$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa File: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json) Hash identifier: a4KXMQb5CYkaEeGcYSVqIyNeBG7BoidKWT3sJ9T20Rc= Subject key identifier: C0:EB:BA:0F:04:A6:37:94:92:2E:ED:CA:36:B3:83:AA:63:72:11:A6 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F432858493243DBFB4456A69352CA2E80 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 19528 IP address blocks: 2605:14c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:db:fb:44:56:a6:93:52:ca:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=43889134-c45c-464c-af69-f0769fec0cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:7d:9a:08:54:dc:10:e8:da:de:20:da:69: 23:03:dd:fb:9c:f9:b5:d0:7e:f4:86:34:73:37:12: d1:b8:2b:f9:9e:8c:3a:44:15:9f:4c:28:fb:5b:df: 77:c8:f0:ff:8a:a6:b1:5f:d7:ac:c7:d8:5a:61:1f: 1c:9e:ae:36:8b:fb:fc:4f:48:e0:a6:96:cd:47:2f: 5b:b1:a1:dc:ea:29:58:49:7c:2a:ee:0c:e6:42:d3: ec:a9:74:85:4a:a2:17:ea:20:e7:ed:b3:ca:f6:6f: 53:3a:7d:24:98:41:ef:56:1b:31:83:bb:b6:37:12: 91:33:ab:52:ad:0c:1a:a3:d8:6f:1d:2e:53:14:94: f6:4e:bf:68:c8:7d:a1:42:d4:ba:64:47:9c:1c:ff: 13:55:23:af:9e:bc:29:74:c1:c6:c9:ca:4c:b1:69: 27:e2:3f:99:7b:a1:6c:99:99:f0:8a:ff:0e:d8:09: 61:fc:20:63:ae:bd:2e:0d:3a:b0:c7:6d:5d:32:7c: 1b:6e:eb:cb:92:16:47:f7:98:3e:0f:db:b2:95:a3: 35:9f:89:a3:07:1b:6f:f8:0e:45:67:a0:25:95:22: 94:e4:e4:7d:b1:5d:f4:10:dc:7d:ab:88:6c:67:cf: 1a:46:27:5c:85:15:31:e5:8e:5f:d3:46:46:59:05: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EB:BA:0F:04:A6:37:94:92:2E:ED:CA:36:B3:83:AA:63:72:11:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv6: 2605:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:58:0d:57:7b:77:9d:6b:5f:22:9e:bb:39:44:0f:8c:98:03: 89:99:19:fb:38:01:0e:67:3b:ca:5f:e5:d5:ab:e9:13:9a:83: 31:54:30:04:5a:e9:d3:29:a6:b7:8d:a4:f2:0d:44:a0:6a:73: 21:cb:8d:c5:a1:27:62:c2:99:a4:74:ad:d4:89:93:ab:70:9c: 31:ce:8f:b8:16:78:e3:65:15:cf:1d:6d:4d:a2:ce:90:76:8a: 9e:19:65:af:cc:53:6f:9b:8c:e1:89:17:3e:6a:c7:58:3d:99: e0:e8:ff:c3:06:9d:40:41:d3:1b:07:88:be:6c:09:41:b2:5f: d5:a2:8c:39:7d:27:b2:30:19:b5:3b:73:d2:47:d2:93:73:bc: 49:b3:0c:c0:a9:4b:41:c7:2b:9f:88:f1:56:67:75:0d:68:69: f8:1b:84:dc:9c:3a:65:1b:6e:34:76:e8:b1:b8:7e:e0:2e:bc: 6f:05:a3:28:a0:f7:2d:6c:b0:a9:e2:5c:2c:02:0e:6e:0f:fa: cc:fa:7d:93:6f:08:30:d5:00:c1:14:a1:6b:6d:92:fa:12:2b: 27:5c:66:4f:df:96:a4:48:17:8e:44:a8:6a:e4:06:81:3a:5d: 03:d4:1b:05:26:67:93:41:cb:fc:8a:56:41:2a:e0:dc:41:74: 9f:8d:ab:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkyQ9v7RFamk1LKLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NDM4ODkxMzQtYzQ1Yy00NjRjLWFmNjktZjA3NjlmZWMwY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqB9mghU3BDo2t4g2mkjA937nPm10H70hjRz NxLRuCv5now6RBWfTCj7W993yPD/iqaxX9esx9haYR8cnq42i/v8T0jgppbNRy9b saHc6ilYSXwq7gzmQtPsqXSFSqIX6iDn7bPK9m9TOn0kmEHvVhsxg7u2NxKRM6tS rQwao9hvHS5TFJT2Tr9oyH2hQtS6ZEecHP8TVSOvnrwpdMHGycpMsWkn4j+Ze6Fs mZnwiv8O2Alh/CBjrr0uDTqwx21dMnwbbuvLkhZH95g+D9uylaM1n4mjBxtv+A5F Z6AllSKU5OR9sV30ENx9q4hsZ88aRidchRUx5Y5f00ZGWQWQbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMDrug8EpjeUki7tyjazg6pjchGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvM2EyZDcyNzQtNDIzNi0z MGJkLTk2NTQtZDlhYjlkZmQzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmWA1Xe3eda18inrs5RA+MmAOJmRn7OAEOZzvKX+XVq+kTmoMxVDAE WunTKaa3jaTyDUSganMhy43FoSdiwpmkdK3UiZOrcJwxzo+4FnjjZRXPHW1Nos6Q doqeGWWvzFNvm4zhiRc+asdYPZng6P/DBp1AQdMbB4i+bAlBsl/Voow5fSeyMBm1 O3PSR9KTc7xJswzAqUtBxyufiPFWZ3UNaGn4G4TcnDplG240duixuH7gLrxvBaMo oPctbLCp4lwsAg5uD/rM+n2Tbwgw1QDBFKFrbZL6EisnXGZP35akSBeORKhq5AaB Ol0D1BsFJmeTQcv8ilZBKuDcQXSfjasf -----END CERTIFICATE-----Generated at Fri Apr 11 22:40:28 2025 by rpki-client