$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa File: 8b69e542-2f34-3348-8fbd-317efc06b5b4.roa (raw, json) Hash identifier: XkpWiJ3hhS2LZ6krrcm0xz0R6bwSyOvG2tNKv84tMs0= Subject key identifier: 96:76:4E:08:FA:DF:5E:85:37:C4:F9:6B:36:3E:CE:70:2A:0F:67:A0 Certificate issuer: /CN=0d6bb559-168b-45eb-91f1-f7988760221d Certificate serial: 010D0C9F43285849C0A4E5B751CEDA2F85F67740 Authority key identifier: 76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 46437 IP address blocks: 2604:3380::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e5:b7:51:ce:da:2f:85:f6:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb559-168b-45eb-91f1-f7988760221d Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=559a874b-183b-4b7e-a0a7-e53a11ae46cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:68:53:99:2d:67:47:b5:b1:45:8c:8e:65: 28:8f:6c:3a:a0:5a:c8:31:16:52:15:17:64:9c:ec: e9:cf:d0:66:e4:91:10:61:b1:06:fe:3d:30:86:6a: 75:1f:50:24:2a:7a:da:8a:5b:c7:cf:b1:27:c5:09: 7d:1d:26:61:33:6a:38:af:a4:bd:75:2e:7a:4c:fd: 15:9b:df:69:a4:f5:84:ce:8d:14:9f:98:5b:d9:16: c2:96:d6:2b:d8:8c:c4:f7:56:fc:73:2d:a9:71:c1: d8:ef:e0:9d:38:43:9c:f1:12:65:f5:42:2e:15:a3: be:73:fe:c6:46:47:59:cc:9d:70:e4:20:cb:0a:a1: 3a:55:99:ef:a6:31:a5:a8:06:b9:22:b6:09:4c:09: 4c:93:75:cf:75:88:19:0b:73:8a:8a:32:43:2c:6e: 4d:99:5f:4c:47:9b:7b:e6:66:5b:db:03:17:b8:4d: ff:ce:41:7e:f8:0c:84:db:53:e5:f6:47:4e:43:bf: da:4b:aa:fa:c0:82:5a:f4:ab:c5:5c:bd:36:50:b9: 7d:61:8a:2e:8f:44:da:b5:d6:9b:58:ae:fc:d8:fe: 9c:5a:f9:43:fe:e4:d2:95:1e:45:c2:04:12:33:84: cd:69:3b:49:dd:48:97:e0:73:3a:86:5d:77:b0:4a: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:4E:08:FA:DF:5E:85:37:C4:F9:6B:36:3E:CE:70:2A:0F:67:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl X509v3 Authority Key Identifier: keyid:76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3380::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8e:15:6c:c0:9a:ba:37:08:4e:a1:c1:e9:64:e0:fe:13:a0: e0:80:7d:e2:99:93:f3:4a:b4:a4:28:12:a3:e8:5e:d6:86:01: d3:87:1a:ac:98:04:93:a4:22:c4:0a:b7:11:a9:09:99:1b:8b: f4:d3:d9:07:e4:c5:a3:00:98:57:c1:48:b4:3c:67:23:bc:5d: 20:21:33:24:4b:47:b3:12:68:c4:3c:f8:c9:c4:c7:d7:39:1c: c7:10:1d:ba:1a:23:c1:aa:0e:15:40:82:f6:a2:0d:65:fa:cf: b0:65:b9:a5:24:3d:b1:aa:45:82:36:d1:b5:d0:29:df:6c:0f: 98:53:11:7a:bf:65:6f:28:3f:06:22:cc:80:78:0e:60:55:95: 17:72:d6:b4:af:ce:d7:c7:76:25:92:9a:2e:cd:f6:10:58:92: e5:60:d6:23:85:9c:88:94:6d:44:27:90:a4:71:bb:d2:5a:71: 6d:ba:c3:f6:7e:81:ae:20:b2:8e:6a:6b:3d:41:6f:16:b7:b0: 6d:67:4d:be:e2:3c:43:d8:d0:91:6d:da:72:84:ee:67:fd:a5: 0f:b0:93:37:08:be:23:01:5f:e1:e2:db:53:01:d9:d1:aa:70: 33:ac:8d:1e:2e:fa:a3:e8:ca:a4:95:eb:04:7a:77:48:02:3d: 3a:97:91:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApOW3Uc7aL4X2d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2YmI1NTktMTY4Yi00NWViLTkxZjEtZjc5ODg3NjAy MjFkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NTU5YTg3NGItMTgzYi00YjdlLWEwYTctZTUzYTExYWU0NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k9oU5ktZ0e1sUWMjmUoj2w6oFrIMRZSFRdk nOzpz9Bm5JEQYbEG/j0whmp1H1AkKnrailvHz7EnxQl9HSZhM2o4r6S9dS56TP0V m99ppPWEzo0Un5hb2RbCltYr2IzE91b8cy2pccHY7+CdOEOc8RJl9UIuFaO+c/7G RkdZzJ1w5CDLCqE6VZnvpjGlqAa5IrYJTAlMk3XPdYgZC3OKijJDLG5NmV9MR5t7 5mZb2wMXuE3/zkF++AyE21Pl9kdOQ7/aS6r6wIJa9KvFXL02ULl9YYouj0Tatdab WK782P6cWvlD/uTSlR5FwgQSM4TNaTtJ3UiX4HM6hl13sEoLcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZ2Tgj6316FN8T5azY+znAqD2egMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZi YjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4ODc2MDIyMWQvOGI2OWU1NDItMmYzNC0z MzQ4LThmYmQtMzE3ZWZjMDZiNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGQ2YmI1NTktMTY4Yi00NWViLTkx ZjEtZjc5ODg3NjAyMjFkLzBkNmJiNTU5LTE2OGItNDVlYi05MWYxLWY3OTg4NzYw MjIxZC5jcmwwHwYDVR0jBBgwFoAUdgVjZCvXvC75OWUe+wCuP+wHzckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZiYjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4 ODc2MDIyMWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgQzgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqjhVswJq6NwhOocHpZOD+E6DggH3imZPzSrSkKBKj6F7WhgHThxqs mASTpCLECrcRqQmZG4v009kH5MWjAJhXwUi0PGcjvF0gITMkS0ezEmjEPPjJxMfX ORzHEB26GiPBqg4VQIL2og1l+s+wZbmlJD2xqkWCNtG10CnfbA+YUxF6v2VvKD8G IsyAeA5gVZUXcta0r87Xx3YlkpouzfYQWJLlYNYjhZyIlG1EJ5CkcbvSWnFtusP2 foGuILKOams9QW8Wt7BtZ02+4jxD2NCRbdpyhO5n/aUPsJM3CL4jAV/h4ttTAdnR qnAzrI0eLvqj6MqklesEendIAj06l5Ee -----END CERTIFICATE-----Generated at Sun May 11 03:37:25 2025 by rpki-client