$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa File: a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa (raw, json) Hash identifier: oHK9zicN/bqtuedNxrDnkogNO5nqViFTOcAZOPqdm8Q= Subject key identifier: 61:9F:E4:B9:6B:76:18:91:AC:01:CB:59:74:C3:63:86:A3:9F:21:27 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F90F488823BEB5AAFBA00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 19115 IP address blocks: 2603:90fb:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:90:f4:88:82:3b:eb:5a:af:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=36201e76-03be-4b09-8676-0b0f55590f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:35:01:bf:71:9d:c9:ee:6f:aa:25:92:12: 1c:86:70:26:61:cd:85:1c:a8:62:d6:6b:56:94:5e: 35:1e:45:ca:44:af:d3:9f:00:27:16:f2:90:3f:9b: 82:d1:b6:d5:44:9f:eb:b8:aa:38:b4:5d:3f:1e:d3: 99:80:e8:31:64:fc:8b:05:6f:55:b6:54:6b:8f:f6: 1a:d0:72:5f:ab:5c:f8:c5:7f:77:a8:9e:6b:3f:2d: 16:9c:7b:eb:e5:68:05:b7:ae:a6:9e:4e:73:3e:fd: 26:1f:df:00:46:82:50:08:fd:90:f0:88:18:b8:5f: b1:de:3b:6e:1d:f4:cd:b8:25:22:53:16:9f:9a:90: 95:a6:e0:bc:22:74:1e:89:2e:d9:e7:34:64:23:32: d4:1c:57:ae:3e:99:1b:a9:1a:eb:3e:42:92:7d:71: ea:28:85:6b:ac:85:e6:cc:81:20:1b:fc:df:88:54: 3d:ce:42:4c:4a:37:58:97:59:22:78:dc:89:9d:b8: 40:68:0f:ca:45:8f:cd:86:f3:e6:33:0d:a7:43:ee: 21:f9:da:59:ad:c6:ca:f2:02:59:ff:92:dd:b0:a0: 3c:55:fb:e8:e6:c4:6f:2a:df:f1:c4:16:ff:9e:e2: 95:4e:02:2f:76:9c:2b:d4:7e:68:7b:65:a2:e2:62: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9F:E4:B9:6B:76:18:91:AC:01:CB:59:74:C3:63:86:A3:9F:21:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:90fb:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:65:d1:1c:c5:5b:a5:57:88:4c:09:f4:d2:b8:73:38:6f:e9: bd:39:a2:3c:7a:17:a6:3b:1a:8d:e6:4b:a1:4d:c5:b6:42:e2: f5:6f:b8:9e:4d:d4:a2:e9:4b:8f:f8:2e:bb:3b:08:19:9e:ef: 37:1f:2e:96:7b:fb:a5:5a:a8:d4:0b:33:03:2a:d0:e6:15:c7: 4f:4a:25:dc:6a:b3:fd:93:d3:43:be:73:af:27:44:83:21:18: bc:41:59:7b:1f:2b:57:dc:dc:1e:06:30:6b:04:07:62:06:2e: d3:63:0d:cc:41:f6:19:52:3f:b0:11:2e:f7:7b:f1:31:15:a9: 91:d8:37:51:ab:9d:36:05:12:e7:38:11:24:6b:61:9a:56:b4: f8:26:75:87:b5:66:6e:67:c2:f2:af:34:98:8f:4a:25:fe:81: 1b:7f:d0:6b:f9:91:10:a4:30:5d:a8:a3:33:b3:b8:9c:96:d5: 73:da:27:e8:0c:a6:c3:af:17:6b:02:57:65:4c:2c:55:f8:fe: e4:18:5f:e5:4e:bb:67:45:ad:56:c5:cc:d3:59:d1:5b:d9:d4: 41:5f:22:8d:d5:75:01:01:41:28:42:95:1a:12:17:0a:82:4e: 63:f3:47:21:16:dc:5b:c5:36:a4:bb:5d:73:9d:fe:ee:99:3b: ce:4f:b2:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P5D0iII761qvugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MzYyMDFlNzYtMDNiZS00YjA5LTg2NzYtMGIwZjU1NTkwZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWs1Ab9xncnub6olkhIchnAmYc2FHKhi1mtW lF41HkXKRK/TnwAnFvKQP5uC0bbVRJ/ruKo4tF0/HtOZgOgxZPyLBW9VtlRrj/Ya 0HJfq1z4xX93qJ5rPy0WnHvr5WgFt66mnk5zPv0mH98ARoJQCP2Q8IgYuF+x3jtu HfTNuCUiUxafmpCVpuC8InQeiS7Z5zRkIzLUHFeuPpkbqRrrPkKSfXHqKIVrrIXm zIEgG/zfiFQ9zkJMSjdYl1kieNyJnbhAaA/KRY/NhvPmMw2nQ+4h+dpZrcbK8gJZ /5LdsKA8Vfvo5sRvKt/xxBb/nuKVTgIvdpwr1H5oe2Wi4mJriwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGGf5LlrdhiRrAHLWXTDY4ajnyEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTIwM2VjZTItYTM4Yi0z YWExLTg3ZTEtNTdiNmU2MTU0YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQ+wAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIll0RzFW6VXiEwJ9NK4czhv6b05ojx6F6Y7Go3mS6FNxbZC4vVv uJ5N1KLpS4/4Lrs7CBme7zcfLpZ7+6VaqNQLMwMq0OYVx09KJdxqs/2T00O+c68n RIMhGLxBWXsfK1fc3B4GMGsEB2IGLtNjDcxB9hlSP7ARLvd78TEVqZHYN1GrnTYF Euc4ESRrYZpWtPgmdYe1Zm5nwvKvNJiPSiX+gRt/0Gv5kRCkMF2oozOzuJyW1XPa J+gMpsOvF2sCV2VMLFX4/uQYX+VOu2dFrVbFzNNZ0VvZ1EFfIo3VdQEBQShClRoS FwqCTmPzRyEW3FvFNqS7XXOd/u6ZO85Psno= -----END CERTIFICATE-----Generated at Mon May 5 20:00:12 2025 by rpki-client