$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/083b267d-245f-3491-ad4b-a8ff162e2b8d.roa File: 083b267d-245f-3491-ad4b-a8ff162e2b8d.roa (raw, json) Hash identifier: lWafhT2tp2Qb8JOMFxKwkjE/d7pSMZtC0xfz5pL0Bso= Subject key identifier: B7:41:98:3B:6C:CC:EA:40:83:C1:8C:83:01:4F:F7:6C:BD:00:72:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3A59A6A32F7EBE8A0B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/083b267d-245f-3491-ad4b-a8ff162e2b8d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:9d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3a:59:a6:a3:2f:7e:be:8a:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b384a92e-2c58-4c8c-826f-4847c3f6f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:40:82:06:56:5e:83:cb:f0:09:8b:e6:d4: 40:1d:c9:71:ac:22:64:4c:04:1c:24:bc:c3:7b:10: 9f:7c:38:33:f6:52:64:37:7d:15:b5:b6:6d:23:b9: f7:45:9c:d0:21:23:8e:ee:6d:9b:9f:8e:3e:72:e3: 01:d9:24:d3:37:32:86:b2:ca:38:2f:f5:c7:b2:1c: a2:1d:75:db:92:41:ca:0a:18:1d:5b:b8:82:93:98: a2:4b:07:e3:f1:1b:b9:46:df:19:ef:0a:1c:c5:9c: 8b:7a:ac:e4:3f:d5:cd:ad:9d:22:2d:1e:ff:02:7d: b7:71:79:42:ce:ad:32:6c:04:2e:c3:4b:d2:94:9b: eb:b3:42:e0:e6:dc:de:02:6f:e6:72:d0:fb:67:f6: 4e:6f:d1:61:f0:6a:cb:9e:30:a9:ab:21:5b:db:4d: 42:3e:9d:cd:a5:5a:09:ef:e5:4a:aa:c9:29:eb:a5: 9f:16:59:4c:65:52:32:d2:96:92:ca:a7:2a:9f:fa: 4d:fe:08:c7:5a:41:a9:29:db:cc:a7:ef:8c:e9:ab: 39:e9:ed:a2:45:7e:42:e5:5b:c1:c1:c5:a4:f2:da: d1:1a:66:f9:57:d0:76:15:8c:ae:9f:23:6d:06:84: dc:dd:14:0b:32:d2:f2:1d:d0:c9:cd:e8:a2:59:c7: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:98:3B:6C:CC:EA:40:83:C1:8C:83:01:4F:F7:6C:BD:00:72:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/083b267d-245f-3491-ad4b-a8ff162e2b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:54:b3:8b:30:fb:e2:05:59:28:1a:11:ae:9e:f9:25:b6:fb: a9:fb:0a:7d:db:b6:93:27:af:dd:c8:77:33:8a:aa:ba:2a:f6: 39:8a:da:41:27:eb:30:a8:96:38:28:cf:29:8a:7a:68:c6:3c: dd:b7:02:79:15:96:b3:ca:2d:62:2e:56:ba:c8:04:9e:ea:78: 28:41:c6:eb:b9:b0:a8:37:96:8b:da:e9:8d:c9:a6:57:2c:13: ae:70:81:71:29:6a:7c:da:03:d7:4e:b8:67:5f:d5:2a:51:77: 3d:e8:09:f8:fe:93:dd:89:40:4d:30:81:f2:98:9f:dd:56:b4: 55:56:e2:71:a4:b2:61:fe:a9:6a:3c:9a:cc:19:fa:3f:25:70: f7:c6:a3:62:7d:70:2d:d0:b2:87:5a:47:8d:39:02:74:58:c8: 8b:06:7d:ab:ce:f5:69:4e:6d:e4:cf:b7:c9:0e:b1:42:1d:e3: 93:ca:3f:70:bd:6a:e3:19:cd:d6:95:75:32:d4:bc:4a:f6:68: 88:b8:28:fa:2e:ee:be:19:b8:08:7b:68:cd:04:a8:88:5f:02: e7:fc:6c:bd:b0:d2:d5:45:54:1d:29:0b:d6:c6:37:40:af:1a: 36:b5:e8:2b:4a:18:8b:a4:54:d9:ad:16:4a:b4:54:f4:8b:d5: 2f:86:44:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujpZpqMvfr6KCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjM4NGE5MmUtMmM1OC00YzhjLTgyNmYtNDg0N2MzZjZmNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YVAggZWXoPL8AmL5tRAHclxrCJkTAQcJLzD exCffDgz9lJkN30VtbZtI7n3RZzQISOO7m2bn44+cuMB2STTNzKGsso4L/XHshyi HXXbkkHKChgdW7iCk5iiSwfj8Ru5Rt8Z7wocxZyLeqzkP9XNrZ0iLR7/An23cXlC zq0ybAQuw0vSlJvrs0Lg5tzeAm/mctD7Z/ZOb9Fh8GrLnjCpqyFb201CPp3NpVoJ 7+VKqskp66WfFllMZVIy0paSyqcqn/pN/gjHWkGpKdvMp++M6as56e2iRX5C5VvB wcWk8trRGmb5V9B2FYyunyNtBoTc3RQLMtLyHdDJzeiiWcedpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdBmDtszOpAg8GMgwFP92y9AHJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDgzYjI2N2QtMjQ1Zi0z NDkxLWFkNGItYThmZjE2MmUyYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJ2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNUs4sw++IFWSgaEa6e+SW2+6n7Cn3btpMnr93IdzOKqroq9jmK 2kEn6zColjgozymKemjGPN23AnkVlrPKLWIuVrrIBJ7qeChBxuu5sKg3lova6Y3J plcsE65wgXEpanzaA9dOuGdf1SpRdz3oCfj+k92JQE0wgfKYn91WtFVW4nGksmH+ qWo8mswZ+j8lcPfGo2J9cC3QsodaR405AnRYyIsGfavO9WlObeTPt8kOsUId45PK P3C9auMZzdaVdTLUvEr2aIi4KPou7r4ZuAh7aM0EqIhfAuf8bL2w0tVFVB0pC9bG N0CvGja16CtKGIukVNmtFkq0VPSL1S+GRHc= -----END CERTIFICATE-----Generated at Sun Apr 27 02:54:51 2025 by rpki-client