$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa File: 11bb1a26-aa2c-3dfd-b959-a33694de395f.roa (raw, json) Hash identifier: wANN3EtqPzgLP+BnoGGSzRmaZ47aKTqzXBn48ApRUn4= Subject key identifier: CA:C9:19:25:F7:25:07:FF:B2:C3:55:71:EB:37:93:A5:4D:D7:7F:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1BC5AABA8E976EFD94D8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:b280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:c5:aa:ba:8e:97:6e:fd:94:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=977efc04-cdf7-43fe-aed8-c9e7e4b40933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:46:e1:78:c5:76:66:a1:4e:14:89:b1:14: aa:15:51:3a:6e:91:d4:e1:db:e7:b6:05:f7:cc:dd: 3b:c3:e8:a3:9d:d9:04:28:5f:e8:b3:a5:91:a9:37: 6c:30:1d:5b:52:08:cc:83:d4:45:3f:56:95:39:31: 62:6a:49:46:c6:41:3f:37:6e:4e:93:e2:81:64:d6: 25:8c:5d:fe:49:50:fc:12:20:ad:2d:d0:ea:b1:98: 36:b1:9c:19:66:e8:1b:34:24:b8:d8:82:a4:09:ab: 0e:7e:bf:08:c8:1a:c8:47:f8:ab:68:ff:da:17:a8: 7e:5e:94:2e:42:bd:7c:46:81:1d:42:2b:85:44:94: db:91:55:bc:8c:9b:49:18:2d:4a:da:12:cc:3f:08: ae:0c:79:ba:1d:46:3f:0e:9b:0a:05:c2:8b:6b:5e: be:7e:35:98:80:34:30:1c:50:19:2c:37:11:fc:e1: 06:12:0e:8a:01:37:26:26:75:7a:b0:2a:7a:18:4c: b8:6a:9b:e2:21:42:fa:da:a2:a9:7b:5e:3d:56:ab: 3f:da:65:da:10:66:8f:84:be:9c:d5:bd:6f:9f:59: 3c:fd:1f:a6:33:7d:09:ee:58:e8:93:d2:c3:a6:44: be:11:af:41:a1:3d:85:20:44:1f:8c:e4:7e:12:99: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C9:19:25:F7:25:07:FF:B2:C3:55:71:EB:37:93:A5:4D:D7:7F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:8e:31:7b:b8:f0:89:8b:30:28:10:12:7e:a6:5a:1b:df: 15:5a:80:16:d5:40:a2:71:f0:64:c9:0c:ba:ee:db:dd:8d:c6: a8:17:ac:d7:1a:ee:32:b2:df:28:ea:b4:36:a9:9e:89:1c:98: 1b:56:0b:9c:37:5a:31:8e:29:4d:24:a6:f6:8c:2f:02:1c:ab: d5:cd:2b:15:34:63:6c:7f:71:d5:85:cb:d2:28:74:5b:2d:37: e9:68:c5:40:18:d1:71:7f:2e:fc:e1:8a:5e:45:e2:71:9d:53: 3a:8e:37:21:49:88:f8:85:01:50:75:35:2a:7f:bf:17:fb:91: 87:39:44:a7:81:93:74:05:c2:cf:b2:3a:b5:f5:63:66:88:42: 32:78:e3:77:47:ca:6b:c1:4b:19:2d:e6:5a:e6:63:e6:ce:ca: ba:71:2c:25:e0:88:d2:3b:c2:5b:80:c7:1f:a8:4f:b1:4a:d7: 41:6c:4a:e8:d3:1f:03:0e:91:c3:84:0c:38:ae:b3:c0:22:a8: 0d:a5:db:86:7f:b0:69:ee:3c:cf:4d:d0:1f:f5:6c:a0:b0:40: f1:51:dd:22:a0:e1:d2:44:15:c0:fd:3a:53:80:83:7e:01:77: be:eb:2f:da:b3:7b:71:d1:96:17:21:80:ed:1d:b1:f1:72:fd: d3:87:8f:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhvFqrqOl279lNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTc3ZWZjMDQtY2RmNy00M2ZlLWFlZDgtYzllN2U0YjQwOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvlG4XjFdmahThSJsRSqFVE6bpHU4dvntgX3 zN07w+ijndkEKF/os6WRqTdsMB1bUgjMg9RFP1aVOTFiaklGxkE/N25Ok+KBZNYl jF3+SVD8EiCtLdDqsZg2sZwZZugbNCS42IKkCasOfr8IyBrIR/iraP/aF6h+XpQu Qr18RoEdQiuFRJTbkVW8jJtJGC1K2hLMPwiuDHm6HUY/DpsKBcKLa16+fjWYgDQw HFAZLDcR/OEGEg6KATcmJnV6sCp6GEy4apviIUL62qKpe149Vqs/2mXaEGaPhL6c 1b1vn1k8/R+mM30J7ljok9LDpkS+Ea9BoT2FIEQfjOR+EplVCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMrJGSX3JQf/ssNVces3k6VN13/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFiYjFhMjYtYWEyYy0z ZGZkLWI5NTktYTMzNjk0ZGUzOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASajjF7uPCJizAoEBJ+plob3xVagBbVQKJx8GTJDLru292NxqgX rNca7jKy3yjqtDapnokcmBtWC5w3WjGOKU0kpvaMLwIcq9XNKxU0Y2x/cdWFy9Io dFstN+loxUAY0XF/Lvzhil5F4nGdUzqONyFJiPiFAVB1NSp/vxf7kYc5RKeBk3QF ws+yOrX1Y2aIQjJ443dHymvBSxkt5lrmY+bOyrpxLCXgiNI7wluAxx+oT7FK10Fs SujTHwMOkcOEDDius8AiqA2l24Z/sGnuPM9N0B/1bKCwQPFR3SKg4dJEFcD9OlOA g34Bd77rL9qze3HRlhchgO0dsfFy/dOHjxA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:43 2025 by rpki-client