$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa File: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (raw, json) Hash identifier: GN3uwEfYxSUx9CNZglxwF/003k7xBPbH7FZ4o5Q+KjM= Subject key identifier: 7A:4F:B0:75:4C:67:9A:EC:FC:E7:9C:17:ED:DD:A1:93:CC:5D:D0:72 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584A050A790054C6CC4D6F568880 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 62915 IP address blocks: 2607:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:79:00:54:c6:cc:4d:6f:56:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=56cb02b2-0f89-47cb-9167-f859596883bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:f5:fe:bb:03:fa:f5:be:59:c9:4d:11:fe: a7:dc:f2:45:88:48:5a:aa:20:ab:b8:28:c8:c4:62: d7:f7:28:d1:85:a9:64:f8:16:58:fc:a2:21:65:47: 25:63:55:94:b8:4c:e5:b3:2a:2d:97:b8:bd:1a:52: b9:0f:b0:6a:78:64:2a:87:fb:22:b1:98:45:ab:b1: eb:b1:c5:cd:f6:ab:d0:48:7f:8e:6d:69:5f:d8:85: 1f:f1:9a:39:96:7f:7b:ec:9d:0c:9f:41:a4:32:7c: bd:e6:83:cd:a2:58:99:ed:5a:99:e7:4e:d7:5b:1d: ce:83:50:f6:1c:f0:a6:27:a3:03:99:6e:3f:91:f9: f0:05:9f:c5:35:f1:bf:6b:20:bb:48:4e:38:25:d1: 21:4f:46:c8:21:0e:79:c6:60:45:32:9d:7b:ac:b0: 81:81:df:25:1a:22:8c:51:59:33:20:a0:81:c1:f7: 74:82:92:19:3f:78:54:5d:ea:e2:d9:cb:34:ec:08: 52:6c:cb:b4:6f:ce:cb:6b:d1:23:84:b3:99:9a:24: ec:e6:4b:6f:38:99:57:42:a3:14:27:ce:6f:9e:73: 6d:57:dd:dd:f2:fd:ea:55:59:ed:79:af:fc:7b:95: 66:8a:64:39:b7:1a:68:15:04:71:3f:66:e5:36:90: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4F:B0:75:4C:67:9A:EC:FC:E7:9C:17:ED:DD:A1:93:CC:5D:D0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv6: 2607:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:75:f4:e4:9e:59:91:78:0c:73:6b:a0:60:6a:ec:ec:70:0e: 36:05:4a:52:12:e7:ed:b3:b6:83:fb:c4:c3:92:e7:4a:b1:9f: 2e:77:9b:1e:9a:d0:0a:16:14:e6:06:35:7a:18:69:79:40:8e: 54:eb:d3:42:6b:f6:37:1f:9e:b7:22:0f:73:3a:9c:ee:32:2f: d3:c5:c3:7e:b4:16:37:67:30:5a:2f:4d:26:63:47:4b:b6:f0: 99:a9:b1:cb:51:ac:3e:16:4d:d3:9e:d2:55:07:3f:da:73:7a: 7a:90:8a:3f:2d:74:a9:9d:d5:9e:31:81:33:dd:4c:5b:b7:af: 23:7a:37:7a:27:f5:20:41:e7:4b:78:4d:15:c3:df:e2:33:0a: ce:b5:36:de:33:05:de:c7:90:e0:8b:13:e8:68:c0:d5:65:2c: 3e:71:00:60:4f:ec:12:bf:d5:a1:e1:53:5f:bc:74:ec:75:f7: a0:d4:b9:82:d6:79:26:13:e5:f4:4d:f5:51:b1:3d:03:2b:d6: 14:37:5d:27:99:36:1d:b1:7d:af:4e:fc:ac:ea:76:88:1f:95: df:ef:08:aa:1d:d5:17:19:c4:0a:0b:b3:10:38:45:ed:74:13: 0d:b7:ec:52:b5:ea:ff:28:97:64:23:7e:99:d9:ec:2d:9a:2b: df:c0:b4:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoFCnkAVMbMTW9WiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk NTZjYjAyYjItMGY4OS00N2NiLTkxNjctZjg1OTU5Njg4M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iL1/rsD+vW+WclNEf6n3PJFiEhaqiCruCjI xGLX9yjRhalk+BZY/KIhZUclY1WUuEzlsyotl7i9GlK5D7BqeGQqh/sisZhFq7Hr scXN9qvQSH+ObWlf2IUf8Zo5ln977J0Mn0GkMny95oPNoliZ7VqZ507XWx3Og1D2 HPCmJ6MDmW4/kfnwBZ/FNfG/ayC7SE44JdEhT0bIIQ55xmBFMp17rLCBgd8lGiKM UVkzIKCBwfd0gpIZP3hUXeri2cs07AhSbMu0b87La9EjhLOZmiTs5ktvOJlXQqMU J85vnnNtV93d8v3qVVntea/8e5VmimQ5txpoFQRxP2blNpAVOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHpPsHVMZ5rs/OecF+3doZPMXdByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMzU0MWMzMjQtZTQzMy0z NzFiLWJlN2EtZmFhZjIyZmVhNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtdfTknlmReAxza6BgauzscA42BUpSEufts7aD+8TDkudKsZ8ud5se mtAKFhTmBjV6GGl5QI5U69NCa/Y3H563Ig9zOpzuMi/TxcN+tBY3ZzBaL00mY0dL tvCZqbHLUaw+Fk3TntJVBz/ac3p6kIo/LXSpndWeMYEz3Uxbt68jejd6J/UgQedL eE0Vw9/iMwrOtTbeMwXex5DgixPoaMDVZSw+cQBgT+wSv9Wh4VNfvHTsdfeg1LmC 1nkmE+X0TfVRsT0DK9YUN10nmTYdsX2vTvys6naIH5Xf7wiqHdUXGcQKC7MQOEXt dBMNt+xSter/KJdkI36Z2ewtmivfwLTp -----END CERTIFICATE-----Generated at Mon Jun 30 06:54:00 2025 by rpki-client