$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa File: 0afbd1be-ede0-32aa-9917-796a386cf2ac.roa (raw, json) Hash identifier: bIqp+ROj4b5rwZFWv/VyM4gAxNzGFHGcDUsBGfVpTQc= Subject key identifier: 73:B1:1B:8B:9F:DD:58:88:57:7B:5E:39:56:0B:8D:6B:5D:64:B8:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499165FEFA7A591FE8C843AC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa Signing time: Fri 18 Apr 2025 14:51:33 +0000 ROA not before: Fri 18 Apr 2025 14:51:33 +0000 ROA not after: Thu 17 Jul 2025 14:51:33 +0000 asID: 19905 IP address blocks: 2604:2d81:1c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:65:fe:fa:7a:59:1f:e8:c8:43:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 18 14:51:33 2025 GMT Not After : Jul 17 14:51:33 2025 GMT Subject: CN=3fe5630c-003e-4f80-be0c-02a9483a541a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:9c:42:70:24:82:e7:16:4d:72:ff:4f:8a: 7d:4d:3b:db:a2:a9:de:8e:fa:d6:d6:e5:d9:81:2f: e9:bc:fe:5d:9a:a2:38:12:aa:b7:24:25:9e:2a:80: d4:ba:9c:13:b8:97:05:ad:eb:a3:ef:a3:d9:e6:9f: 43:5b:ea:15:8f:69:0c:c6:a3:bc:f8:ba:68:75:4c: da:e8:b2:0a:58:60:c4:be:94:05:cb:ad:40:be:66: 22:59:c5:1b:31:83:08:f6:28:7b:29:3b:b7:a8:1a: 3b:ba:a4:6d:91:d7:eb:aa:96:0a:53:63:9f:d2:9b: 8d:30:bc:40:68:59:a4:93:c6:a3:c8:e4:81:09:dd: ac:e9:3e:e2:b7:ff:f2:54:d6:3e:f8:de:01:42:8e: 87:1b:82:74:f1:25:49:71:df:6d:34:ca:7f:91:46: f1:12:55:14:5c:8e:1b:04:c7:86:55:7a:c6:35:80: 70:59:62:37:0a:cb:33:f2:63:9b:e3:45:2f:43:9d: c8:ec:3c:57:33:52:18:f8:4d:e6:bb:c6:66:51:46: 36:eb:b6:f1:71:c2:8d:bc:d6:88:d7:ba:96:79:73: 5d:0a:dd:d6:1a:39:39:8c:8d:a6:3e:99:f4:aa:0c: 2f:b7:f0:66:83:06:91:e4:4d:03:03:63:8f:53:cc: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B1:1B:8B:9F:DD:58:88:57:7B:5E:39:56:0B:8D:6B:5D:64:B8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:00:b6:a9:a1:f0:7e:22:af:8b:67:1f:ef:ff:ca:76:fa:d1: 51:ae:0a:23:06:63:a9:cf:db:26:36:e5:48:cd:25:09:1d:da: 7f:d2:42:99:ca:41:15:3f:2d:ea:0e:fe:bf:03:eb:b0:88:0f: 03:e1:f2:3a:33:0c:c3:fa:93:54:c0:0a:f8:bd:e1:c3:9c:fc: 6b:95:9c:3e:49:b6:a1:b9:0d:7f:50:09:7e:f7:7f:ef:04:84: 71:fc:84:98:10:4b:b7:a4:4c:ac:84:18:48:75:e2:37:8b:de: db:cb:9d:3b:49:9c:5b:56:b6:af:ac:8f:f1:8c:45:cd:54:9d: d0:48:8d:44:c0:97:6f:f5:b2:ef:96:a8:a2:89:28:2c:00:e5: 79:ab:b2:e2:77:b5:6b:e0:0e:ee:d7:66:b8:7d:2b:ba:f1:f1: 4d:ac:94:4e:b8:1e:30:b4:d5:2c:e0:82:8e:ab:31:b4:6a:51: 34:43:92:02:7a:45:f5:2f:fa:b9:db:9b:9f:e0:39:d4:c1:cd: d3:4c:c4:c9:21:0e:c0:0c:b3:3e:62:e3:ce:e5:fb:e4:ba:e5: 79:63:ff:f7:29:6f:fc:7d:b2:d3:49:aa:02:20:84:ec:c5:f1: a4:c2:f1:d2:bc:84:7d:9e:5a:40:35:b1:61:02:8a:25:4e:7d: ec:dc:eb:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRZf76elkf6MhDrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxODE0NTEzM1oXDTI1MDcxNzE0NTEzM1owLzEtMCsGA1UEAxMk M2ZlNTYzMGMtMDAzZS00ZjgwLWJlMGMtMDJhOTQ4M2E1NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bqcQnAkgucWTXL/T4p9TTvboqnejvrW1uXZ gS/pvP5dmqI4Eqq3JCWeKoDUupwTuJcFreuj76PZ5p9DW+oVj2kMxqO8+LpodUza 6LIKWGDEvpQFy61AvmYiWcUbMYMI9ih7KTu3qBo7uqRtkdfrqpYKU2Of0puNMLxA aFmkk8ajyOSBCd2s6T7it//yVNY++N4BQo6HG4J08SVJcd9tNMp/kUbxElUUXI4b BMeGVXrGNYBwWWI3Cssz8mOb40UvQ53I7DxXM1IY+E3mu8ZmUUY267bxccKNvNaI 17qWeXNdCt3WGjk5jI2mPpn0qgwvt/BmgwaR5E0DA2OPU8znuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHOxG4uf3ViIV3teOVYLjWtdZLifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFmYmQxYmUtZWRlMC0z MmFhLTk5MTctNzk2YTM4NmNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIAtqmh8H4ir4tnH+//ynb60VGuCiMGY6nP2yY25UjNJQkd2n/S QpnKQRU/LeoO/r8D67CIDwPh8jozDMP6k1TACvi94cOc/GuVnD5JtqG5DX9QCX73 f+8EhHH8hJgQS7ekTKyEGEh14jeL3tvLnTtJnFtWtq+sj/GMRc1UndBIjUTAl2/1 su+WqKKJKCwA5XmrsuJ3tWvgDu7XZrh9K7rx8U2slE64HjC01Szggo6rMbRqUTRD kgJ6RfUv+rnbm5/gOdTBzdNMxMkhDsAMsz5i487l++S65Xlj//cpb/x9stNJqgIg hOzF8aTC8dK8hH2eWkA1sWECiiVOfezc6/g= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:45 2025 by rpki-client