$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f9ab35-ed32-3ed8-ac88-aecac2f91694.roa File: d8f9ab35-ed32-3ed8-ac88-aecac2f91694.roa (raw, json) Hash identifier: fzEtMJeR45JP6UJsrruZVdsKcvytYU6PfeL8eJVtYio= Subject key identifier: F1:78:9C:BC:8D:2D:57:56:D2:5C:03:3B:85:7C:3C:87:14:0C:D1:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF276091ADE50DF0B03500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f9ab35-ed32-3ed8-ac88-aecac2f91694.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 2603:2049:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:27:60:91:ad:e5:0d:f0:b0:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a856fa9f-70ab-4de3-b8bd-e3e5d1f3549f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:db:52:b1:c8:92:e6:df:c8:31:3d:9c:c2: 48:f8:cb:79:43:1e:18:25:26:65:a5:94:62:99:c0: 49:77:5b:76:6b:3d:d8:ed:e5:47:85:42:0b:22:b0: 1a:3d:1d:92:b3:f0:be:45:82:e2:0f:86:7d:50:b7: 91:21:19:0d:d3:8b:ca:da:f9:4d:70:94:ac:11:36: 9b:ba:cd:83:02:ee:dc:9d:41:77:1d:40:6a:b5:37: 88:0b:13:bc:2b:a7:7b:32:47:18:f6:03:be:08:9f: ca:b0:a7:75:63:a8:45:5d:d4:ad:b5:11:a9:14:61: f6:1d:40:ba:9f:d2:47:75:60:bc:ac:fb:35:41:06: 9c:04:28:62:8c:e8:fc:d8:6d:4c:c7:f4:41:e0:ca: 7e:fd:31:c5:eb:28:8d:f4:24:e4:46:60:54:5f:7a: fa:c2:3b:df:7e:20:20:04:ca:4d:a3:8e:1a:2c:57: e8:dc:d8:f2:78:d6:21:0a:28:6c:4b:18:bc:64:cb: 1f:c7:bc:25:7e:75:93:85:75:35:90:7e:f3:6f:65: 57:ce:f9:b4:50:04:41:05:be:52:50:12:d9:ec:f0: 13:45:71:71:4d:81:18:16:94:da:5f:7c:b2:dc:4c: fb:3a:46:d8:5e:9e:a0:7f:01:5e:ec:b1:41:f9:50: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:9C:BC:8D:2D:57:56:D2:5C:03:3B:85:7C:3C:87:14:0C:D1:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f9ab35-ed32-3ed8-ac88-aecac2f91694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2049:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cf:da:5d:32:50:11:08:ad:97:c0:00:e4:b2:8d:cc:6b:c5: d6:0f:3b:37:f0:7a:47:22:60:27:b9:49:20:57:9b:94:8f:0a: bd:7e:8f:be:f1:1c:43:59:2d:cb:3c:b8:8d:32:16:83:3f:14: a6:5b:23:05:9e:d5:d8:42:10:c6:a9:1b:db:d7:2f:12:90:22: 5b:79:5e:1e:db:ab:4f:8f:93:f4:18:51:2d:cc:ee:7f:f7:4b: 74:4d:6f:58:dd:82:0c:74:4a:38:55:30:e6:44:13:bd:50:5c: 99:89:8d:ae:28:c4:fa:67:2f:38:95:47:7e:2c:b3:a2:cf:b5: de:7e:a0:16:43:1e:60:9a:7c:c9:57:a9:37:4a:b0:3b:b4:f3: da:f7:b5:50:fb:63:1a:e1:66:60:3c:ae:43:e0:e0:b5:e9:02: ff:ae:bb:89:7a:c0:e5:bf:ad:57:5a:6e:c7:a5:60:96:33:0a: c4:72:94:bc:a3:f5:14:2b:fe:2f:71:e4:40:00:1b:a2:3a:48: d0:9b:df:91:45:2b:00:a8:18:a8:91:87:63:4b:e0:2b:85:03: 42:9e:a8:15:21:45:7b:22:3d:f5:db:82:6a:80:6a:a0:09:5a: d7:70:f4:59:e3:e6:f4:b5:5b:3c:50:f4:c2:66:21:24:da:10: b2:03:96:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrydgka3lDfCwNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTg1NmZhOWYtNzBhYi00ZGUzLWI4YmQtZTNlNWQxZjM1NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNnbUrHIkubfyDE9nMJI+Mt5Qx4YJSZlpZRi mcBJd1t2az3Y7eVHhUILIrAaPR2Ss/C+RYLiD4Z9ULeRIRkN04vK2vlNcJSsETab us2DAu7cnUF3HUBqtTeICxO8K6d7MkcY9gO+CJ/KsKd1Y6hFXdSttRGpFGH2HUC6 n9JHdWC8rPs1QQacBChijOj82G1Mx/RB4Mp+/THF6yiN9CTkRmBUX3r6wjvffiAg BMpNo44aLFfo3NjyeNYhCihsSxi8ZMsfx7wlfnWThXU1kH7zb2VXzvm0UARBBb5S UBLZ7PATRXFxTYEYFpTaX3yy3Ez7OkbYXp6gfwFe7LFB+VDSxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPF4nLyNLVdW0lwDO4V8PIcUDNHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhmOWFiMzUtZWQzMi0z ZWQ4LWFjODgtYWVjYWMyZjkxNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgSUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjc/aXTJQEQitl8AA5LKNzGvF1g87N/B6RyJgJ7lJIFeblI8KvX6P vvEcQ1ktyzy4jTIWgz8UplsjBZ7V2EIQxqkb29cvEpAiW3leHturT4+T9BhRLczu f/dLdE1vWN2CDHRKOFUw5kQTvVBcmYmNrijE+mcvOJVHfiyzos+13n6gFkMeYJp8 yVepN0qwO7Tz2ve1UPtjGuFmYDyuQ+DgtekC/667iXrA5b+tV1pux6VgljMKxHKU vKP1FCv+L3HkQAAbojpI0JvfkUUrAKgYqJGHY0vgK4UDQp6oFSFFeyI99duCaoBq oAla13D0WePm9LVbPFD0wmYhJNoQsgOWoA== -----END CERTIFICATE-----Generated at Thu Apr 10 11:26:55 2025 by rpki-client