$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa File: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (raw, json) Hash identifier: S7rzkAf+NTueqq6uF//NvHCNnl/EJA//H37OK5S9ATI= Subject key identifier: 8C:3C:6E:67:B9:C1:B6:0A:7F:51:D1:61:5D:09:A3:65:2D:0B:F0:12 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584925B3A6B706AC5C978FABA380 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 62915 IP address blocks: 2607:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a6:b7:06:ac:5c:97:8f:ab:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=3b72e23a-bffc-4cfc-b2a3-bac33c24623c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:d1:a1:fd:34:89:47:92:10:30:fb:86:4c: 77:10:53:08:e9:b6:73:5b:43:af:81:f7:ec:8b:fa: b4:4c:c1:8c:c9:04:c6:03:0d:77:03:4d:1b:29:ff: be:bb:0e:bf:22:f1:9a:66:19:9d:73:df:6c:49:72: 3a:9a:9c:8a:99:a1:58:9f:aa:2c:bd:fa:fc:07:fa: e7:02:67:ec:5c:b1:ce:f8:50:82:11:71:78:e9:ba: 30:05:14:84:00:23:bc:ae:be:8f:8e:02:a8:d1:df: 17:b5:f4:bf:e9:a5:06:cd:19:43:96:a3:92:d1:dd: 37:1e:22:5b:ae:06:8a:3d:19:74:35:f5:aa:2d:3a: 02:8f:66:9b:63:dc:e0:a5:c2:13:93:42:ae:7f:cd: b3:ed:02:81:b3:32:77:fc:50:2d:fc:fd:96:07:1b: ae:ce:6c:a1:1c:8c:17:26:31:00:07:9b:68:a7:ec: db:cc:ce:f4:e8:89:19:cf:f3:5a:14:56:86:2e:31: ad:f8:2a:17:f1:3b:cd:6e:ae:b8:69:83:67:5d:bd: 33:64:8b:c9:df:96:61:5d:5d:36:05:e8:b5:b7:a3: 9a:10:50:7e:00:d5:43:58:e2:f2:62:6f:2a:1b:5d: df:91:a6:47:b6:60:f9:c3:b2:10:bf:6e:13:3f:58: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:6E:67:B9:C1:B6:0A:7F:51:D1:61:5D:09:A3:65:2D:0B:F0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv6: 2607:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e4:a5:73:92:62:dd:24:b5:72:67:12:72:92:2c:7e:f6:eb: 83:fb:b6:2c:f7:89:69:57:de:7f:0d:b3:ef:78:ba:60:07:7d: 9f:5d:2c:2e:53:eb:88:e1:92:c6:cb:01:69:e8:a1:e0:a4:a0: 34:35:bf:42:e4:1e:91:27:d3:4d:79:54:16:ef:96:e6:c3:04: d6:02:9a:dd:e1:55:d5:2e:64:b3:59:c3:c4:92:fd:55:d1:10: fa:ac:99:ff:7f:df:c7:de:c6:72:fe:75:7e:0b:7a:a7:39:ed: e7:71:e1:a7:ea:1e:5d:8f:73:17:c5:01:e9:3c:d9:f9:a5:fa: 57:a7:41:c3:f0:25:bc:2c:70:e8:ae:c9:fe:b5:1e:97:0b:93: f6:99:49:71:bd:f2:04:77:c3:e6:d9:08:3e:3f:a6:e2:57:4d: fb:c5:ba:2c:ba:b8:b0:a9:6b:e9:df:f7:af:aa:f5:02:b1:4e: 61:ec:5c:4c:0a:f7:ba:14:92:91:42:5d:e1:a6:8d:79:15:72: 5a:47:16:f9:43:bc:07:7f:ee:9d:b7:f2:bc:cf:d8:07:16:d4: e4:ff:be:16:fc:cc:cc:0b:1b:b3:6f:48:95:2e:9a:be:7c:61: 2e:9c:c6:bf:01:e8:9f:a0:39:9c:21:8b:10:97:bf:f5:89:ed: 9e:71:37:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkls6a3Bqxcl4+ro4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk M2I3MmUyM2EtYmZmYy00Y2ZjLWIyYTMtYmFjMzNjMjQ2MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvrRof00iUeSEDD7hkx3EFMI6bZzW0Ovgffs i/q0TMGMyQTGAw13A00bKf++uw6/IvGaZhmdc99sSXI6mpyKmaFYn6osvfr8B/rn AmfsXLHO+FCCEXF46bowBRSEACO8rr6PjgKo0d8XtfS/6aUGzRlDlqOS0d03HiJb rgaKPRl0NfWqLToCj2abY9zgpcITk0Kuf82z7QKBszJ3/FAt/P2WBxuuzmyhHIwX JjEAB5top+zbzM706IkZz/NaFFaGLjGt+CoX8TvNbq64aYNnXb0zZIvJ35ZhXV02 Bei1t6OaEFB+ANVDWOLyYm8qG13fkaZHtmD5w7IQv24TP1jFGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIw8bme5wbYKf1HRYV0Jo2UtC/ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMzU0MWMzMjQtZTQzMy0z NzFiLWJlN2EtZmFhZjIyZmVhNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCc5KVzkmLdJLVyZxJykix+9uuD+7Ys94lpV95/DbPveLpgB32fXSwu U+uI4ZLGywFp6KHgpKA0Nb9C5B6RJ9NNeVQW75bmwwTWAprd4VXVLmSzWcPEkv1V 0RD6rJn/f9/H3sZy/nV+C3qnOe3nceGn6h5dj3MXxQHpPNn5pfpXp0HD8CW8LHDo rsn+tR6XC5P2mUlxvfIEd8Pm2Qg+P6biV037xbosuriwqWvp3/evqvUCsU5h7FxM Cve6FJKRQl3hpo15FXJaRxb5Q7wHf+6dt/K8z9gHFtTk/74W/MzMCxuzb0iVLpq+ fGEunMa/AeifoDmcIYsQl7/1ie2ecTdD -----END CERTIFICATE-----Generated at Sat Apr 12 16:12:59 2025 by rpki-client