$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa File: 17220f79-ee23-3621-9d33-5f8f811b909a.roa (raw, json) Hash identifier: 0xQnHE4OgqTpCFNuK9rOsR4z2qYOnlHGtsFJYyWmNzI= Subject key identifier: 84:95:52:A9:48:56:33:C6:C0:B0:2F:B9:79:4D:59:E9:A3:67:BE:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF66E21305AC847013AC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:7200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:66:e2:13:05:ac:84:70:13:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=22e843d8-feb8-4ef4-bb4c-7d4e9e8f8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:d6:93:96:a6:69:b1:cd:14:6a:2f:63:53: 51:48:58:a1:17:a8:b6:26:4b:b9:bd:51:a5:ac:fc: 55:e1:19:70:d8:1c:b2:88:bb:8a:30:6c:61:b8:05: 59:07:58:b4:cb:4f:63:5a:87:f7:2f:f8:76:81:5d: dc:04:2d:28:56:bc:ed:49:27:19:61:10:90:30:b0: 45:b7:78:eb:88:f7:e7:3c:6a:9f:cf:ba:d0:38:c6: e2:dc:95:93:de:ee:18:ad:bd:e8:12:a6:ca:07:b3: 14:3e:e5:d5:5f:d4:7e:d3:ad:a6:b1:c8:d5:5c:b4: 94:7f:c6:04:36:40:7f:f9:29:88:1f:03:48:e0:18: de:7e:7c:43:b9:d6:cd:58:b9:2c:29:1d:fa:6c:7e: dd:67:cc:83:82:bf:bc:d2:82:a8:0e:5c:4c:7e:10: 53:b9:f0:6e:10:d1:0c:0b:e1:cf:53:91:5a:68:05: 6a:c3:f0:ae:a8:b3:a5:5a:a9:1a:70:53:ce:f5:ae: 9f:aa:77:62:9e:a3:4a:7b:2c:bb:f1:14:5c:ff:24: 22:b6:eb:bc:14:6f:80:45:10:dd:0e:e9:b7:37:4b: 0c:5e:b7:32:95:f9:1a:7a:71:5b:97:b8:30:41:fa: 0b:35:d6:cb:cd:1a:f6:3d:74:8c:e8:55:e0:fb:c6: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:52:A9:48:56:33:C6:C0:B0:2F:B9:79:4D:59:E9:A3:67:BE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17220f79-ee23-3621-9d33-5f8f811b909a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:11:23:d2:72:83:73:20:69:55:9e:1f:8e:3f:b1:eb:e2:0d: cf:32:93:53:15:ed:17:3e:6a:1f:80:9f:1d:e5:c5:59:3d:82: e8:d8:4b:2a:4d:cc:fb:d4:b2:45:cf:4c:4d:e4:7d:75:e2:d9: 07:fe:32:79:ca:3c:a1:d2:de:ab:64:b2:11:1f:5f:08:bd:38: b3:c3:3a:e3:73:4a:cf:f0:88:94:a2:c2:09:26:61:d3:81:e2: 26:05:db:5e:fa:5a:fd:bb:cb:3f:4d:80:25:ca:f4:08:d6:1f: c9:c7:e0:be:10:56:5e:53:ab:98:a2:c6:b2:26:5f:ae:d9:d5: 8a:87:4b:69:63:a7:6d:fb:6b:7e:c1:01:cc:65:52:2a:ef:2b: 45:16:de:66:3d:d2:68:e2:6d:1b:f2:e8:83:52:47:0e:26:48: f6:5c:ba:66:26:a0:fb:2a:f9:ea:77:27:1e:58:8a:21:37:82: 01:90:8f:00:be:d6:19:2f:65:06:ec:c7:c7:cc:c1:b8:78:07: 34:7e:e7:e6:f3:44:cb:2d:62:e9:47:c9:cf:e2:6b:8d:d9:75: 64:a6:81:07:b6:62:bb:07:05:a0:48:ef:6c:d7:ac:5b:5e:12: 62:a2:64:a6:5a:c3:da:15:19:a8:26:6b:64:7b:27:b2:5f:3b: 69:e4:39:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72biEwWshHATrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MjJlODQzZDgtZmViOC00ZWY0LWJiNGMtN2Q0ZTllOGY4ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0DWk5amabHNFGovY1NRSFihF6i2Jku5vVGl rPxV4Rlw2ByyiLuKMGxhuAVZB1i0y09jWof3L/h2gV3cBC0oVrztSScZYRCQMLBF t3jriPfnPGqfz7rQOMbi3JWT3u4Yrb3oEqbKB7MUPuXVX9R+062mscjVXLSUf8YE NkB/+SmIHwNI4BjefnxDudbNWLksKR36bH7dZ8yDgr+80oKoDlxMfhBTufBuENEM C+HPU5FaaAVqw/CuqLOlWqkacFPO9a6fqndinqNKeyy78RRc/yQituu8FG+ARRDd Dum3N0sMXrcylfkaenFbl7gwQfoLNdbLzRr2PXSM6FXg+8bjOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISVUqlIVjPGwLAvuXlNWemjZ74kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTcyMjBmNzktZWUyMy0z NjIxLTlkMzMtNWY4ZjgxMWI5MDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIRI9Jyg3MgaVWeH44/seviDc8yk1MV7Rc+ah+Anx3lxVk9gujY SypNzPvUskXPTE3kfXXi2Qf+MnnKPKHS3qtkshEfXwi9OLPDOuNzSs/wiJSiwgkm YdOB4iYF2176Wv27yz9NgCXK9AjWH8nH4L4QVl5Tq5iixrImX67Z1YqHS2ljp237 a37BAcxlUirvK0UW3mY90mjibRvy6INSRw4mSPZcumYmoPsq+ep3Jx5YiiE3ggGQ jwC+1hkvZQbsx8fMwbh4BzR+5+bzRMstYulHyc/ia43ZdWSmgQe2YrsHBaBI72zX rFteEmKiZKZaw9oVGagma2R7J7JfO2nkOX4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:00 2025 by rpki-client