$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f7f05bc-78b5-312b-9604-479899ff6e95.roa File: 8f7f05bc-78b5-312b-9604-479899ff6e95.roa (raw, json) Hash identifier: B8+yMJayQCGUOdPfWLWFo4UJcFpbw8sG9QZdnJN9++8= Subject key identifier: 96:CC:E5:BA:71:42:D3:6D:91:3C:16:7A:4A:8C:CD:D2:13:D2:74:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C33CA70BBD867F5944D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f7f05bc-78b5-312b-9604-479899ff6e95.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7016 IP address blocks: 2603:301f:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:33:ca:70:bb:d8:67:f5:94:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=c61753d1-91c7-43cd-990a-8f863f23810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:9a:39:f2:98:44:50:8e:fe:57:78:e9:63: 30:5e:26:20:94:20:57:96:90:d8:f7:ba:13:b6:8b: 33:30:75:c3:aa:de:c6:77:61:ec:11:77:a4:59:36: 5b:0e:50:52:fd:9c:75:61:30:eb:ec:f5:31:f8:37: 22:e0:dc:e8:70:dd:4c:72:15:2d:b6:80:49:08:3c: ed:86:39:29:0c:be:88:88:64:35:72:cd:b6:90:0e: 53:d2:90:6e:3e:aa:fa:89:40:c0:e5:27:93:81:47: 1e:cc:e1:f9:f5:a1:0b:0e:f4:2b:8e:d4:2e:32:8f: da:a1:ab:b2:1f:f7:df:0e:b4:bd:a9:3b:71:a9:5c: ef:c4:c8:0e:39:9b:da:3d:67:6d:c7:a7:28:10:3a: d8:7b:88:ad:38:b3:05:2f:37:86:24:84:3e:7a:7b: 29:27:f7:63:8e:50:36:17:32:d6:17:d9:55:28:75: a7:81:2e:80:89:9a:32:07:c9:dd:6d:ed:d3:80:b1: 5c:01:0c:88:2c:d6:d8:9b:f8:a1:57:e9:15:44:db: 9f:3b:61:9b:0b:09:94:4c:74:f0:ed:83:43:62:e8: 00:00:4a:2f:d0:01:83:1f:e0:c9:b0:79:f8:70:89: 63:12:2d:f8:12:e1:2f:a9:a0:f6:5d:0d:43:af:42: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:E5:BA:71:42:D3:6D:91:3C:16:7A:4A:8C:CD:D2:13:D2:74:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f7f05bc-78b5-312b-9604-479899ff6e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301f:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e5:51:d0:42:6d:6e:aa:ad:9a:8d:c7:b0:46:6c:cb:92:fb: b8:7d:80:2b:fe:90:14:7a:ba:2b:19:7a:f4:ca:82:7d:a8:0d: 17:dc:6c:5d:6c:2b:45:e2:57:1e:1a:cf:d0:79:71:3e:2e:99: eb:c5:9a:7d:e9:63:56:dc:cb:20:48:2c:2d:e4:7a:8b:13:3b: af:79:3d:e2:d9:9a:40:c7:be:21:c6:57:73:34:5c:c3:1b:c0: 85:32:00:96:ab:4d:ac:0f:0e:5b:47:d6:0b:17:96:07:4e:21: 32:85:62:45:d5:5c:24:b6:02:9e:6b:1e:ec:18:aa:4c:a5:a6: 02:08:9d:47:bc:90:a6:03:0c:9e:ce:7a:29:da:a5:40:f8:bc: c4:e6:29:13:79:50:59:97:5d:3c:45:d0:e2:3d:80:5a:3d:e8: 9d:17:f1:e5:fb:11:46:da:b9:94:d6:c2:df:41:a4:47:88:96: a5:ea:2d:45:78:4a:11:48:4f:ad:00:eb:9f:a0:72:17:66:b0: ae:e3:61:7a:2d:5c:16:7b:84:11:ad:52:10:e9:8d:e9:9b:7e: df:9a:f5:ad:c8:6d:79:2f:fb:c2:23:25:cb:5e:8b:63:ae:99: 5c:f2:e8:5f:84:a8:57:13:d5:cf:ac:27:f6:52:c9:88:e5:ad: 4a:bc:a0:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyLDPKcLvYZ/WUTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YzYxNzUzZDEtOTFjNy00M2NkLTk5MGEtOGY4NjNmMjM4MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxWaOfKYRFCO/ld46WMwXiYglCBXlpDY97oT toszMHXDqt7Gd2HsEXekWTZbDlBS/Zx1YTDr7PUx+Dci4NzocN1MchUttoBJCDzt hjkpDL6IiGQ1cs22kA5T0pBuPqr6iUDA5SeTgUcezOH59aELDvQrjtQuMo/aoauy H/ffDrS9qTtxqVzvxMgOOZvaPWdtx6coEDrYe4itOLMFLzeGJIQ+enspJ/djjlA2 FzLWF9lVKHWngS6AiZoyB8ndbe3TgLFcAQyILNbYm/ihV+kVRNufO2GbCwmUTHTw 7YNDYugAAEov0AGDH+DJsHn4cIljEi34EuEvqaD2XQ1Dr0L88QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJbM5bpxQtNtkTwWekqMzdIT0nRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY3ZjA1YmMtNzhiNS0z MTJiLTk2MDQtNDc5ODk5ZmY2ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwHyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYuVR0EJtbqqtmo3HsEZsy5L7uH2AK/6QFHq6Kxl69MqCfagNF9xs XWwrReJXHhrP0HlxPi6Z68WafeljVtzLIEgsLeR6ixM7r3k94tmaQMe+IcZXczRc wxvAhTIAlqtNrA8OW0fWCxeWB04hMoViRdVcJLYCnmse7BiqTKWmAgidR7yQpgMM ns56KdqlQPi8xOYpE3lQWZddPEXQ4j2AWj3onRfx5fsRRtq5lNbC30GkR4iWpeot RXhKEUhPrQDrn6ByF2awruNhei1cFnuEEa1SEOmN6Zt+35r1rchteS/7wiMly16L Y66ZXPLoX4SoVxPVz6wn9lLJiOWtSrygOA== -----END CERTIFICATE-----Generated at Sun May 11 04:08:35 2025 by rpki-client