$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa File: a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json) Hash identifier: FtDIImbC4ZQzoF64h84/z6xNo9N9ecCSWgYRRNSFdF8= Subject key identifier: 17:15:B0:C7:3C:0F:75:BE:EE:FA:31:C3:11:D2:31:27:0C:EB:99:FD Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F43285849BDDA1A909C36E11165B4B300 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36549 IP address blocks: 2604:1780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1a:90:9c:36:e1:11:65:b4:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=6a879297-fd16-4f3c-a9ea-03491c9b5c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:7e:d3:0c:83:f2:a8:68:da:e0:6c:4b:f3: c4:8e:bf:56:57:26:15:3d:4b:12:9a:c5:2c:6f:96: a8:74:05:62:61:ed:3a:08:ae:ea:53:a7:4a:dd:21: 84:05:2e:5e:4c:d0:19:7c:68:5b:79:6b:3d:d9:8c: df:38:da:07:1e:60:f1:41:ca:d6:be:e9:b1:74:b4: 8e:cb:54:36:a4:08:32:66:55:85:e5:05:ed:2e:4a: e8:b3:48:f6:9b:92:ae:dd:f8:46:1f:26:0a:4a:27: 32:31:4a:d5:2e:84:52:ad:d9:22:1d:78:14:37:f7: d9:3b:93:9a:54:97:04:92:87:c2:6b:66:38:d3:66: f5:e4:99:50:ff:b3:ff:3e:b6:6b:73:43:6f:90:93: d9:b8:2d:1c:bb:6f:d2:d5:5e:21:c2:40:aa:8f:d3: f2:6c:a7:af:7f:0e:79:a2:c1:79:a2:a0:07:42:8d: 9f:69:01:5f:02:b6:1e:c9:75:a1:a5:97:8e:ce:06: db:2a:7d:e2:a9:9a:c1:53:be:17:e6:ae:a0:6a:6a: c2:b1:6d:17:d4:5f:6e:86:70:64:e6:48:c3:73:aa: da:9c:d6:f4:e6:9b:3c:f7:1c:91:da:0f:67:2a:fd: db:45:59:4e:96:0a:c3:44:25:a3:80:d8:30:5e:34: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:B0:C7:3C:0F:75:BE:EE:FA:31:C3:11:D2:31:27:0C:EB:99:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv6: 2604:1780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8a:66:79:31:49:2c:a5:54:b0:7f:b4:c1:a3:25:b6:b3:8d: a2:72:68:a7:c2:ba:11:ce:18:d9:27:c2:0d:90:70:79:51:cd: 17:64:ab:3b:f2:eb:75:47:a8:5d:75:cb:4d:24:b2:a2:f2:cb: 69:d7:08:63:01:6e:2f:8d:7a:df:f8:35:59:04:e0:90:7b:2f: 09:1d:83:fe:5e:b8:be:5c:b7:fc:0f:76:e2:09:d2:f1:81:82: 25:6a:a3:f7:d1:24:29:d8:27:54:63:04:d1:11:43:3f:bf:5c: e0:bd:2e:15:95:dc:cd:46:54:7a:67:81:2f:3b:b1:ac:51:e7: c1:9e:e5:1d:b2:19:c2:32:3b:9f:71:9e:39:44:c1:b5:b3:b5: f9:4e:b9:05:2c:46:4c:2e:f6:57:ee:13:90:cc:88:ad:dc:3c: 44:f0:0f:c6:fd:9d:d3:c9:bd:8c:dc:1d:34:6a:98:57:fb:9b: df:b8:42:e6:1a:57:9e:35:21:c6:0f:9d:40:2a:dc:a0:4a:5b: 09:88:6f:f5:88:33:e0:29:1c:6a:21:86:29:c6:11:af:05:62: 62:8d:14:31:94:75:26:ff:56:0d:2e:66:48:94:a0:8c:34:97: 13:6f:2c:67:87:f9:73:16:d0:91:4f:fd:d0:73:98:61:fa:36: f8:71:e4:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92hqQnDbhEWW0swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NmE4NzkyOTctZmQxNi00ZjNjLWE5ZWEtMDM0OTFjOWI1YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOt+0wyD8qho2uBsS/PEjr9WVyYVPUsSmsUs b5aodAViYe06CK7qU6dK3SGEBS5eTNAZfGhbeWs92YzfONoHHmDxQcrWvumxdLSO y1Q2pAgyZlWF5QXtLkros0j2m5Ku3fhGHyYKSicyMUrVLoRSrdkiHXgUN/fZO5Oa VJcEkofCa2Y402b15JlQ/7P/PrZrc0NvkJPZuC0cu2/S1V4hwkCqj9PybKevfw55 osF5oqAHQo2faQFfArYeyXWhpZeOzgbbKn3iqZrBU74X5q6gamrCsW0X1F9uhnBk 5kjDc6ranNb05ps89xyR2g9nKv3bRVlOlgrDRCWjgNgwXjR/wwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBcVsMc8D3W+7voxwxHSMScM65n9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvYTNjNjg2NzUtYTk4Zi0z OWVjLWE4OWYtMmI3N2EzZGY0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsimZ5MUkspVSwf7TBoyW2s42icminwroRzhjZJ8INkHB5Uc0XZKs7 8ut1R6hddctNJLKi8stp1whjAW4vjXrf+DVZBOCQey8JHYP+Xri+XLf8D3biCdLx gYIlaqP30SQp2CdUYwTREUM/v1zgvS4VldzNRlR6Z4EvO7GsUefBnuUdshnCMjuf cZ45RMG1s7X5TrkFLEZMLvZX7hOQzIit3DxE8A/G/Z3Tyb2M3B00aphX+5vfuELm GleeNSHGD51AKtygSlsJiG/1iDPgKRxqIYYpxhGvBWJijRQxlHUm/1YNLmZIlKCM NJcTbyxnh/lzFtCRT/3Qc5hh+jb4ceSa -----END CERTIFICATE-----Generated at Sat May 10 11:28:59 2025 by rpki-client