$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3f1b77be-145e-3185-8486-2d430397e9bd.roa File: 3f1b77be-145e-3185-8486-2d430397e9bd.roa (raw, json) Hash identifier: hAQSp5ASdj+lzUuJCirvspjudoUXrabfae/XfnVgTxI= Subject key identifier: 3B:E9:31:1A:40:25:44:27:B6:90:81:4A:C3:01:26:A5:30:37:A8:00 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F43285849D6FA4C4BC4C270FFA8BD0780 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3f1b77be-145e-3185-8486-2d430397e9bd.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 14618 IP address blocks: 2620:1f7:c023::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:4c:4b:c4:c2:70:ff:a8:bd:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=abb3b9df-4d85-4d30-8d3e-ce3dfa8b1bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:01:91:07:f9:bd:37:e2:a2:fb:ec:75:56: d9:c3:97:a5:28:b9:71:a3:4e:c7:0b:3b:fe:fc:c1: 5b:80:ba:02:35:09:36:c1:88:d6:2f:6a:c1:5b:78: 02:ee:d4:f5:48:dc:b3:d8:9c:fc:1d:20:48:57:15: 99:df:2c:e1:7c:40:f7:a0:cc:b2:86:5c:ca:f9:af: b7:81:9d:94:db:99:75:e5:d7:ee:10:ba:cf:ac:83: bc:12:ca:a2:63:79:30:99:5e:9f:52:43:3a:57:a4: 8b:b8:cb:58:58:32:09:74:11:5b:71:a6:be:d6:fd: b3:6b:f8:f2:e7:98:d8:a7:9a:a0:f8:35:87:95:74: 49:8a:59:7e:fe:a3:66:92:c1:d3:fe:f7:8b:88:45: 0a:27:8b:46:6e:cf:26:9f:a4:71:a2:32:c2:d9:af: 01:4a:65:8d:d1:73:37:d5:e4:f5:69:ac:b0:0d:d3: 06:11:64:29:cb:07:d9:f1:fd:a5:cd:04:ee:e5:3a: 26:3d:9c:1b:de:9a:14:16:4d:29:88:4a:c6:85:e4: 56:bc:1d:bf:c2:e6:c2:9f:c0:0a:da:95:fa:76:d2: 2e:a2:6b:6d:94:f4:09:c8:3d:bc:17:35:f7:bf:53: 9c:eb:54:de:75:f7:46:a0:b6:36:8f:6d:3d:54:78: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:31:1A:40:25:44:27:B6:90:81:4A:C3:01:26:A5:30:37:A8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3f1b77be-145e-3185-8486-2d430397e9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c023::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:66:f5:5d:2f:ab:76:37:35:44:24:d0:c4:9e:26:a0:94: 7a:8e:d5:cc:8d:2f:1b:d7:8a:20:c7:50:1b:72:4f:29:27:b8: 5c:95:91:ac:03:85:76:ae:49:1b:43:de:ac:c9:7b:27:9f:04: 61:21:8f:6a:49:a0:49:fc:45:ae:2f:83:85:80:c1:36:7e:99: 2f:3d:ac:e3:a8:94:aa:59:71:8d:92:74:cf:b1:e2:a4:ec:fe: ec:62:c1:c0:21:28:3a:27:cb:73:5f:d5:31:ee:54:91:b0:f6: 4a:c0:4b:3d:6e:ae:37:59:23:bd:1a:a0:20:f7:e2:a2:a5:a0: 26:36:2f:1a:16:b7:a1:93:61:65:39:23:13:76:e3:a3:c7:7d: cf:56:35:22:29:0f:c2:d5:30:be:f0:c3:90:88:e6:51:ee:46: ed:96:db:d3:90:95:a9:72:bc:44:b0:6f:b8:50:bf:2d:eb:83: f2:c7:7e:55:7e:d0:2e:f0:89:d4:ce:19:16:37:36:0c:82:c9: b6:05:a1:94:b4:d0:cd:b3:c1:9d:4e:99:ca:89:4f:d3:96:3e: 0e:02:67:b9:e6:f5:1b:d0:c5:01:32:04:a3:2d:96:47:bc:a0: d2:34:1f:92:5e:a9:50:b4:b8:5a:44:59:29:ef:a7:ce:e9:94: 3a:35:1c:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnW+kxLxMJw/6i9B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk YWJiM2I5ZGYtNGQ4NS00ZDMwLThkM2UtY2UzZGZhOGIxYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaUBkQf5vTfiovvsdVbZw5elKLlxo07HCzv+ /MFbgLoCNQk2wYjWL2rBW3gC7tT1SNyz2Jz8HSBIVxWZ3yzhfED3oMyyhlzK+a+3 gZ2U25l15dfuELrPrIO8EsqiY3kwmV6fUkM6V6SLuMtYWDIJdBFbcaa+1v2za/jy 55jYp5qg+DWHlXRJill+/qNmksHT/veLiEUKJ4tGbs8mn6RxojLC2a8BSmWN0XM3 1eT1aaywDdMGEWQpywfZ8f2lzQTu5TomPZwb3poUFk0piErGheRWvB2/wubCn8AK 2pX6dtIuomttlPQJyD28FzX3v1Oc61TedfdGoLY2j209VHjKzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDvpMRpAJUQntpCBSsMBJqUwN6gAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvM2YxYjc3YmUtMTQ1ZS0z MTg1LTg0ODYtMmQ0MzAzOTdlOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Aj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFlZvVdL6t2NzVEJNDEniaglHqO1cyNLxvXiiDHUBtyTyknuFyV kawDhXauSRtD3qzJeyefBGEhj2pJoEn8Ra4vg4WAwTZ+mS89rOOolKpZcY2SdM+x 4qTs/uxiwcAhKDony3Nf1THuVJGw9krASz1urjdZI70aoCD34qKloCY2LxoWt6GT YWU5IxN246PHfc9WNSIpD8LVML7ww5CI5lHuRu2W29OQlalyvESwb7hQvy3rg/LH flV+0C7widTOGRY3NgyCybYFoZS00M2zwZ1OmcqJT9OWPg4CZ7nm9RvQxQEyBKMt lke8oNI0H5JeqVC0uFpEWSnvp87plDo1HNo= -----END CERTIFICATE-----Generated at Tue Jul 1 12:32:06 2025 by rpki-client