$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa File: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (raw, json) Hash identifier: Cs9d8HflAEvE9d+Nh//UunP0Ob3vtT6heiCPryVKqa4= Subject key identifier: 35:FC:5E:15:35:ED:E8:73:A7:29:86:00:5C:A7:83:2F:AC:0C:AB:91 Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584925B3AD7A75A419D902741840 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 46832 IP address blocks: 2610:e0:a000::/36 maxlen: 36 2610:e0:a001::/48 maxlen: 48 2610:e0:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ad:7a:75:a4:19:d9:02:74:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=cf7e6ec2-da5c-4d2a-aa7a-4848b162cd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:a2:cf:cf:16:6d:45:24:e7:48:95:71:29: a4:de:5f:ec:43:14:cf:7c:0a:33:cc:8f:22:69:73: 1c:fb:18:a4:5d:5a:c1:24:ee:6d:6a:b7:d8:0e:1d: 0e:88:44:db:7b:94:16:08:0d:3e:cc:12:89:00:6d: 0e:03:6a:9f:aa:24:73:da:57:f7:26:86:f6:10:95: 3e:55:01:84:f2:cf:72:be:fc:1e:66:6f:08:02:d2: 88:8a:04:8a:2e:84:c7:c8:65:f0:f3:b1:25:7f:1e: 66:10:71:c4:3b:19:ae:76:88:66:b5:17:21:57:f8: a3:99:51:12:52:d4:66:cb:3c:2e:bb:3d:56:c9:59: 38:30:4a:34:85:10:67:4c:a9:69:9b:ff:6e:c8:9b: dd:94:17:05:d7:52:b2:da:c4:a2:d7:b5:b9:7d:7f: 89:3e:7d:79:dc:4a:39:57:07:ec:b2:51:66:50:86: d8:6d:c8:d4:83:42:1d:5a:33:b4:dd:5f:48:15:22: 5f:02:dd:86:73:9b:12:28:ec:d3:d3:44:4c:62:e3: d2:5a:90:f9:2a:c1:90:bd:6d:ed:95:17:0d:44:51: 43:a9:81:02:fc:6d:7d:dd:d0:dd:f0:94:30:b0:da: aa:5c:55:06:1d:4d:66:c6:ee:5c:59:53:d3:25:e9: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:5E:15:35:ED:E8:73:A7:29:86:00:5C:A7:83:2F:AC:0C:AB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0:a000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a3:16:a8:57:19:db:6c:60:0c:b0:ad:08:1e:04:33:70:33: c2:0c:eb:26:fe:cb:33:61:8d:5a:61:b0:b2:45:a3:c1:40:8f: ee:87:ce:32:67:34:d9:d0:71:e5:24:0a:28:9c:94:86:e3:56: fc:8e:7b:32:bb:c1:c4:4d:d3:6a:d1:f3:1b:53:be:0c:3a:01: 8a:1a:d6:c8:be:24:3e:a7:d7:35:d4:e0:d8:f9:f2:64:87:d6: 76:31:1d:1b:0d:2b:df:a7:88:a4:5e:10:e4:03:6b:6f:ef:f7: f7:27:62:27:9c:1e:ed:d1:23:d9:5a:95:f6:24:0d:5f:06:a0: 21:80:b8:1d:79:cd:26:c7:4e:31:ce:6d:65:f8:99:f1:5b:42: fd:ed:7d:7c:67:40:a1:f3:cd:c2:d5:c2:b6:d9:e0:bb:a5:44: 37:c1:c3:b5:c1:69:c0:47:44:f7:04:ff:22:d8:a9:13:b3:2d: fe:2e:cc:f4:a5:fe:73:2e:68:95:84:4c:fa:d3:e3:1d:73:64: 58:7b:b0:8b:63:5c:35:39:5a:77:a1:56:b2:0e:99:93:08:ea: 01:61:c3:ee:6f:55:94:9c:d3:ed:6a:0b:18:56:fa:a1:1f:bb: 6a:ce:46:f8:40:d4:55:1d:e5:2c:4f:e3:d9:db:0a:08:64:4b: 6c:96:ff:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkls616daQZ2QJ0GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk Y2Y3ZTZlYzItZGE1Yy00ZDJhLWFhN2EtNDg0OGIxNjJjZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CCiz88WbUUk50iVcSmk3l/sQxTPfAozzI8i aXMc+xikXVrBJO5tarfYDh0OiETbe5QWCA0+zBKJAG0OA2qfqiRz2lf3Job2EJU+ VQGE8s9yvvweZm8IAtKIigSKLoTHyGXw87Elfx5mEHHEOxmudohmtRchV/ijmVES UtRmyzwuuz1WyVk4MEo0hRBnTKlpm/9uyJvdlBcF11Ky2sSi17W5fX+JPn153Eo5 VwfsslFmUIbYbcjUg0IdWjO03V9IFSJfAt2Gc5sSKOzT00RMYuPSWpD5KsGQvW3t lRcNRFFDqYEC/G193dDd8JQwsNqqXFUGHU1mxu5cWVPTJektFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDX8XhU17ehzpymGAFyngy+sDKuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvMzNjYmMzNTQtZDE4NS0z NzQ4LWE2N2UtOGI5NDBkYzMxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJhAA4KAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACKMWqFcZ22xgDLCtCB4EM3AzwgzrJv7LM2GNWmGwskWjwUCP7ofO Mmc02dBx5SQKKJyUhuNW/I57MrvBxE3TatHzG1O+DDoBihrWyL4kPqfXNdTg2Pny ZIfWdjEdGw0r36eIpF4Q5ANrb+/39ydiJ5we7dEj2VqV9iQNXwagIYC4HXnNJsdO Mc5tZfiZ8VtC/e19fGdAofPNwtXCttngu6VEN8HDtcFpwEdE9wT/ItipE7Mt/i7M 9KX+cy5olYRM+tPjHXNkWHuwi2NcNTlad6FWsg6ZkwjqAWHD7m9VlJzT7WoLGFb6 oR+7as5G+EDUVR3lLE/j2dsKCGRLbJb/0Q== -----END CERTIFICATE-----Generated at Wed May 7 18:59:45 2025 by rpki-client