$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa File: cddf7f78-b844-3101-b25e-04a2714b6f1b.roa (raw, json) Hash identifier: xN+TKAwe3R4SNeEZQ/R49zCt/XPhvf14kxuDmx2WVAM= Subject key identifier: 4C:C5:CD:C7:D1:57:66:DF:66:B0:F1:7C:39:6D:C0:0C:68:3C:CA:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFE374525EA06DF220F180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 2603:3024:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:e3:74:52:5e:a0:6d:f2:20:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4cd8dece-729f-46fe-af98-227255e0ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:97:57:4b:f6:05:d6:73:d0:82:90:6c:01: bb:46:86:e7:bc:c2:de:3b:9f:fc:71:76:b2:9d:01: 32:d9:3d:7c:d8:24:82:16:23:0c:ce:1f:6d:9a:e0: 06:3e:09:26:dd:b8:48:e8:72:df:94:46:0d:f0:ee: 5e:10:ec:cb:52:e4:3f:f0:32:f1:4e:4b:71:45:73: a6:07:15:17:36:6a:9c:a7:a4:7d:66:c5:64:da:2d: d3:76:b3:2d:80:39:7e:ea:f3:06:09:f4:e5:22:13: c3:61:2d:45:8a:8c:18:ab:7f:5a:e5:1d:fd:a0:9d: 56:d5:65:bf:32:1d:13:ca:e2:c6:f8:4d:59:97:4a: 7f:8f:b6:38:d6:0d:07:f9:8d:df:3e:04:3b:ee:d1: 26:8f:3d:d3:7a:6c:78:a4:fa:cc:d7:5d:6c:68:1a: 68:4e:1a:ec:31:47:72:7a:1c:3a:f4:c8:b8:23:f9: f9:98:cf:17:e0:57:e6:61:54:f8:ee:23:ea:05:c9: 2a:5f:fd:91:46:d3:86:f3:a8:5d:8c:e2:af:60:25: fb:42:92:20:6e:3e:11:26:30:53:b2:dd:6b:61:ff: 6e:c8:03:ad:d8:c2:60:d3:98:58:c0:69:91:1d:cd: ce:08:ca:6d:51:17:84:75:4b:8b:87:7a:7d:a7:2e: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C5:CD:C7:D1:57:66:DF:66:B0:F1:7C:39:6D:C0:0C:68:3C:CA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3024:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:96:32:05:ea:f6:34:1d:e3:50:45:f7:0a:a7:73:82:c8:24: 6f:c7:44:a3:a2:58:a5:f4:d4:07:7c:c5:29:b7:2f:f9:d3:6a: 95:cc:51:ba:72:ed:b2:7a:e6:c4:c9:68:50:33:2d:ec:7e:73: 7a:19:f5:d9:e4:10:89:a4:a1:70:d8:f4:1e:2c:9a:7f:41:88: 79:83:18:f7:ba:9a:d3:64:86:2a:dd:78:60:38:d0:5e:aa:20: 62:53:08:ac:cb:6f:0f:3d:b1:8e:0b:74:7d:82:62:a5:df:04: 86:13:1b:80:a8:8c:bd:2c:db:12:a3:c1:9e:e0:9d:16:7c:74: 2c:c3:9d:1a:69:66:34:e5:8a:d5:a9:d3:92:c6:69:86:4b:ac: 01:8a:26:1e:3c:55:62:9a:7e:bf:40:63:80:0e:1f:a7:e3:9d: ca:49:5d:67:2a:b0:66:c0:35:ba:2a:fe:6e:83:b1:a3:41:e5: 33:34:a8:3e:2a:86:e1:46:91:96:45:2c:74:43:1c:05:2a:f7: 29:f8:ac:f3:fb:4d:1c:82:d9:0c:c3:4f:78:9b:08:26:c4:67: 35:4c:7e:f6:64:34:bc:f2:b7:32:75:ae:e2:c0:5c:7b:ee:a2: a7:43:6b:f7:8f:de:2f:2c:59:12:ba:5a:72:4c:ec:2a:9c:54: 26:3a:78:4e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksr+N0Ul6gbfIg8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGNkOGRlY2UtNzI5Zi00NmZlLWFmOTgtMjI3MjU1ZTBlZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKXV0v2BdZz0IKQbAG7RobnvMLeO5/8cXay nQEy2T182CSCFiMMzh9tmuAGPgkm3bhI6HLflEYN8O5eEOzLUuQ/8DLxTktxRXOm BxUXNmqcp6R9ZsVk2i3TdrMtgDl+6vMGCfTlIhPDYS1FiowYq39a5R39oJ1W1WW/ Mh0TyuLG+E1Zl0p/j7Y41g0H+Y3fPgQ77tEmjz3Temx4pPrM111saBpoThrsMUdy ehw69Mi4I/n5mM8X4FfmYVT47iPqBckqX/2RRtOG86hdjOKvYCX7QpIgbj4RJjBT st1rYf9uyAOt2MJg05hYwGmRHc3OCMptUReEdUuLh3p9py4wVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEzFzcfRV2bfZrDxfDltwAxoPMoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RkZjdmNzgtYjg0NC0z MTAxLWIyNWUtMDRhMjcxNGI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAApYyBer2NB3jUEX3Cqdzgsgkb8dEo6JYpfTUB3zFKbcv+dNqlcxR unLtsnrmxMloUDMt7H5zehn12eQQiaShcNj0Hiyaf0GIeYMY97qa02SGKt14YDjQ XqogYlMIrMtvDz2xjgt0fYJipd8EhhMbgKiMvSzbEqPBnuCdFnx0LMOdGmlmNOWK 1anTksZphkusAYomHjxVYpp+v0BjgA4fp+OdykldZyqwZsA1uir+boOxo0HlMzSo PiqG4UaRlkUsdEMcBSr3Kfis8/tNHILZDMNPeJsIJsRnNUx+9mQ0vPK3MnWu4sBc e+6ip0Nr94/eLyxZErpackzsKpxUJjp4Tg== -----END CERTIFICATE-----Generated at Fri May 9 18:03:32 2025 by rpki-client