3a:ec:85:b7:87:40:4c:25:2f:13:e5:57:66:91: e1:78:f8:f4:5e:67:ac:34:35:a7:35:43:56:c6:b3:78:a3:2e: 21:92:76:c2:44:95:e7:aa:76:40:30:56:69:b6:70:02:81:6e: 22:31:95:44:7a:f6:c8:8c:2a:23:ca:2f:56:7e:3b:c1:e0:2e: e9:13:38:e1:48:e8:ee:fa:ee:7f:eb:a5:ac:4c:17:ca:c2:0e: 66:f4:ff:40:01:cf:c5:c9:8b:38:4b:19:a1:07:7c:37:e4:c4: d2:07:5c:82:ba:47:57:16:76:9a:54:77:0c:04:42:e0:e8:61: d1:a6:d8:7e:e2:6a:7a:53:ac:2e:60:fd:b3:e9:d9:5c:b4:8e: 56:a0:fd:ce:44:33:43:ee:7c:0f:77:91:04:07:5a:71:d9:0c: 73:f5:02:47:a7:d6:56:82:14:52:10:3b:67:99:d5:93:40:fb: 20:ee:1a:28:b1:82:09:24:b1:71:b3:67:cc:d0:ef:85:1c:38: 03:5a:ee:ce:a3:d8:ef:5f:db:5f:3a:26:c3:7f:f7:eb:d2:28: ab:f4:b7:a8:4d:d7:af:9c:e3:05:34:f1:97:91:bb:61:34:58: aa:bf:fb:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMBgjT0tf43q2o96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Y2FkN2RlNGMtYWE3MS00NmFkLWFiMGItNjYzMDhmMTNjMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnSbwT21Fs4EcwU4xg03goMt2kycx0FGUEWe Sj5GI+qvwCXeg/OPLcCa6671u3emtCWl5fW+FWC7kMuu/veAlYxno1yRNXAxqPg9 G2Bxh8cgtVuT/Gkf4XSgUU4Y6zweQkLl4PqvpEG36SHCtt4UaDyfMaHyo0VNkm8Z +7GF32xIV7lYBFVwvqWLgTDpr03f5GOsmeV5OoQQm9Es2yNWt623m8LTsWA6zyAR D7zeWSvJpORwZQL/ltMC9W6XwM/je/kxt2q+ZAbJOt1M/a89MQmAwuZxoGoYkfIQ NmHuGI1GRojb2H3IL3J6Aycd0n0UdlQ3NfjgQotE0osSbYMFVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOdjhjozXCcAgD4HcVYiLVbb+5iGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlmZDYyZWUtNTIyNS0z YjQ5LTg2ZTQtZTI3NWM2YzhiMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEASoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAquBdwNeZffCPFEeZQzAzZ/Wyo32JETrshbeHQEwlLxPlV2aR4Xj4 9F5nrDQ1pzVDVsazeKMuIZJ2wkSV56p2QDBWabZwAoFuIjGVRHr2yIwqI8ovVn47 weAu6RM44Ujo7vruf+ulrEwXysIOZvT/QAHPxcmLOEsZoQd8N+TE0gdcgrpHVxZ2 mlR3DARC4Ohh0abYfuJqelOsLmD9s+nZXLSOVqD9zkQzQ+58D3eRBAdacdkMc/UC R6fWVoIUUhA7Z5nVk0D7IO4aKLGCCSSxcbNnzNDvhRw4A1ruzqPY71/bXzomw3/3 69Ioq/S3qE3Xr5zjBTTxl5G7YTRYqr/7MA== -----END CERTIFICATE-----Generated at Tue Jun 3 06:57:20 2025 by rpki-client