$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c2190fd-6493-312b-b8ab-3f7fdc54e053.roa File: 1c2190fd-6493-312b-b8ab-3f7fdc54e053.roa (raw, json) Hash identifier: bmQIr/7sd+Ee+TFsX6118H56jvfOwK6T9G7/ueQFYaI= Subject key identifier: D0:35:77:51:47:88:BA:3E:57:EA:E3:B7:FA:17:49:FA:7B:8E:F7:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1B79CE00490AC5DB8B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c2190fd-6493-312b-b8ab-3f7fdc54e053.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:8d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:79:ce:00:49:0a:c5:db:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7e1667b3-a656-4e92-9cdd-5db3b9eb6f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:c7:21:4a:20:fa:39:12:ce:8d:00:0a:1c: b0:e3:47:0f:f7:b3:c5:fd:9b:91:46:4d:c5:ac:5b: ff:8c:c3:01:f3:8b:74:ef:27:6c:bd:b7:8f:4f:c8: 22:86:8a:ab:9c:7a:19:ee:08:34:db:3c:6b:8c:b2: 61:a0:1f:51:ce:34:98:ee:25:c1:61:2f:36:43:28: 3e:e5:fa:75:cf:e4:90:bb:c7:a9:91:47:3e:73:1b: 91:7f:00:61:9d:57:69:3b:21:2d:5f:2f:db:41:a3: da:6a:1e:42:13:25:82:7d:2d:e1:81:9d:68:b2:43: ad:a7:34:b4:55:c4:44:1a:03:18:45:01:36:16:78: 23:c9:de:18:a9:b6:c7:cf:70:b2:55:e5:96:80:38: 3f:0a:45:09:90:0f:fd:c2:a2:89:ff:33:19:72:21: fa:1c:50:9e:28:98:ee:31:2e:c6:28:97:d2:dd:3e: df:ca:0f:ef:3d:c6:84:13:9d:03:bd:45:d9:62:8a: 6c:a1:b6:2f:4b:ab:9f:e1:1b:64:b1:ea:6f:55:48: 6e:af:88:0b:ee:83:07:ab:1d:68:6b:c9:f9:c8:ee: d7:7f:a0:97:9b:fa:00:d0:84:65:2f:ee:4b:90:57: 18:08:f1:ba:15:20:d9:de:c9:85:9a:aa:b8:b5:f9: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:77:51:47:88:BA:3E:57:EA:E3:B7:FA:17:49:FA:7B:8E:F7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c2190fd-6493-312b-b8ab-3f7fdc54e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6b:40:4b:62:f8:9a:95:99:66:9b:57:8d:d2:10:00:29:51: 48:76:85:56:09:69:2a:26:ce:31:1a:5f:f1:15:65:56:54:2d: 53:a6:d7:8d:5f:1e:51:94:8d:96:86:13:a1:c0:af:a9:4b:bd: 69:b9:40:73:19:8a:26:34:c5:c7:b0:10:cf:1c:8f:b2:8c:71: de:30:88:b9:ae:aa:01:cb:59:c0:75:7b:d1:ed:22:fe:ea:03: 23:af:cc:c5:7f:b8:ab:f9:15:85:42:bf:02:fa:91:03:dc:e4: 02:3c:01:cc:f8:c4:6d:0d:a1:c8:42:c9:e7:94:b2:cf:ee:5e: 32:f6:19:1a:ec:55:cb:5b:04:1e:37:d6:ab:f0:65:12:c1:b3: 46:54:7c:91:19:b7:d0:2b:e1:e1:8b:9c:7d:f3:ad:b3:ee:7b: bf:5d:19:8e:f6:37:0a:38:c3:cc:df:9d:4c:b8:fe:a4:ee:08: b0:7a:0c:96:bd:95:c3:62:f1:68:ab:8d:b0:f1:02:07:b7:fc: db:7d:7b:f7:d1:73:26:bf:c9:76:9a:47:10:45:cd:e7:3b:f9: 88:72:54:56:d6:32:25:7d:35:39:e0:38:70:f7:56:ce:aa:03: f2:b4:ad:e0:c2:f9:b6:9e:29:dc:53:82:56:c6:09:36:5a:71: 2b:02:1c:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuht5zgBJCsXbi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2UxNjY3YjMtYTY1Ni00ZTkyLTljZGQtNWRiM2I5ZWI2ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMPHIUog+jkSzo0AChyw40cP97PF/ZuRRk3F rFv/jMMB84t07ydsvbePT8gihoqrnHoZ7gg02zxrjLJhoB9RzjSY7iXBYS82Qyg+ 5fp1z+SQu8epkUc+cxuRfwBhnVdpOyEtXy/bQaPaah5CEyWCfS3hgZ1oskOtpzS0 VcREGgMYRQE2Fngjyd4YqbbHz3CyVeWWgDg/CkUJkA/9wqKJ/zMZciH6HFCeKJju MS7GKJfS3T7fyg/vPcaEE50DvUXZYopsobYvS6uf4RtksepvVUhur4gL7oMHqx1o a8n5yO7Xf6CXm/oA0IRlL+5LkFcYCPG6FSDZ3smFmqq4tfn6/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNA1d1FHiLo+V+rjt/oXSfp7jvdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWMyMTkwZmQtNjQ5My0z MTJiLWI4YWItM2Y3ZmRjNTRlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBrQEti+JqVmWabV43SEAApUUh2hVYJaSomzjEaX/EVZVZULVOm 141fHlGUjZaGE6HAr6lLvWm5QHMZiiY0xcewEM8cj7KMcd4wiLmuqgHLWcB1e9Ht Iv7qAyOvzMV/uKv5FYVCvwL6kQPc5AI8Acz4xG0NochCyeeUss/uXjL2GRrsVctb BB431qvwZRLBs0ZUfJEZt9Ar4eGLnH3zrbPue79dGY72Nwo4w8zfnUy4/qTuCLB6 DJa9lcNi8WirjbDxAge3/Nt9e/fRcya/yXaaRxBFzec7+YhyVFbWMiV9NTngOHD3 Vs6qA/K0reDC+baeKdxTglbGCTZacSsCHOE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:34:56 2025 by rpki-client