$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca8ec1ca-dc6e-3b1b-83d2-f9c832b6c982.roa File: ca8ec1ca-dc6e-3b1b-83d2-f9c832b6c982.roa (raw, json) Hash identifier: 0ahyfanJDCmLgTfoah8syGt87rXT8P9F21AHVZA8SVE= Subject key identifier: 42:1A:1E:11:14:A0:15:95:6D:2F:42:CD:8A:23:7F:A3:94:E5:1B:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323FA1A7BB8E3F376D2D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca8ec1ca-dc6e-3b1b-83d2-f9c832b6c982.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 2603:300c:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3f:a1:a7:bb:8e:3f:37:6d:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=85289a43-0388-4bd4-aca1-44f6dc8681cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:a9:b1:e3:5c:d2:2b:d3:ac:b3:95:8b:10: ba:b7:50:91:05:9e:8d:32:ce:ca:05:06:fd:b6:1f: 53:67:bb:3d:82:d7:ba:90:cf:ca:17:27:e6:54:95: 6e:36:30:07:7a:75:1c:70:1b:82:56:d7:7f:09:fe: ec:6d:31:0e:3d:1d:ca:06:9c:6d:cb:38:f3:45:31: e5:96:f6:f6:a1:65:be:b8:e2:bf:ad:3f:a1:91:28: e9:19:f8:ae:88:da:cf:f7:0e:42:09:e3:2b:f5:65: 4b:6e:e7:fd:63:de:9f:56:af:cf:ae:6d:9f:5e:2e: 78:84:ce:12:e1:77:da:d5:8c:95:6f:f3:a8:b6:43: b9:0a:f7:a1:77:8a:1d:1e:bd:bb:e1:87:26:76:a1: 2a:20:c2:88:a5:ea:02:1a:16:ef:8b:7a:12:1c:b8: d7:b7:eb:9b:db:82:e3:f0:9e:7c:91:cf:86:fe:19: 4e:16:9c:de:c8:49:82:63:57:e7:7c:2d:b8:f9:ed: 0f:5a:0d:70:74:74:01:bb:f6:bd:8f:82:9d:d5:b9: f4:cb:24:47:02:4f:d6:be:fc:61:9d:23:1c:0d:d2: d5:93:52:5e:48:28:ec:77:07:1d:bf:99:c7:67:39: a6:23:69:c4:b4:d0:2d:99:e5:25:f3:3d:9a:44:93: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:1E:11:14:A0:15:95:6D:2F:42:CD:8A:23:7F:A3:94:E5:1B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca8ec1ca-dc6e-3b1b-83d2-f9c832b6c982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300c:a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:58:e1:9b:8a:01:55:ca:41:d4:c1:a6:5d:88:be:a2:17:93: ce:99:40:52:e3:4f:79:3a:24:66:6b:77:06:b3:0b:9a:92:9e: dc:5e:7d:fa:4e:d8:54:bf:1b:d3:7a:97:7a:b7:2a:4e:d3:39: 10:6f:5e:15:1d:21:f5:af:43:11:98:e4:0f:ff:a0:99:6a:04: fb:aa:ca:e0:60:38:e0:68:bb:ce:9c:18:a3:4a:27:f4:90:ee: b2:9e:ee:4a:b7:28:4b:ad:a2:53:7d:f1:0a:1a:b2:89:a9:0d: 18:46:1f:1a:d3:7c:30:5c:e4:72:c4:11:39:53:f5:a5:ba:64: e7:5e:8d:52:c8:23:08:de:9e:5a:ac:e3:9a:25:b1:2d:a6:d2: fa:b9:f4:6d:be:bc:a4:18:0b:33:15:f4:9f:f7:43:48:12:c5: 3d:fe:f4:a6:d2:8f:93:83:85:a1:1f:f0:d5:b3:69:c9:bf:d5: 35:f3:49:f5:f6:c2:5d:5e:ba:56:c0:2f:5f:33:54:44:97:35: 5c:c8:6f:be:ea:12:e5:00:94:f9:56:e7:ca:ff:1b:c9:a4:23: 6d:9d:21:8d:d3:b3:25:3b:d6:39:6d:32:8c:c7:31:c3:ff:80: dc:26:d1:9f:96:79:1f:11:c2:69:e5:a4:d4:a0:f7:fa:c3:48: 36:df:ca:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMj+hp7uOPzdtLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODUyODlhNDMtMDM4OC00YmQ0LWFjYTEtNDRmNmRjODY4MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGGpseNc0ivTrLOVixC6t1CRBZ6NMs7KBQb9 th9TZ7s9gte6kM/KFyfmVJVuNjAHenUccBuCVtd/Cf7sbTEOPR3KBpxtyzjzRTHl lvb2oWW+uOK/rT+hkSjpGfiuiNrP9w5CCeMr9WVLbuf9Y96fVq/Prm2fXi54hM4S 4Xfa1YyVb/OotkO5Cvehd4odHr274YcmdqEqIMKIpeoCGhbvi3oSHLjXt+ub24Lj 8J58kc+G/hlOFpzeyEmCY1fnfC24+e0PWg1wdHQBu/a9j4Kd1bn0yyRHAk/Wvvxh nSMcDdLVk1JeSCjsdwcdv5nHZzmmI2nEtNAtmeUl8z2aRJOLuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEIaHhEUoBWVbS9CzYojf6OU5RvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E4ZWMxY2EtZGM2ZS0z YjFiLTgzZDItZjljODMyYjZjOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDAow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQFjhm4oBVcpB1MGmXYi+oheTzplAUuNPeTokZmt3BrMLmpKe3F59 +k7YVL8b03qXercqTtM5EG9eFR0h9a9DEZjkD/+gmWoE+6rK4GA44Gi7zpwYo0on 9JDusp7uSrcoS62iU33xChqyiakNGEYfGtN8MFzkcsQROVP1pbpk516NUsgjCN6e WqzjmiWxLabS+rn0bb68pBgLMxX0n/dDSBLFPf70ptKPk4OFoR/w1bNpyb/VNfNJ 9fbCXV66VsAvXzNURJc1XMhvvuoS5QCU+Vbnyv8byaQjbZ0hjdOzJTvWOW0yjMcx w/+A3CbRn5Z5HxHCaeWk1KD3+sNINt/K2Q== -----END CERTIFICATE-----Generated at Tue Jun 3 04:54:25 2025 by rpki-client