$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa File: d3baaff6-9184-3e90-aed6-78e8be196ba7.roa (raw, json) Hash identifier: mIIEtt+BGmz8htYeQRLqbqXeXyMzTrQ6xOf1ygiseus= Subject key identifier: 55:3A:A0:15:3B:AB:BD:53:26:ED:C6:96:10:55:49:EA:45:56:27:45 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858495ABEC64E5DD0B63C2DB29280 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 62651 IP address blocks: 2604:ea80:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c6:4e:5d:d0:b6:3c:2d:b2:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=47397b5c-f4b8-4393-a9fd-aed1b63a7789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3f:c1:ff:94:76:f8:11:d5:64:31:eb:4e:a4: 45:81:47:a1:42:3a:01:35:21:54:77:ea:ac:3d:d0: 90:b5:6b:85:84:1b:38:ce:92:88:93:a9:73:0e:58: a1:22:5f:8e:bd:b7:b2:a7:55:a7:d1:1c:12:52:43: 53:48:4c:b9:a0:34:e5:da:ff:2d:46:f4:1b:e6:c8: 1f:25:ee:1a:ff:e7:c9:cf:0e:72:f4:ff:e7:9b:75: ad:fb:4a:cd:94:cd:cc:71:3e:80:d0:4d:cc:8f:cd: 96:a4:c9:6f:27:6b:fe:ce:62:27:c0:41:4d:6b:41: 03:2d:cf:59:43:f4:df:52:8e:69:f2:d5:f2:09:13: 2c:42:7c:2d:e9:ad:14:eb:0a:ce:71:50:38:25:e7: be:f9:a9:73:9c:bf:a5:03:1e:2d:fc:2c:09:23:7b: 55:3a:f0:a6:fa:24:05:44:37:42:7d:00:55:1c:82: 8e:41:60:40:93:5f:d1:10:10:05:d0:9d:b8:23:59: 35:a1:a0:6e:a3:65:39:ae:86:cd:5f:24:f1:aa:c1: fc:79:77:f3:e0:49:09:0d:df:f1:05:e5:39:f5:1c: 90:1a:64:79:8a:10:3a:a4:8a:69:82:62:cc:e5:10: 1d:e3:69:38:d9:b7:1b:34:68:bb:ff:82:42:c6:ac: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:A0:15:3B:AB:BD:53:26:ED:C6:96:10:55:49:EA:45:56:27:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:ea80:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d9:29:52:61:c6:4f:ab:da:c2:1f:91:6f:86:18:a9:e0:b2: 9c:03:13:ff:e8:a2:b2:de:36:a4:b8:5a:c1:95:7c:2f:92:21: d6:96:66:44:3a:3b:86:13:ff:7a:8c:ae:f2:96:42:d7:23:fb: 9d:75:a6:e4:8d:d5:e1:d7:44:35:57:c0:51:0b:67:21:ad:7a: 11:34:72:5e:95:ce:2f:b1:06:23:71:51:29:06:a6:d3:74:12: 60:4a:35:41:d7:3b:aa:22:b8:b6:a8:b2:48:6c:ea:a9:5d:85: 4f:f9:f5:c7:d2:29:8e:b9:da:0e:d3:16:81:60:65:4e:e2:5c: 5a:31:d7:79:6b:55:70:90:56:cf:1a:e5:ac:52:c6:c7:5f:6f: 8c:d7:f5:09:56:6c:07:d6:07:55:67:7f:0b:e3:3e:a8:42:17: be:30:95:1f:8b:4f:c1:77:92:6c:9f:e0:a8:0f:7e:b9:d4:e8: 24:1c:29:b5:5a:39:67:33:63:ba:ad:d6:b3:92:6c:32:23:08: 5b:1e:44:b2:ea:e1:47:c8:5f:81:1e:6a:81:3d:d8:92:ad:f7: a0:b8:c1:af:ed:e1:69:e4:e5:37:93:81:85:6f:88:7d:64:ae: e6:db:a3:ba:8f:35:2b:ed:68:07:8b:7f:c9:b7:2f:27:2a:f3: ae:4c:68:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElavsZOXdC2PC2ykoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NDczOTdiNWMtZjRiOC00MzkzLWE5ZmQtYWVkMWI2M2E3Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z/B/5R2+BHVZDHrTqRFgUehQjoBNSFUd+qs PdCQtWuFhBs4zpKIk6lzDlihIl+Ovbeyp1Wn0RwSUkNTSEy5oDTl2v8tRvQb5sgf Je4a/+fJzw5y9P/nm3Wt+0rNlM3McT6A0E3Mj82WpMlvJ2v+zmInwEFNa0EDLc9Z Q/TfUo5p8tXyCRMsQnwt6a0U6wrOcVA4Jee++alznL+lAx4t/CwJI3tVOvCm+iQF RDdCfQBVHIKOQWBAk1/REBAF0J24I1k1oaBuo2U5robNXyTxqsH8eXfz4EkJDd/x BeU59RyQGmR5ihA6pIppgmLM5RAd42k42bcbNGi7/4JCxqw9UwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFU6oBU7q71TJu3GlhBVSepFVidFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDNiYWFmZjYtOTE4NC0z ZTkwLWFlZDYtNzhlOGJlMTk2YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQNkpUmHGT6vawh+Rb4YYqeCynAMT/+iist42pLhawZV8L5Ih1pZm RDo7hhP/eoyu8pZC1yP7nXWm5I3V4ddENVfAUQtnIa16ETRyXpXOL7EGI3FRKQam 03QSYEo1Qdc7qiK4tqiySGzqqV2FT/n1x9IpjrnaDtMWgWBlTuJcWjHXeWtVcJBW zxrlrFLGx19vjNf1CVZsB9YHVWd/C+M+qEIXvjCVH4tPwXeSbJ/gqA9+udToJBwp tVo5ZzNjuq3Ws5JsMiMIWx5EsurhR8hfgR5qgT3Ykq33oLjBr+3haeTlN5OBhW+I fWSu5tujuo81K+1oB4t/ybcvJyrzrkxoFA== -----END CERTIFICATE-----Generated at Sun May 11 13:43:46 2025 by rpki-client