$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/0a4b16da-dff0-3eef-baef-b8c08a5b2143.roa File: 0a4b16da-dff0-3eef-baef-b8c08a5b2143.roa (raw, json) Hash identifier: 8Z9+SxJsPJBdkD4LmuDXyGdU0PG6LLpdmtJU4cPV250= Subject key identifier: 5F:C6:E3:11:94:CB:FE:2D:3F:9B:1C:C7:3C:67:AA:CF:9C:8D:94:C4 Certificate issuer: /CN=e141f9d6-8504-48ca-bc47-c44959796c93 Certificate serial: 010D0C9F43285849CD34BE53E724A06FC1C59780 Authority key identifier: 6F:78:E7:8A:5C:E8:93:52:9C:E5:16:2E:03:55:F0:23:BC:C1:74:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/0a4b16da-dff0-3eef-baef-b8c08a5b2143.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 33063 IP address blocks: 2604:3e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/e141f9d6-8504-48ca-bc47-c44959796c93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/e141f9d6-8504-48ca-bc47-c44959796c93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:be:53:e7:24:a0:6f:c1:c5:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e141f9d6-8504-48ca-bc47-c44959796c93 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=4fddf03e-56be-4e96-8636-4d33296febbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:ce:55:47:8d:29:b7:47:d2:a1:ad:67:d3: b8:b9:2e:94:10:f8:c3:ea:60:29:99:45:5d:b5:c6: 4a:5e:c1:db:1c:12:9e:2a:90:92:76:2e:12:46:32: 27:ad:fd:76:45:aa:c0:fd:e7:b3:eb:db:6b:61:18: b4:39:b3:da:6d:b0:3d:32:02:72:49:b9:f2:0e:62: b0:36:2e:e4:b2:99:6c:09:f8:19:85:8a:5b:18:e6: 93:34:78:04:a0:31:31:ac:b3:97:09:7f:58:48:e0: 62:25:70:c4:29:43:48:e8:b1:23:89:10:ce:6e:44: e0:34:53:f8:21:08:ba:df:fe:f9:3f:22:b2:db:84: 59:ed:0e:d5:6c:d1:46:4f:1e:ed:0c:9c:a5:ba:e9: 8b:bf:45:39:9f:a7:03:83:71:45:01:26:4c:8e:2a: a9:d2:18:d5:38:f0:53:87:10:66:da:aa:8a:83:18: c4:5d:4a:43:27:f7:94:e7:e7:5e:80:1e:bd:30:9a: d7:d6:1f:f2:0d:d7:e2:bd:20:93:1e:6a:1d:18:d3: b9:65:3f:3d:5c:4f:4a:6f:69:4d:20:1a:d3:3d:ef: cb:cb:9d:93:0c:1b:11:39:84:41:89:29:99:5f:74: 77:3e:27:dc:cf:81:23:9e:72:8a:62:e5:db:bd:34: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:E3:11:94:CB:FE:2D:3F:9B:1C:C7:3C:67:AA:CF:9C:8D:94:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/0a4b16da-dff0-3eef-baef-b8c08a5b2143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/e141f9d6-8504-48ca-bc47-c44959796c93.crl X509v3 Authority Key Identifier: keyid:6F:78:E7:8A:5C:E8:93:52:9C:E5:16:2E:03:55:F0:23:BC:C1:74:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93.cer sbgp-ipAddrBlock: critical IPv6: 2604:3e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:54:ab:46:b7:24:0a:81:4b:75:67:37:4f:b5:65:e2:ac:01: 22:9d:75:10:35:40:62:d2:30:5a:e2:75:64:3e:f5:57:76:de: 37:34:e3:15:33:03:1b:06:09:63:e7:e1:0a:f7:3d:ac:81:50: 72:b0:49:9a:cd:dd:d7:48:8d:9a:6c:63:36:eb:13:bb:fc:ee: 34:1f:f7:1b:55:c0:ee:e7:26:cf:bd:1a:06:fa:77:ab:dd:4b: cb:c2:13:ab:d1:32:ed:5b:e2:70:74:6f:17:f5:3f:50:b3:15: 43:1b:4a:dd:af:66:cd:79:bc:a2:93:5b:8d:0c:2a:f9:f8:50: 53:30:28:9e:8b:87:ce:90:d1:1c:9c:62:44:50:3d:81:82:17: ce:20:54:6a:e2:09:ee:87:47:68:5d:22:f1:a9:42:06:f5:3d: c6:a3:46:22:00:05:ee:bb:af:cf:8d:a6:e8:e8:db:eb:b3:16: 06:4b:7b:32:58:f0:e8:41:6c:fd:2b:44:9b:04:53:3f:c6:c8: 05:04:0b:bf:45:85:7b:da:84:b3:92:26:64:56:71:33:0a:53: 5f:a1:11:ea:0c:5c:1b:c9:ab:f4:9c:50:35:c0:4b:ff:e8:8f: 64:3c:27:db:a3:6a:25:fd:ed:e2:9a:d6:cb:24:42:d8:8c:4a: ea:d6:73:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnNNL5T5ySgb8HFl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0MWY5ZDYtODUwNC00OGNhLWJjNDctYzQ0OTU5Nzk2 YzkzMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NGZkZGYwM2UtNTZiZS00ZTk2LTg2MzYtNGQzMzI5NmZlYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojDOVUeNKbdH0qGtZ9O4uS6UEPjD6mApmUVd tcZKXsHbHBKeKpCSdi4SRjInrf12RarA/eez69trYRi0ObPabbA9MgJySbnyDmKw Ni7ksplsCfgZhYpbGOaTNHgEoDExrLOXCX9YSOBiJXDEKUNI6LEjiRDObkTgNFP4 IQi63/75PyKy24RZ7Q7VbNFGTx7tDJyluumLv0U5n6cDg3FFASZMjiqp0hjVOPBT hxBm2qqKgxjEXUpDJ/eU5+degB69MJrX1h/yDdfivSCTHmodGNO5ZT89XE9Kb2lN IBrTPe/Ly52TDBsROYRBiSmZX3R3Pifcz4EjnnKKYuXbvTTv0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF/G4xGUy/4tP5scxzxnqs+cjZTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMTQx ZjlkNi04NTA0LTQ4Y2EtYmM0Ny1jNDQ5NTk3OTZjOTMvMGE0YjE2ZGEtZGZmMC0z ZWVmLWJhZWYtYjhjMDhhNWIyMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTE0MWY5ZDYtODUwNC00OGNhLWJj NDctYzQ0OTU5Nzk2YzkzL2UxNDFmOWQ2LTg1MDQtNDhjYS1iYzQ3LWM0NDk1OTc5 NmM5My5jcmwwHwYDVR0jBBgwFoAUb3jnilzok1Kc5RYuA1XwI7zBdEcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMTQxZjlkNi04NTA0LTQ4Y2EtYmM0Ny1jNDQ5 NTk3OTZjOTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQD4AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxUq0a3JAqBS3VnN0+1ZeKsASKddRA1QGLSMFridWQ+9Vd23jc0 4xUzAxsGCWPn4Qr3PayBUHKwSZrN3ddIjZpsYzbrE7v87jQf9xtVwO7nJs+9Ggb6 d6vdS8vCE6vRMu1b4nB0bxf1P1CzFUMbSt2vZs15vKKTW40MKvn4UFMwKJ6Lh86Q 0RycYkRQPYGCF84gVGriCe6HR2hdIvGpQgb1PcajRiIABe67r8+Npujo2+uzFgZL ezJY8OhBbP0rRJsEUz/GyAUEC79FhXvahLOSJmRWcTMKU1+hEeoMXBvJq/ScUDXA S//oj2Q8J9ujaiX97eKa1sskQtiMSurWc/Q= -----END CERTIFICATE-----Generated at Sat May 10 17:49:58 2025 by rpki-client