$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a794c7a1-ca21-3d5c-8e8a-3ea8cb8b141b.roa File: a794c7a1-ca21-3d5c-8e8a-3ea8cb8b141b.roa (raw, json) Hash identifier: rByx/OScIW6YO/NaD6Oz5TM0uCgvIUQXyVIHzkE8zv4= Subject key identifier: DC:4A:28:BE:5A:02:94:C1:BE:81:72:74:43:B9:46:45:59:DC:61:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C087F1D8C62A494C4D6C180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a794c7a1-ca21-3d5c-8e8a-3ea8cb8b141b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 2603:2641::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:7f:1d:8c:62:a4:94:c4:d6:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=e9cdc160-d67f-481b-9875-f58d4d3acd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:cc:2f:42:12:6e:53:23:8d:04:ae:3f:98: 1c:5e:bc:54:76:af:bb:49:a5:b8:11:27:0a:76:24: e0:00:81:71:29:d1:a3:5e:aa:59:60:8d:a0:97:06: 29:fd:7b:78:13:23:a7:40:bd:aa:25:c9:ad:a4:99: bb:6b:1a:14:e2:bd:cb:a7:5b:f7:b8:9a:e9:1c:59: c1:17:0b:96:3b:ac:08:0c:7d:35:a8:56:c8:42:22: a6:c4:3e:2c:85:9c:93:0a:df:32:1b:19:72:91:8d: 9b:9f:35:bc:af:ec:27:f5:d7:0f:59:8e:6b:b4:14: 06:85:7e:6c:78:a9:cb:df:19:be:fb:0e:af:41:07: 3d:a7:9c:2d:0b:dc:97:1f:98:5c:83:96:f8:49:9e: 22:df:f4:91:ad:80:70:46:ba:1e:0b:3e:c8:16:ba: 70:42:85:63:ed:af:44:92:79:d3:31:d6:16:33:c3: d2:5d:19:14:8a:06:84:24:ee:79:a6:3a:15:a8:54: db:50:4e:9d:7a:b3:7c:57:9d:38:f4:fe:e8:44:c7: 73:e4:bd:13:88:06:84:91:6d:f9:ef:a6:3b:ed:c3: 38:54:bc:7b:56:7c:1d:f7:93:85:a7:25:12:a7:6a: 19:a9:37:3d:6b:11:2b:96:64:57:94:f1:eb:c1:f3: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:28:BE:5A:02:94:C1:BE:81:72:74:43:B9:46:45:59:DC:61:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a794c7a1-ca21-3d5c-8e8a-3ea8cb8b141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2641::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b0:8c:50:a7:4a:8f:c6:5c:02:bc:9e:04:a4:c6:db:e9:0b: 95:21:44:71:e2:aa:27:53:8f:8d:b4:99:c4:2b:c6:f7:eb:7d: d4:e1:3c:07:0f:c9:e1:12:fc:79:53:d4:19:38:b6:6b:e1:47: 0d:ca:01:23:aa:a9:f3:3c:94:5d:51:65:fa:0e:67:49:93:c0: 7b:55:2b:8e:19:c3:46:35:40:4e:10:db:50:ab:48:15:40:e4: 1f:86:0d:05:21:43:c5:ad:98:6f:ef:83:d6:c5:0d:a5:79:f1: 93:1e:00:57:13:fe:18:fd:3b:54:a4:67:44:61:9b:25:e3:fc: 2d:e3:c4:4f:47:ac:c4:e4:69:6c:08:93:d6:8d:49:cd:dd:ca: c1:28:44:15:14:44:6e:72:99:cc:3f:63:ce:54:26:b2:0e:fc: f9:ba:c9:ee:bf:3c:b7:30:26:33:bf:b7:b1:52:ea:b1:6d:15: 94:94:f8:1b:fa:2b:06:bf:40:d6:d2:06:34:b7:0d:bf:f4:d1: 34:1e:4d:bf:44:74:f6:a5:ef:48:27:9b:d8:fa:09:95:8f:e0: a6:6a:c0:28:c4:f7:34:50:4c:b5:5d:ba:8e:5a:b8:24:ab:92: ca:8e:7a:3e:b1:f8:3b:68:12:bf:8e:cf:2e:df:8f:23:d8:ba: d1:7c:3d:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMCH8djGKklMTWwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTljZGMxNjAtZDY3Zi00ODFiLTk4NzUtZjU4ZDRkM2FjZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/PML0ISblMjjQSuP5gcXrxUdq+7SaW4EScK diTgAIFxKdGjXqpZYI2glwYp/Xt4EyOnQL2qJcmtpJm7axoU4r3Lp1v3uJrpHFnB FwuWO6wIDH01qFbIQiKmxD4shZyTCt8yGxlykY2bnzW8r+wn9dcPWY5rtBQGhX5s eKnL3xm++w6vQQc9p5wtC9yXH5hcg5b4SZ4i3/SRrYBwRroeCz7IFrpwQoVj7a9E knnTMdYWM8PSXRkUigaEJO55pjoVqFTbUE6derN8V5049P7oRMdz5L0TiAaEkW35 76Y77cM4VLx7Vnwd95OFpyUSp2oZqTc9axErlmRXlPHrwfMmDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNxKKL5aApTBvoFydEO5RkVZ3GGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc5NGM3YTEtY2EyMS0z ZDVjLThlOGEtM2VhOGNiOGIxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMmQQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAebCMUKdKj8ZcAryeBKTG2+kLlSFEceKqJ1OPjbSZxCvG9+t91OE8 Bw/J4RL8eVPUGTi2a+FHDcoBI6qp8zyUXVFl+g5nSZPAe1UrjhnDRjVAThDbUKtI FUDkH4YNBSFDxa2Yb++D1sUNpXnxkx4AVxP+GP07VKRnRGGbJeP8LePET0esxORp bAiT1o1Jzd3KwShEFRREbnKZzD9jzlQmsg78+brJ7r88tzAmM7+3sVLqsW0VlJT4 G/orBr9A1tIGNLcNv/TRNB5Nv0R09qXvSCeb2PoJlY/gpmrAKMT3NFBMtV26jlq4 JKuSyo56PrH4O2gSv47PLt+PI9i60Xw9DA== -----END CERTIFICATE-----Generated at Wed Jun 4 23:15:04 2025 by rpki-client