$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/163c79ed-11b1-345d-bc7b-8d893891dc95.roa File: 163c79ed-11b1-345d-bc7b-8d893891dc95.roa (raw, json) Hash identifier: uCYfAFk/Cne0nJVLdLP9lfoWdiuKsv+Kh2Yg+rwXObE= Subject key identifier: C9:45:A2:6E:7E:B5:F7:D1:07:3B:45:41:A6:20:1B:88:E2:15:A4:F4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BB7EA2FAA4DE1B0BFD9160 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/163c79ed-11b1-345d-bc7b-8d893891dc95.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:dc00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7e:a2:fa:a4:de:1b:0b:fd:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=55cf69d5-b952-45f6-88b9-e7d458156217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:0e:05:ba:d2:99:d9:53:6e:2a:87:97:83: b2:34:0e:58:54:80:0a:df:ad:ae:5d:91:01:ba:fd: d5:9a:c2:63:24:3b:82:c1:6f:f2:ce:ab:22:8e:f1: 67:d3:5c:cc:f7:bf:65:39:9e:33:d0:ca:ef:f6:53: d7:6e:c0:29:68:28:5a:7f:af:cf:ed:b0:06:72:85: 04:77:36:be:39:f9:98:b2:d7:d9:8a:41:4b:5e:3f: d5:e3:4d:9a:be:a6:81:90:7a:2e:8d:8c:e5:32:08: 76:ee:70:41:84:8b:3d:c0:89:90:d4:bc:08:33:ab: 19:e7:c1:b2:a9:ae:12:79:89:96:29:7a:ea:2e:16: 40:99:c5:89:f7:29:4c:54:f5:36:21:98:e2:f8:4c: 43:e1:5d:89:fa:18:50:f9:c0:51:92:26:72:62:32: 36:1b:47:4c:79:ec:74:82:4a:ab:31:25:3f:f3:4d: 26:61:8f:0b:76:27:dd:67:dc:c1:46:d0:7c:a0:48: 01:39:54:11:10:ed:82:b8:2d:91:54:2b:97:41:02: e4:9e:98:18:2c:4e:03:a4:83:e4:cd:d9:af:e0:00: 2b:1e:d0:95:ad:d7:42:89:42:93:fd:4d:1e:9e:40: 00:ff:57:3c:b4:69:fb:ef:55:e6:7e:8a:63:a3:e1: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:45:A2:6E:7E:B5:F7:D1:07:3B:45:41:A6:20:1B:88:E2:15:A4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/163c79ed-11b1-345d-bc7b-8d893891dc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:dc00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:72:a7:98:6b:73:0b:ab:33:75:99:e9:3b:11:47:be:32:7c: f2:f8:02:d6:cc:09:83:bc:48:a4:0f:ff:b5:30:18:88:55:a4: 5e:6f:52:f3:86:7f:17:17:42:f5:40:9d:c5:a2:9b:71:c3:c0: 39:73:af:8f:8a:fa:fe:79:d1:19:50:87:e0:8e:3e:8f:25:2b: d7:2c:cd:b2:0c:08:29:f8:b8:9e:ba:2f:27:af:69:e0:22:35: 77:51:d8:3b:10:a1:1b:30:cb:9d:96:6e:c5:5e:a1:46:07:33: 16:8e:9d:fd:f9:ba:6f:5c:ff:00:e0:68:aa:8f:65:1a:f6:05: aa:d3:2e:ab:8e:45:19:03:eb:1e:0f:83:d5:71:42:11:35:94: 8a:7f:c2:c9:e5:cd:d9:06:48:08:4e:a9:27:01:d5:c3:93:e7: 13:bb:cc:22:b4:f6:5a:27:ab:01:4a:19:a9:93:94:59:28:7a: 2e:2c:ec:22:06:8a:77:d9:b8:d4:65:cd:cd:bc:5f:a2:f5:fa: a0:bd:06:0c:7f:af:27:36:48:cd:88:0b:e4:74:7d:50:a2:db: 28:5e:f4:a3:3b:6b:7f:ac:55:ca:ce:7b:d2:72:a6:78:83:df: 26:74:9f:dd:84:2b:eb:2d:02:b2:1d:f6:53:13:12:f2:fe:7d: 52:38:f0:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku36i+qTeGwv9kWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTVjZjY5ZDUtYjk1Mi00NWY2LTg4YjktZTdkNDU4MTU2MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQcOBbrSmdlTbiqHl4OyNA5YVIAK362uXZEB uv3VmsJjJDuCwW/yzqsijvFn01zM979lOZ4z0Mrv9lPXbsApaChaf6/P7bAGcoUE dza+OfmYstfZikFLXj/V402avqaBkHoujYzlMgh27nBBhIs9wImQ1LwIM6sZ58Gy qa4SeYmWKXrqLhZAmcWJ9ylMVPU2IZji+ExD4V2J+hhQ+cBRkiZyYjI2G0dMeex0 gkqrMSU/800mYY8LdifdZ9zBRtB8oEgBOVQREO2CuC2RVCuXQQLknpgYLE4DpIPk zdmv4AArHtCVrddCiUKT/U0enkAA/1c8tGn771Xmfopjo+FUbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMlFom5+tffRBztFQaYgG4jiFaT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTYzYzc5ZWQtMTFiMS0z NDVkLWJjN2ItOGQ4OTM4OTFkYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFyp5hrcwurM3WZ6TsRR74yfPL4AtbMCYO8SKQP/7UwGIhVpF5v UvOGfxcXQvVAncWim3HDwDlzr4+K+v550RlQh+COPo8lK9cszbIMCCn4uJ66Lyev aeAiNXdR2DsQoRswy52WbsVeoUYHMxaOnf35um9c/wDgaKqPZRr2BarTLquORRkD 6x4Pg9VxQhE1lIp/wsnlzdkGSAhOqScB1cOT5xO7zCK09lonqwFKGamTlFkoei4s 7CIGinfZuNRlzc28X6L1+qC9Bgx/ryc2SM2IC+R0fVCi2yhe9KM7a3+sVcrOe9Jy pniD3yZ0n92EK+stArId9lMTEvL+fVI48CY= -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:22 2025 by rpki-client