$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b820e164-a4c1-37ee-b4ff-28da05f0ff3a.roa File: b820e164-a4c1-37ee-b4ff-28da05f0ff3a.roa (raw, json) Hash identifier: ClLeQMp7V2TBeIXe1KmQI4pbWzzGuZ9oUklsLOCo0cM= Subject key identifier: 67:1A:01:94:DE:B7:A2:73:64:6E:77:A8:CE:EB:73:92:2C:7E:BD:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05DAD4509D0FFBAA583340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b820e164-a4c1-37ee-b4ff-28da05f0ff3a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2603:301b:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:da:d4:50:9d:0f:fb:aa:58:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ab4e3ce3-ec1d-41f4-b72c-a3e9564e9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:5d:4d:21:fc:dd:e1:e7:8c:e9:03:5c:1f: 04:c4:4c:f5:5b:8f:a7:82:d9:0e:1f:9a:13:d4:36: 8b:f3:67:b5:55:9e:ba:03:60:01:45:cf:92:04:5e: ce:81:53:18:3c:a5:e8:42:68:a2:bb:0c:4c:f8:68: 3d:1c:4c:ed:3b:de:ae:f7:71:25:93:8c:32:c4:2e: ef:ba:b5:ce:ff:00:bb:db:c0:e5:84:6c:c7:6e:3f: 99:5e:a9:ba:d0:7b:37:96:35:38:cf:a5:88:71:06: 6a:cf:68:62:1e:71:8e:eb:25:88:bf:90:8c:0d:b4: 6a:07:18:95:a1:19:ec:c3:6e:f7:3a:c6:d3:7f:59: 99:8b:e1:6f:49:40:21:c7:f1:61:67:90:1d:58:2c: 80:62:a9:de:0c:be:4b:eb:5b:dd:d3:b2:6e:0c:78: 95:93:48:b7:86:50:2c:35:92:0e:da:ea:38:b2:db: e4:21:28:9b:cb:9b:f3:23:c5:b3:32:e1:55:29:9b: e0:ec:e5:ac:21:79:98:92:90:87:66:f2:bc:f7:1c: d6:1c:56:cc:01:4b:30:7f:77:89:a1:1a:9e:ea:ae: 95:e5:c3:f4:39:61:b7:23:4b:20:50:61:5c:a4:63: 3a:68:f4:2a:5e:61:67:74:aa:3d:69:9c:a6:6e:4d: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:01:94:DE:B7:A2:73:64:6E:77:A8:CE:EB:73:92:2C:7E:BD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b820e164-a4c1-37ee-b4ff-28da05f0ff3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301b:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:50:75:5b:a8:77:2b:f3:89:87:3c:7a:8f:4a:ee:b0:bb:4e: b5:cb:69:12:64:8e:9e:50:d3:93:0b:42:39:6b:a6:f7:09:40: ae:54:d6:5c:26:b1:57:e7:3a:b8:80:a5:80:98:7a:c6:a4:3a: 38:ac:ed:35:3f:40:0e:e9:6f:11:d0:ef:3c:72:29:6a:ab:82: c8:35:42:97:e6:4f:44:b2:98:08:49:5c:24:2b:83:11:a6:b6: 7a:61:36:48:f8:e5:64:70:20:23:d2:22:3a:5e:ca:55:82:74: a9:4b:a8:48:27:9c:ce:43:b3:9d:16:67:29:12:b3:11:06:82: 8f:ab:8d:2f:1b:09:fd:e3:9a:15:c5:be:1a:b0:20:88:41:19: ea:8e:15:68:59:8c:21:44:c7:c2:b3:44:de:f6:97:8c:43:d6: de:5a:c1:e1:a5:8d:f1:c8:7f:3c:2a:fe:56:70:8a:24:04:63: 3a:29:04:df:7d:33:bd:74:4c:17:8a:4f:c8:c1:94:00:a2:10: 56:e8:a3:5b:b5:7c:29:f4:66:04:14:2a:80:95:ce:1b:73:af: bb:7a:65:66:d3:47:15:fa:08:2e:d3:d6:e4:65:22:4a:bc:c1: 50:51:6a:00:5b:25:91:e9:50:0f:3b:21:2e:30:ab:90:dc:41: cc:c5:b5:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMBdrUUJ0P+6pYM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWI0ZTNjZTMtZWMxZC00MWY0LWI3MmMtYTNlOTU2NGU5NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTddTSH83eHnjOkDXB8ExEz1W4+ngtkOH5oT 1DaL82e1VZ66A2ABRc+SBF7OgVMYPKXoQmiiuwxM+Gg9HEztO96u93Elk4wyxC7v urXO/wC728DlhGzHbj+ZXqm60Hs3ljU4z6WIcQZqz2hiHnGO6yWIv5CMDbRqBxiV oRnsw273OsbTf1mZi+FvSUAhx/FhZ5AdWCyAYqneDL5L61vd07JuDHiVk0i3hlAs NZIO2uo4stvkISiby5vzI8WzMuFVKZvg7OWsIXmYkpCHZvK89xzWHFbMAUswf3eJ oRqe6q6V5cP0OWG3I0sgUGFcpGM6aPQqXmFndKo9aZymbk2Q5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGcaAZTet6JzZG53qM7rc5Isfr0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgyMGUxNjQtYTRjMS0z N2VlLWI0ZmYtMjhkYTA1ZjBmZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGzAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAp1B1W6h3K/OJhzx6j0rusLtOtctpEmSOnlDTkwtCOWum9wlArlTW XCaxV+c6uIClgJh6xqQ6OKztNT9ADulvEdDvPHIpaquCyDVCl+ZPRLKYCElcJCuD Eaa2emE2SPjlZHAgI9IiOl7KVYJ0qUuoSCeczkOznRZnKRKzEQaCj6uNLxsJ/eOa FcW+GrAgiEEZ6o4VaFmMIUTHwrNE3vaXjEPW3lrB4aWN8ch/PCr+VnCKJARjOikE 330zvXRMF4pPyMGUAKIQVuijW7V8KfRmBBQqgJXOG3Ovu3plZtNHFfoILtPW5GUi SrzBUFFqAFslkelQDzshLjCrkNxBzMW1OA== -----END CERTIFICATE-----Generated at Tue Jun 3 05:56:31 2025 by rpki-client