$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa File: 0c605709-b6c6-3803-a412-6f881c4ec44a.roa (raw, json) Hash identifier: RiR3DT+Et5aoG+t1BFKd4YgCm2WOKQjdKsqTbVd0EQc= Subject key identifier: 8A:D8:4A:6B:E3:8F:91:B8:64:9B:EC:F7:F9:4C:17:9C:33:51:51:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3B2AE17227CFCB416400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:ed00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:2a:e1:72:27:cf:cb:41:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=94836833-2c11-407a-ba14-27b05bd917b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4f:21:36:e3:5b:28:e3:1a:a2:dd:fa:21:be: 84:2b:bf:44:63:50:3f:7a:df:11:2f:e6:cc:79:f0: 1f:34:17:d7:5d:32:20:6d:46:aa:f1:76:b2:08:4c: f4:03:af:1d:18:79:05:53:0c:26:b9:75:61:e8:ef: 89:53:f5:81:18:a4:4e:31:01:59:f6:bb:12:aa:2a: 05:b2:2e:48:2c:47:cc:29:46:fa:08:01:96:c6:75: b3:d5:cb:4f:95:3d:ff:db:5e:77:5b:1d:c0:c0:8c: 7b:72:71:12:ee:e4:35:00:3e:ff:fa:23:e4:f7:75: 6a:d0:51:8d:16:ff:2d:42:f4:b8:b5:12:eb:62:36: 92:b6:19:e6:af:b9:a3:c0:a7:c9:44:bf:91:15:b0: fd:8e:a5:63:44:0e:61:14:e7:a0:55:5c:0b:70:24: da:2b:25:61:ea:59:23:ef:bb:f6:8a:0d:3c:28:0a: 4c:7f:30:1d:55:85:43:0e:9b:94:ee:e7:fe:0a:fc: 34:1e:f0:78:35:96:e7:d1:78:e6:74:08:8a:54:71: 39:2e:c7:68:ed:7d:33:3a:e4:cc:ff:e9:80:b9:c5: bd:8d:63:bc:4c:0c:0f:41:d2:85:32:dc:9d:6e:7d: 45:e0:f9:4b:b5:be:d9:94:e4:a9:5b:b5:67:92:15: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D8:4A:6B:E3:8F:91:B8:64:9B:EC:F7:F9:4C:17:9C:33:51:51:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ed00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8b:3a:00:a0:35:97:d1:22:45:88:58:94:b6:01:67:ff:af: 68:ec:b3:80:46:b5:2b:ba:e1:c7:a5:73:01:97:9a:01:a6:77: 92:73:4c:0a:18:af:15:6c:b5:90:40:23:ae:ac:99:2a:ef:e9: 0b:90:7d:d1:39:c6:1a:5d:1e:69:15:aa:df:2f:44:68:77:b1: 8a:2d:0e:a2:58:07:50:2b:c6:fc:c4:8b:98:b7:fd:77:68:e2: 2e:b4:fa:c6:22:55:c8:70:c8:82:02:0d:b5:78:cc:83:2c:f6: 1a:21:a1:c5:64:f4:b1:ed:37:fb:aa:7e:53:90:d2:28:df:a9: e4:01:46:31:73:f4:df:d2:b8:bb:e4:2b:4d:b2:5e:72:5a:25: 9a:ba:3e:8c:c3:20:79:87:33:53:82:d5:51:5a:64:bb:a5:bd: 17:a7:5f:b2:8b:a6:0a:99:3e:02:c2:5f:e7:be:7b:a4:94:4d: 18:77:6a:92:87:ac:6e:3f:a8:7d:7e:8a:c3:7b:dc:f8:6e:33: 94:52:a6:bc:22:f9:ef:a2:0f:63:df:1b:ef:4f:31:14:ad:24: ac:86:7c:fe:b3:33:3d:1d:82:08:68:8d:19:b4:98:6e:ea:0f: a2:87:e6:66:9d:99:08:26:e4:5d:19:66:56:00:a8:32:b6:02: be:d2:9c:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujsq4XInz8tBZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTQ4MzY4MzMtMmMxMS00MDdhLWJhMTQtMjdiMDViZDkxN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E8hNuNbKOMaot36Ib6EK79EY1A/et8RL+bM efAfNBfXXTIgbUaq8XayCEz0A68dGHkFUwwmuXVh6O+JU/WBGKROMQFZ9rsSqioF si5ILEfMKUb6CAGWxnWz1ctPlT3/2153Wx3AwIx7cnES7uQ1AD7/+iPk93Vq0FGN Fv8tQvS4tRLrYjaSthnmr7mjwKfJRL+RFbD9jqVjRA5hFOegVVwLcCTaKyVh6lkj 77v2ig08KApMfzAdVYVDDpuU7uf+Cvw0HvB4NZbn0XjmdAiKVHE5Lsdo7X0zOuTM /+mAucW9jWO8TAwPQdKFMtydbn1F4PlLtb7ZlOSpW7VnkhVrmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrYSmvjj5G4ZJvs9/lMF5wzUVE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM2MDU3MDktYjZjNi0z ODAzLWE0MTItNmY4ODFjNGVjNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgO0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuLOgCgNZfRIkWIWJS2AWf/r2jss4BGtSu64celcwGXmgGmd5Jz TAoYrxVstZBAI66smSrv6QuQfdE5xhpdHmkVqt8vRGh3sYotDqJYB1ArxvzEi5i3 /Xdo4i60+sYiVchwyIICDbV4zIMs9hohocVk9LHtN/uqflOQ0ijfqeQBRjFz9N/S uLvkK02yXnJaJZq6PozDIHmHM1OC1VFaZLulvRenX7KLpgqZPgLCX+e+e6SUTRh3 apKHrG4/qH1+isN73PhuM5RSprwi+e+iD2PfG+9PMRStJKyGfP6zMz0dgghojRm0 mG7qD6KH5madmQgm5F0ZZlYAqDK2Ar7SnA0= -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:20 2025 by rpki-client