$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa File: dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa (raw, json) Hash identifier: iGJtvPD8H854ZCAfrG/va+oYHIWFpj2UrJZyfsDzP3g= Subject key identifier: E5:3A:D1:60:C2:A6:29:9E:57:B3:0F:EF:9E:23:B1:61:9A:3B:D1:68 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3FA5ACFAB57D6D6D1EFC80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 2603:903e:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a5:ac:fa:b5:7d:6d:6d:1e:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4d669065-3c27-49ef-83d7-77655b6e1894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:14:14:70:2d:fa:94:b1:b7:d0:f2:ba:b7: 45:3a:d8:01:e5:86:db:e3:be:5b:4d:d6:88:a2:c4: 28:9e:1c:ff:fa:92:8c:76:61:5a:50:ea:9d:01:ef: 46:52:66:b4:12:0a:a3:1f:f4:a1:d7:b7:15:51:ab: 35:79:93:f3:54:58:b3:00:9a:c2:50:b4:27:36:70: eb:d5:f1:28:b7:b7:c7:0c:0f:4f:14:18:c1:58:9a: 85:48:67:81:c4:c1:31:5a:ba:fc:25:e9:d8:6f:7b: 94:d9:4f:61:d5:ec:6e:58:aa:8d:96:86:68:a7:52: ee:e8:45:43:c5:55:35:06:33:e2:51:e0:02:ee:cc: 90:cb:18:bd:a3:10:a1:8b:b4:5d:f7:cb:ce:c8:c4: f3:ba:c9:ce:4c:90:81:81:d4:2d:fa:47:db:3c:72: 58:bd:d8:f4:e6:31:d7:d0:dd:70:0e:a4:ad:80:2d: f9:18:03:10:69:c8:d5:81:ef:a9:83:6c:8d:2b:94: cd:3a:06:cd:24:90:7a:42:ce:e5:55:40:ff:02:fd: a4:e6:03:6b:76:07:30:ac:7b:7a:82:12:ea:c6:ee: 97:5c:b2:0e:75:b5:41:36:68:69:9d:1e:17:57:ed: 3d:6e:d4:2f:76:cd:a9:f8:21:d1:e9:27:fe:aa:4a: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:D1:60:C2:A6:29:9E:57:B3:0F:EF:9E:23:B1:61:9A:3B:D1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:903e:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:63:f3:16:2f:29:d8:28:41:e0:7c:ad:3e:d6:2b:ca:78:68: 39:cf:09:1c:98:e9:ca:f7:32:d5:2c:e9:3c:e4:3d:9c:82:e1: 5f:16:e8:23:29:61:08:76:b0:47:3f:e3:a5:14:68:65:1e:c9: 58:a7:1c:98:bb:b8:33:76:f8:bc:cf:55:28:dc:79:e0:3a:ac: 1c:4f:91:6c:d1:87:89:11:c5:e5:dc:4e:02:05:ac:fa:9a:e1: 3d:eb:fe:e9:86:58:b4:0d:7b:1f:61:44:9f:4f:b9:04:27:ef: 30:69:a7:64:62:ce:3b:8e:87:1e:ac:be:c2:9d:dc:a3:d7:5b: 04:9b:61:9a:f4:c1:51:2a:b2:36:eb:60:27:af:b4:b4:af:69: 76:a3:85:6a:6b:3a:0e:07:b3:ab:3f:40:c1:27:49:4b:cc:b6: 27:3d:82:18:ee:72:0f:6f:7d:12:b1:67:98:3d:4a:c2:af:15: 8b:31:ae:8e:33:f6:14:72:b6:ce:0f:c1:b3:d3:9d:02:c5:a7: 34:dd:40:e6:15:49:80:48:e6:7a:16:e6:01:2f:2f:c7:f5:7d: 41:17:93:d6:6a:98:96:0d:b4:47:66:34:29:1c:b0:43:bb:8c: 52:9f:65:b2:9b:82:db:56:7e:43:54:68:f2:a2:cd:3b:ba:37: 5b:f5:b2:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P6Ws+rV9bW0e/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NGQ2NjkwNjUtM2MyNy00OWVmLTgzZDctNzc2NTViNmUxODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogkUFHAt+pSxt9DyurdFOtgB5Ybb475bTdaI osQonhz/+pKMdmFaUOqdAe9GUma0EgqjH/Sh17cVUas1eZPzVFizAJrCULQnNnDr 1fEot7fHDA9PFBjBWJqFSGeBxMExWrr8JenYb3uU2U9h1exuWKqNloZop1Lu6EVD xVU1BjPiUeAC7syQyxi9oxChi7Rd98vOyMTzusnOTJCBgdQt+kfbPHJYvdj05jHX 0N1wDqStgC35GAMQacjVge+pg2yNK5TNOgbNJJB6Qs7lVUD/Av2k5gNrdgcwrHt6 ghLqxu6XXLIOdbVBNmhpnR4XV+09btQvds2p+CHR6Sf+qkqF2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOU60WDCpimeV7MP754jsWGaO9FoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGNmMzZlMTItMTc3Ny0z ZDhjLWE3OTItYjNmMmVlYTYyZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgOQPgAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdj8xYvKdgoQeB8rT7WK8p4aDnPCRyY6cr3MtUs6TzkPZyC4V8W 6CMpYQh2sEc/46UUaGUeyVinHJi7uDN2+LzPVSjceeA6rBxPkWzRh4kRxeXcTgIF rPqa4T3r/umGWLQNex9hRJ9PuQQn7zBpp2RizjuOhx6svsKd3KPXWwSbYZr0wVEq sjbrYCevtLSvaXajhWprOg4Hs6s/QMEnSUvMtic9ghjucg9vfRKxZ5g9SsKvFYsx ro4z9hRyts4PwbPTnQLFpzTdQOYVSYBI5noW5gEvL8f1fUEXk9ZqmJYNtEdmNCkc sEO7jFKfZbKbgttWfkNUaPKizTu6N1v1stM= -----END CERTIFICATE-----Generated at Mon May 5 22:06:32 2025 by rpki-client