$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa File: 3feeeaca-68cc-366d-8054-94f196ab0dc2.roa (raw, json) Hash identifier: xqckHV3IoJPjqtY5h80jlbqeKo2TUhcVmhoyPooItYw= Subject key identifier: 0F:80:5E:04:3C:14:A4:56:23:B4:E8:AB:4D:EB:8C:EA:06:8F:FB:82 Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F43285849BDDA3B7A7B83F7DE492F8700 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 29888 IP address blocks: 2620:109:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3b:7a:7b:83:f7:de:49:2f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=6c475920-2a4a-4fe3-aa3f-538de4f81557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:d5:49:9c:1d:c7:b0:ac:ae:ce:9c:83:a0: 79:98:89:76:e8:84:9b:c1:12:b6:0e:35:9c:1e:12: 11:b5:49:91:76:62:77:41:8a:c4:7b:58:54:3a:a1: 7c:12:bd:c5:ed:17:c2:a9:4d:57:38:18:f5:0b:a2: 3d:8d:bd:1b:6c:c0:79:40:9d:c4:65:a9:5f:36:a4: 3c:91:b0:1f:5e:72:b9:79:b5:45:43:78:fe:85:17: 90:5c:97:78:e6:5d:80:7e:b3:19:40:de:1b:7a:4e: 15:77:09:1c:35:49:bc:75:87:bd:7a:76:ba:03:48: d0:ab:d7:c7:3f:6d:d7:20:fb:e6:57:b5:a9:15:d8: 51:f2:a3:85:67:b1:70:9c:01:c9:03:19:f6:69:a4: 69:c5:98:b2:b9:56:0f:63:44:98:3c:d0:32:6a:2d: ca:a4:4b:81:85:dc:07:86:b6:5f:07:da:fa:0f:d4: e0:cf:49:f3:54:ad:45:04:99:45:7a:84:13:34:fc: ef:fc:c2:a3:00:d8:f6:b2:d3:d1:75:2a:82:9e:45: cc:70:34:b8:91:29:58:cf:cb:7a:33:fb:1d:05:46: 8d:bb:4f:14:74:6f:e9:72:20:37:2d:d9:09:94:2e: 41:0a:d7:5a:af:7a:22:0b:ae:45:e0:61:a3:bb:6e: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:80:5E:04:3C:14:A4:56:23:B4:E8:AB:4D:EB:8C:EA:06:8F:FB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv6: 2620:109:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a4:69:f9:17:c9:4f:92:62:24:1d:45:94:b5:25:d5:cd:57: 75:88:43:47:78:fb:81:4b:4b:36:ce:18:f3:21:f7:85:13:10: e1:bb:c6:f6:36:b1:2d:d8:84:b8:72:df:b1:e6:25:81:e2:ad: 6a:3f:1b:3b:c7:53:1b:96:bf:b5:46:ea:52:8b:c5:15:b8:d2: 4e:76:7e:de:60:48:09:d5:90:73:f4:0a:48:65:83:4a:35:1b: d4:dd:ed:1e:38:8f:25:29:23:99:df:5e:02:71:a9:65:1e:3b: 59:7d:aa:e1:eb:7a:16:fb:d7:48:6a:ce:cd:1b:5d:65:8d:de: 0e:15:43:a3:8b:c5:f9:5d:6d:b6:ef:71:f4:ef:e7:5b:2a:d9: 44:99:3b:c0:55:7a:2b:4b:cd:b9:e7:be:fa:66:05:dc:ae:73: 5b:8e:73:81:2d:1b:6c:80:c4:e9:1f:9c:7d:6a:81:86:db:36: c2:9d:b2:74:36:58:a6:a5:6e:62:24:2f:e2:30:5a:be:eb:93: 4b:d8:b4:bf:4e:ed:a8:a6:8e:f5:c0:9a:8a:23:bc:0e:91:0f: c3:23:0e:04:e0:b8:2d:f9:2a:f4:6a:9b:46:8f:ef:57:f0:87: 5d:0e:54:7c:4e:2c:00:98:8b:ba:b0:21:06:08:de:35:9e:c5: 35:83:f3:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92jt6e4P33kkvhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NmM0NzU5MjAtMmE0YS00ZmUzLWFhM2YtNTM4ZGU0ZjgxNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVzVSZwdx7Csrs6cg6B5mIl26ISbwRK2DjWc HhIRtUmRdmJ3QYrEe1hUOqF8Er3F7RfCqU1XOBj1C6I9jb0bbMB5QJ3EZalfNqQ8 kbAfXnK5ebVFQ3j+hReQXJd45l2AfrMZQN4bek4VdwkcNUm8dYe9ena6A0jQq9fH P23XIPvmV7WpFdhR8qOFZ7FwnAHJAxn2aaRpxZiyuVYPY0SYPNAyai3KpEuBhdwH hrZfB9r6D9Tgz0nzVK1FBJlFeoQTNPzv/MKjANj2stPRdSqCnkXMcDS4kSlYz8t6 M/sdBUaNu08UdG/pciA3LdkJlC5BCtdar3oiC65F4GGju264pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+AXgQ8FKRWI7Toq03rjOoGj/uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvM2ZlZWVhY2EtNjhjYy0z NjZkLTgwNTQtOTRmMTk2YWIwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCTAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGkafkXyU+SYiQdRZS1JdXNV3WIQ0d4+4FLSzbOGPMh94UTEOG7 xvY2sS3YhLhy37HmJYHirWo/GzvHUxuWv7VG6lKLxRW40k52ft5gSAnVkHP0Ckhl g0o1G9Td7R44jyUpI5nfXgJxqWUeO1l9quHrehb710hqzs0bXWWN3g4VQ6OLxfld bbbvcfTv51sq2USZO8BVeitLzbnnvvpmBdyuc1uOc4EtG2yAxOkfnH1qgYbbNsKd snQ2WKalbmIkL+IwWr7rk0vYtL9O7aimjvXAmoojvA6RD8MjDgTguC35KvRqm0aP 71fwh10OVHxOLACYi7qwIQYI3jWexTWD8wg= -----END CERTIFICATE-----Generated at Mon May 12 10:25:55 2025 by rpki-client