$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa File: 8a99de9c-b956-340c-a406-d75e00ddea5c.roa (raw, json) Hash identifier: AnPyQ8W78RHX/s/PIDQPXO+TGhYOlewiMNnaYYRyrSQ= Subject key identifier: AC:2F:7F:1E:C6:14:B9:54:03:AA:92:CD:24:6B:91:D3:A7:FE:D8:91 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F71FEFAD707F4EDFD9520 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 2603:9031:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:71:fe:fa:d7:07:f4:ed:fd:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b802b82d-3fd6-43e0-be64-843be512be90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:35:45:ac:b4:f9:45:ec:d4:d1:8e:d3:91: a7:17:17:c9:cd:15:67:86:c2:fa:fc:4e:eb:02:ce: af:6e:95:d9:4c:2e:f7:09:36:31:18:d6:a4:11:d8: c5:37:6e:67:0d:f6:6b:51:f3:32:04:8e:eb:d1:9e: 25:2a:22:ae:a8:4c:9f:d5:c9:ea:64:5c:02:dd:22: 43:33:74:34:c0:da:ef:6d:2b:53:1b:7c:3e:1e:62: 42:fb:82:91:57:a0:4e:0d:0f:93:fe:66:e8:60:aa: db:5b:93:7e:ea:50:ba:06:dc:f2:01:e9:79:68:86: 4f:64:91:52:b6:1b:30:c3:5c:9f:c4:7c:e2:5c:42: 47:96:79:e5:9c:3c:47:f7:05:cd:61:59:73:2c:7d: 5e:a8:95:9d:22:06:c6:eb:9e:30:d0:de:34:5e:d3: e9:16:bf:2c:78:43:6f:dd:55:66:ed:72:8a:19:ee: 0f:0f:cc:51:4c:04:c6:a3:cf:25:db:83:6d:fa:bb: cb:ff:8f:97:da:fe:5c:e4:06:0f:b4:5d:95:ae:8a: 6e:35:38:80:ab:1c:8b:08:bd:ca:56:73:1c:3b:80: cb:09:9a:e8:97:eb:39:70:0a:eb:0f:ce:d0:78:22: c9:ff:15:c8:9b:fd:6d:91:5d:71:f7:6c:88:bf:fd: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2F:7F:1E:C6:14:B9:54:03:AA:92:CD:24:6B:91:D3:A7:FE:D8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9031:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:04:b3:cc:7b:f3:a1:71:8e:36:b1:0e:47:29:4d:a5:8b:b2: 88:86:19:ed:57:a2:aa:b9:7e:3d:7d:11:38:ab:4e:9b:25:09: 4d:cd:5b:76:d0:c0:c8:48:95:b0:5a:ca:02:7a:0f:e8:17:7b: ae:67:63:b8:45:95:32:21:87:e3:e7:72:ad:e1:68:a4:37:5e: 21:58:70:6d:16:86:4a:ef:e1:fc:9c:14:a5:52:34:dc:1a:2d: af:f4:ca:58:97:e0:f3:9c:6d:79:e9:ac:74:64:ad:f8:d2:1c: a8:36:bb:d7:f8:bf:32:5b:da:68:68:d7:bc:e7:a3:47:01:53: 8b:af:23:e8:b7:14:b2:c0:d8:d4:f1:19:12:9f:e4:5d:5f:7c: c1:6e:f5:8d:cc:20:28:32:72:9d:df:c9:ae:25:a7:f6:00:fa: ed:75:f1:90:05:03:b2:ab:cc:f7:4f:77:32:c5:c2:ff:96:da: fd:92:a5:c6:8a:49:85:55:ef:8f:12:ee:88:53:c2:9e:78:47: c1:af:09:c0:5a:2a:73:c0:ac:ef:d1:15:b2:58:e0:10:9e:b4: 3c:a3:17:71:14:fb:97:eb:ce:b8:18:26:6f:b7:32:16:ee:af: b0:7b:d4:29:ac:d2:2f:6f:b4:74:64:ad:e4:17:9f:b4:3b:6b: ce:32:c6:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3H++tcH9O39lSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjgwMmI4MmQtM2ZkNi00M2UwLWJlNjQtODQzYmU1MTJiZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFY1Ray0+UXs1NGO05GnFxfJzRVnhsL6/E7r As6vbpXZTC73CTYxGNakEdjFN25nDfZrUfMyBI7r0Z4lKiKuqEyf1cnqZFwC3SJD M3Q0wNrvbStTG3w+HmJC+4KRV6BODQ+T/mboYKrbW5N+6lC6BtzyAel5aIZPZJFS thsww1yfxHziXEJHlnnlnDxH9wXNYVlzLH1eqJWdIgbG654w0N40XtPpFr8seENv 3VVm7XKKGe4PD8xRTATGo88l24Nt+rvL/4+X2v5c5AYPtF2VropuNTiAqxyLCL3K VnMcO4DLCZrol+s5cArrD87QeCLJ/xXIm/1tkV1x92yIv/1XFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwvfx7GFLlUA6qSzSRrkdOn/tiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGE5OWRlOWMtYjk1Ni0z NDBjLWE0MDYtZDc1ZTAwZGRlYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQMQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8Es8x786FxjjaxDkcpTaWLsoiGGe1Xoqq5fj19ETirTpslCU3N W3bQwMhIlbBaygJ6D+gXe65nY7hFlTIhh+Pncq3haKQ3XiFYcG0Whkrv4fycFKVS NNwaLa/0yliX4POcbXnprHRkrfjSHKg2u9f4vzJb2mho17zno0cBU4uvI+i3FLLA 2NTxGRKf5F1ffMFu9Y3MICgycp3fya4lp/YA+u118ZAFA7KrzPdPdzLFwv+W2v2S pcaKSYVV748S7ohTwp54R8GvCcBaKnPArO/RFbJY4BCetDyjF3EU+5frzrgYJm+3 Mhbur7B71Cms0i9vtHRkreQXn7Q7a84yxqk= -----END CERTIFICATE-----Generated at Tue May 6 07:48:55 2025 by rpki-client