$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985517b4-a58d-3a49-85c8-98df6e4cf3d8.roa File: 985517b4-a58d-3a49-85c8-98df6e4cf3d8.roa (raw, json) Hash identifier: C5FwIZOSVwBESAHfKXwBaaWTb45ckmLeWNHjZxan4dk= Subject key identifier: AA:18:9A:6C:29:FC:64:2D:EC:F8:9F:F2:A2:82:0D:EB:A2:2E:84:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF7533ED54ADD3817D776500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985517b4-a58d-3a49-85c8-98df6e4cf3d8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 2603:20c2:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:33:ed:54:ad:d3:81:7d:77:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=6245cc78-e5fa-44c9-b78d-60d7b77f16bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:ef:9d:9b:1f:d1:ed:76:9c:b6:49:26:e3: 91:de:25:b2:48:44:44:57:64:82:f6:33:f5:12:c9: 4a:5a:02:d0:fe:7b:1b:70:31:60:0a:aa:dc:f7:65: a5:42:88:fd:bc:e6:1d:9b:1a:5f:d3:dc:f0:cd:2c: a1:1e:a9:79:72:73:17:d8:0f:10:67:9f:a6:ce:5e: 91:9f:ae:23:0a:93:7f:b5:0c:ed:ff:70:e2:6e:d3: 2c:a5:0f:ff:5d:f1:f4:bc:8c:4d:07:ab:97:10:c0: 08:4c:d6:cd:21:28:09:ec:52:dc:c6:fb:7e:a1:ac: 64:be:74:b2:b6:ed:b3:a1:30:c6:12:94:c8:d5:87: 0d:0d:3f:9f:00:42:24:b8:f8:90:60:06:d5:47:72: 55:98:54:e8:88:63:ca:b6:f5:bd:d8:86:2b:96:90: 6a:ff:cd:3f:9f:ae:31:76:65:91:b5:32:26:df:28: c7:03:cc:3f:ab:69:bd:68:d9:da:28:4f:21:55:fc: ea:b5:0f:db:d9:21:87:be:9f:8b:f5:5c:da:0c:05: 35:ee:19:53:78:2f:84:d7:31:f1:d5:f2:93:ac:86: 9f:ac:32:95:30:ce:5a:da:c9:63:a5:44:29:4c:68: 98:8e:df:bb:99:f9:c8:e2:cc:45:96:18:9b:f7:58: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:18:9A:6C:29:FC:64:2D:EC:F8:9F:F2:A2:82:0D:EB:A2:2E:84:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985517b4-a58d-3a49-85c8-98df6e4cf3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:20c2:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:18:6d:30:fe:42:3e:fe:a8:1e:19:37:4d:a5:62:3e:17:92: bf:04:9e:93:fd:db:61:30:83:b9:cd:fb:05:95:d8:17:e3:c5: b2:fc:ac:d0:38:64:3b:9d:43:db:25:4d:93:ba:aa:a6:08:38: 47:d6:a6:e6:bb:d4:21:77:bf:cb:2d:9c:e4:48:88:0a:51:ed: e3:f6:8a:4f:54:92:9e:26:d7:f5:c1:5f:ab:89:78:5c:05:64: e3:b7:18:59:cf:a7:f7:e7:33:1a:bf:c4:ed:8c:f4:9a:f6:31: 22:10:4a:2b:15:99:94:ce:cb:59:35:53:99:83:58:35:29:33: 96:51:0d:af:b2:54:f6:19:03:24:6b:7e:46:64:aa:0e:cb:e0: f8:e2:ba:40:93:0c:f8:43:de:dd:20:4f:2f:23:0c:5d:3d:26: cc:6a:50:6b:3c:f1:5f:28:15:f5:b1:b2:73:32:09:67:03:0b: 42:91:9d:09:71:48:17:d5:10:0d:f6:2f:ed:11:03:1c:83:fe: 4a:ca:98:c0:22:ef:47:cf:5b:dd:fd:d1:d8:56:4c:a9:7c:b4: f2:4a:b4:cb:c9:35:0d:77:e5:56:9a:e5:0f:fb:79:17:3c:c3: 4f:6e:a6:33:18:6a:78:22:c0:cc:f8:df:d0:31:2a:f8:bf:90: 00:ac:c8:a2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn/dTPtVK3TgX13ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NjI0NWNjNzgtZTVmYS00NGM5LWI3OGQtNjBkN2I3N2YxNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHvnZsf0e12nLZJJuOR3iWySEREV2SC9jP1 EslKWgLQ/nsbcDFgCqrc92WlQoj9vOYdmxpf09zwzSyhHql5cnMX2A8QZ5+mzl6R n64jCpN/tQzt/3DibtMspQ//XfH0vIxNB6uXEMAITNbNISgJ7FLcxvt+oaxkvnSy tu2zoTDGEpTI1YcNDT+fAEIkuPiQYAbVR3JVmFToiGPKtvW92IYrlpBq/80/n64x dmWRtTIm3yjHA8w/q2m9aNnaKE8hVfzqtQ/b2SGHvp+L9VzaDAU17hlTeC+E1zHx 1fKTrIafrDKVMM5a2sljpUQpTGiYjt+7mfnI4sxFlhib91iudwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKoYmmwp/GQt7Pif8qKCDeuiLoQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg1NTE3YjQtYTU4ZC0z YTQ5LTg1YzgtOThkZjZlNGNmM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgwoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA3BhtMP5CPv6oHhk3TaViPheSvwSek/3bYTCDuc37BZXYF+PFsvys 0DhkO51D2yVNk7qqpgg4R9am5rvUIXe/yy2c5EiIClHt4/aKT1SSnibX9cFfq4l4 XAVk47cYWc+n9+czGr/E7Yz0mvYxIhBKKxWZlM7LWTVTmYNYNSkzllENr7JU9hkD JGt+RmSqDsvg+OK6QJMM+EPe3SBPLyMMXT0mzGpQazzxXygV9bGyczIJZwMLQpGd CXFIF9UQDfYv7REDHIP+SsqYwCLvR89b3f3R2FZMqXy08kq0y8k1DXflVprlD/t5 FzzDT26mMxhqeCLAzPjf0DEq+L+QAKzIog== -----END CERTIFICATE-----Generated at Tue Jun 3 05:12:52 2025 by rpki-client