$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa File: a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json) Hash identifier: Yo0ahZ4pP5oTij7s3QWHPzM2aadJJOumR4dgtNCWbZg= Subject key identifier: 72:71:36:39:26:DE:12:0B:EE:98:79:82:43:7D:05:5F:F1:D4:E1:C2 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F432858494BDAD45F4143F6D5888AD580 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa Signing time: Mon 24 Mar 2025 17:00:22 +0000 ROA not before: Mon 24 Mar 2025 17:00:22 +0000 ROA not after: Sun 22 Jun 2025 17:00:22 +0000 asID: 21947 IP address blocks: 2604:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:da:d4:5f:41:43:f6:d5:88:8a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Mar 24 17:00:22 2025 GMT Not After : Jun 22 17:00:22 2025 GMT Subject: CN=5034f4c1-f8ba-4ce9-9324-a121fd6bc65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:85:27:1c:15:d8:26:22:ba:4f:ec:3c:7b: c7:62:61:41:f7:b0:55:f0:5a:bc:7b:03:0b:1e:8e: a5:1b:49:9e:da:5a:d0:01:c1:6e:3b:a5:fb:19:da: 6f:a9:cc:40:90:12:30:09:cb:ad:6c:d2:a4:09:37: 3a:9c:c7:8e:42:35:bb:d6:fb:c3:36:ca:93:48:b8: 46:a1:1a:a8:0b:ec:90:f6:9f:0b:e4:8c:27:20:34: ed:32:c0:bf:ab:a1:44:27:bd:65:e8:77:7a:b1:15: fc:12:f4:51:69:35:cc:f9:ed:7d:78:12:6e:52:36: b4:02:06:a2:ab:15:81:29:bb:90:92:a0:d9:ef:ee: 86:f3:a4:a7:1c:9d:47:0e:05:6e:a1:23:ef:b2:76: 90:52:2e:54:96:d5:99:99:c9:a9:84:9b:ae:70:5b: 8a:8a:f8:37:f3:bc:86:f9:fe:93:df:a1:d1:d5:e5: 2b:09:ca:3d:67:3a:aa:31:66:95:77:d1:4a:6c:ad: b0:ca:14:83:56:ad:fe:2d:ae:2c:89:b9:67:bb:9d: a6:96:56:c9:e2:e1:c8:ac:e4:14:26:4e:94:1b:d2: 5a:e6:d7:09:e7:af:38:79:71:7a:45:29:f1:18:5e: 27:eb:46:f3:89:86:38:25:2f:7e:85:6c:58:16:68: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:36:39:26:DE:12:0B:EE:98:79:82:43:7D:05:5F:F1:D4:E1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2604:300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e6:07:55:80:be:fd:a6:f1:8e:d5:11:00:c0:4d:1c:e9:7d: ae:6e:38:4a:6b:8c:80:ca:d1:6d:ca:7f:71:c0:de:fe:a9:68: b9:e4:c6:fb:fb:dd:f5:93:60:4d:eb:c3:f4:c0:6b:bc:ba:d1: a0:d0:55:f1:15:5f:20:53:0c:bf:e5:15:25:94:36:99:c3:b0: 17:9e:e1:2b:cd:6c:ce:5a:0f:b3:3a:e2:21:59:f8:7a:a4:6c: 05:11:c4:6c:b1:7b:9c:96:dd:d9:87:3f:f4:fe:c0:b0:b9:cd: 97:45:7e:12:2f:17:42:6c:fb:f9:e2:71:40:3b:43:49:d5:20: d2:9a:b5:d8:c7:50:e1:6f:93:f0:79:40:70:73:9d:44:21:08: b5:f2:9c:97:a5:e8:52:17:8a:cf:77:c5:a9:84:2d:67:aa:b7: cd:a6:26:a0:ab:88:44:18:05:30:c9:a0:9e:5e:54:41:78:6a: 64:8e:e0:50:b3:72:b3:45:08:f4:0b:e4:f2:05:3f:fd:dc:5b: cf:56:06:61:02:40:98:8c:3c:d8:58:9d:56:60:7c:da:3a:38: bd:ec:1f:8e:12:02:16:95:b4:75:66:23:67:58:af:41:8b:0b: 49:21:dc:98:ba:9e:c8:0e:9e:c4:66:c0:4c:03:82:82:41:df: 3a:ae:1d:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElL2tRfQUP21YiK1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDMyNDE3MDAyMloXDTI1MDYyMjE3MDAyMlowLzEtMCsGA1UEAxMk NTAzNGY0YzEtZjhiYS00Y2U5LTkzMjQtYTEyMWZkNmJjNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXKFJxwV2CYiuk/sPHvHYmFB97BV8Fq8ewML Ho6lG0me2lrQAcFuO6X7GdpvqcxAkBIwCcutbNKkCTc6nMeOQjW71vvDNsqTSLhG oRqoC+yQ9p8L5IwnIDTtMsC/q6FEJ71l6Hd6sRX8EvRRaTXM+e19eBJuUja0Agai qxWBKbuQkqDZ7+6G86SnHJ1HDgVuoSPvsnaQUi5UltWZmcmphJuucFuKivg387yG +f6T36HR1eUrCco9ZzqqMWaVd9FKbK2wyhSDVq3+La4siblnu52mllbJ4uHIrOQU Jk6UG9Ja5tcJ5684eXF6RSnxGF4n60bziYY4JS9+hWxYFmht7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJxNjkm3hIL7ph5gkN9BV/x1OHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYTMxYjdlZTMtNjQzMC0z YjQ1LWI3ODYtN2I1NWNhMGI3YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQDADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBk5gdVgL79pvGO1REAwE0c6X2ubjhKa4yAytFtyn9xwN7+qWi55Mb7 +931k2BN68P0wGu8utGg0FXxFV8gUwy/5RUllDaZw7AXnuErzWzOWg+zOuIhWfh6 pGwFEcRssXuclt3Zhz/0/sCwuc2XRX4SLxdCbPv54nFAO0NJ1SDSmrXYx1Dhb5Pw eUBwc51EIQi18pyXpehSF4rPd8WphC1nqrfNpiagq4hEGAUwyaCeXlRBeGpkjuBQ s3KzRQj0C+TyBT/93FvPVgZhAkCYjDzYWJ1WYHzaOji97B+OEgIWlbR1ZiNnWK9B iwtJIdyYup7IDp7EZsBMA4KCQd86rh1h -----END CERTIFICATE-----Generated at Fri May 9 20:52:58 2025 by rpki-client