$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa File: 14e7ce23-b634-37fe-a764-f8453fd0477a.roa (raw, json) Hash identifier: KbjK/3Gc7slfr9/OikOCesqFSZoiNJzLFvWO+bCFckg= Subject key identifier: 7F:C2:83:23:90:7E:8F:45:16:3E:F8:0D:61:4D:8E:00:3C:EE:7F:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B766909F7834F6ED2920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:e800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b7:66:90:9f:78:34:f6:ed:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1b3ef65c-91ab-442d-852c-6be2a3547d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:0c:2f:14:e2:9b:61:1c:ab:fd:47:ff:0b: d6:a3:7f:fa:0a:f7:ff:45:0d:2e:02:05:4d:b6:db: 77:15:ec:bc:05:bb:df:96:0d:c1:fb:73:fb:59:3e: 8c:1e:c4:0c:83:81:da:4f:00:27:81:fc:de:c4:8e: 72:ee:14:f2:0a:a7:17:cf:1c:1e:f6:0d:c4:f1:88: 65:1f:81:de:7a:a8:1e:f3:01:e7:f2:7e:75:fa:83: b6:57:e1:c3:be:7e:7a:f2:4c:a6:17:6a:fb:fa:e8: c0:36:39:ad:eb:10:1a:93:22:1c:a6:08:a2:87:df: a5:57:27:c6:bc:23:74:2d:b3:14:72:9a:cc:4e:77: 5a:86:72:79:a4:c2:74:8c:41:2d:76:3b:59:b7:a5: 85:b6:e7:e7:a7:79:ca:69:61:70:31:31:bc:61:57: c7:7a:02:e7:79:d3:51:a9:18:b5:71:d9:a1:03:74: 8b:bb:9c:46:81:33:6a:57:8a:1c:03:e2:f6:8d:81: 98:c0:3c:42:78:fb:86:40:7c:b9:83:67:a7:91:69: 41:5c:60:3c:ae:30:e7:05:35:63:6d:80:c5:fb:69: 82:e1:81:ec:6e:42:2d:ca:06:3a:cd:db:1a:a8:4d: 09:61:68:96:27:03:a1:61:50:c7:c9:92:56:fb:be: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:83:23:90:7E:8F:45:16:3E:F8:0D:61:4D:8E:00:3C:EE:7F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:dd:8b:66:4c:c9:90:fb:d9:72:d6:4c:bf:4d:67:8e:f2:07: 8a:77:d6:ee:53:40:0e:48:e4:3d:dd:31:35:b8:a4:f3:79:52: ee:44:33:91:2c:81:07:dc:47:16:38:e3:5f:86:54:ee:29:24: df:87:7c:86:af:57:3a:72:82:36:aa:91:78:bd:32:27:46:fb: fd:cc:39:b2:5d:33:6b:0b:9d:c1:2d:45:33:73:86:8f:92:bd: 58:c0:15:ed:ab:3c:1f:86:6f:d5:a2:ba:d9:af:a3:3b:bd:3d: 50:be:04:65:7f:e6:6d:d5:96:8d:34:9b:61:f9:0e:8a:83:f2: 7a:c0:dd:2f:54:ee:1c:d3:a8:18:aa:22:52:27:13:e2:8e:a5: 1e:d7:ea:58:37:80:4c:08:d4:39:77:c3:95:04:54:37:62:33: 67:fa:89:f8:60:5a:01:76:11:1c:2c:5f:7c:53:c8:05:e2:9c: 08:7f:51:3b:67:42:79:75:02:b5:29:2f:53:e7:5c:1d:18:21: 49:b9:c9:7e:a5:c8:9a:5f:7d:a1:f4:c8:a3:51:0b:72:15:01: 60:ed:ca:77:5b:e8:48:ee:ea:03:e4:89:b3:01:d3:27:fc:bc: aa:dc:95:69:5b:67:ce:6e:3c:a1:11:26:fe:c8:85:ce:de:9c: 28:0c:d2:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhLdmkJ94NPbtKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWIzZWY2NWMtOTFhYi00NDJkLTg1MmMtNmJlMmEzNTQ3ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNYMLxTim2Ecq/1H/wvWo3/6Cvf/RQ0uAgVN ttt3Fey8Bbvflg3B+3P7WT6MHsQMg4HaTwAngfzexI5y7hTyCqcXzxwe9g3E8Yhl H4Heeqge8wHn8n51+oO2V+HDvn568kymF2r7+ujANjmt6xAakyIcpgiih9+lVyfG vCN0LbMUcprMTndahnJ5pMJ0jEEtdjtZt6WFtufnp3nKaWFwMTG8YVfHegLnedNR qRi1cdmhA3SLu5xGgTNqV4ocA+L2jYGYwDxCePuGQHy5g2enkWlBXGA8rjDnBTVj bYDF+2mC4YHsbkItygY6zdsaqE0JYWiWJwOhYVDHyZJW+75qQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/CgyOQfo9FFj74DWFNjgA87n9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTRlN2NlMjMtYjYzNC0z N2ZlLWE3NjQtZjg0NTNmZDA0NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLdi2ZMyZD72XLWTL9NZ47yB4p31u5TQA5I5D3dMTW4pPN5Uu5E M5EsgQfcRxY441+GVO4pJN+HfIavVzpygjaqkXi9MidG+/3MObJdM2sLncEtRTNz ho+SvVjAFe2rPB+Gb9Wiutmvozu9PVC+BGV/5m3Vlo00m2H5DoqD8nrA3S9U7hzT qBiqIlInE+KOpR7X6lg3gEwI1Dl3w5UEVDdiM2f6ifhgWgF2ERwsX3xTyAXinAh/ UTtnQnl1ArUpL1PnXB0YIUm5yX6lyJpffaH0yKNRC3IVAWDtyndb6Eju6gPkibMB 0yf8vKrclWlbZ85uPKERJv7Ihc7enCgM0nc= -----END CERTIFICATE-----Generated at Sun Apr 27 07:55:32 2025 by rpki-client