$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa File: 1cb2e1d6-44b8-325d-9057-3618672be5a1.roa (raw, json) Hash identifier: ryU0m4fBSE3iZqBhphkZdCPv0ZngSrFwHJQeS+2CIbs= Subject key identifier: 57:07:F8:D2:4E:2C:12:5F:4E:C0:99:BC:C1:2C:2A:17:56:1A:F6:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3AF7F18F5E98BC884100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:e100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3a:f7:f1:8f:5e:98:bc:88:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4a72ef73-10a5-4b0e-bbb3-2a3ec9c69ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:79:2a:0f:0d:31:07:e9:bb:0b:c4:19:52: 69:14:8d:cc:ca:5c:24:19:7c:29:aa:0a:d7:7a:86: 4b:10:a7:10:26:15:f9:9a:8d:91:fc:dd:2a:12:12: 4f:13:ca:2d:7f:b5:0a:97:a7:7c:cc:db:26:55:b9: a6:d5:41:9e:73:cd:fa:65:eb:7c:ab:2c:d5:2c:94: 38:d3:f2:ef:c8:eb:48:a8:55:22:6e:cc:45:0e:8f: ce:51:6e:08:d3:ad:30:9a:7c:3c:ed:41:42:b9:88: 9c:c5:3a:db:04:a9:ee:90:10:b1:7a:62:a1:25:56: bd:ec:03:ad:72:02:31:4d:e1:ea:7a:f4:ba:5c:70: f2:82:e4:64:a2:98:1a:e0:c9:3f:c2:33:cc:2a:09: 51:34:dd:c1:87:56:36:7d:67:79:df:7d:ab:eb:f9: 61:12:c8:c7:5c:23:19:14:f2:a3:b7:83:63:a9:34: f6:e5:12:06:86:1f:d5:77:ab:11:8f:c1:5c:cc:5c: 25:1a:4f:83:1d:60:bb:80:70:a1:1f:f3:b3:51:92: 42:cf:67:f0:0a:c1:d7:31:d9:fa:5e:8a:ab:fe:1a: 7a:36:fb:e3:0a:13:c1:c4:47:26:0e:32:94:e8:4d: 74:4a:5d:6b:0b:0c:ba:3b:8e:ab:63:c7:5a:66:3b: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:F8:D2:4E:2C:12:5F:4E:C0:99:BC:C1:2C:2A:17:56:1A:F6:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cb2e1d6-44b8-325d-9057-3618672be5a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:57:73:ae:50:5f:14:8e:7f:29:e8:c4:06:da:d6:57:47:96: d4:82:57:f5:00:bf:b5:31:5b:19:77:c5:be:ca:46:6d:f4:70: b0:4e:c1:90:26:45:61:c1:6e:f4:d8:37:21:57:0a:a5:bc:a1: 0d:64:9e:e6:6b:7b:ce:52:59:7b:68:dc:e9:02:48:ad:a8:72: 6c:5b:f6:6a:f9:d7:e9:67:a9:6d:2c:9a:f6:13:6c:be:e8:a7: 1d:b0:df:a4:d8:5f:22:48:3b:b5:11:58:69:95:a9:4e:a3:74: 83:71:e5:69:32:6b:aa:58:48:9c:35:46:f9:e3:e6:44:26:b5: e1:e1:24:97:c3:6d:02:0a:1b:1c:ba:0a:a7:32:28:4e:d5:4e: 7c:a2:52:ef:fc:68:11:d1:14:42:7e:80:09:cc:6f:b6:4e:04: ac:56:ad:f6:a5:42:5b:37:e0:fc:5a:11:c9:e6:ab:7c:e6:fd: b0:37:49:f1:6a:7f:50:ab:ba:98:41:57:0f:d2:47:63:8f:83: b1:c2:99:70:93:fc:3f:f8:68:65:32:42:6f:31:a2:95:87:fc: ad:8f:ae:e5:df:d9:3f:b6:c8:25:cf:cc:50:3d:87:69:9a:73: a2:e5:6c:3c:77:54:9a:b2:3e:9c:89:6f:31:66:4a:97:91:2b: 20:e9:8d:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujr38Y9emLyIQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGE3MmVmNzMtMTBhNS00YjBlLWJiYjMtMmEzZWM5YzY5YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhV5Kg8NMQfpuwvEGVJpFI3MylwkGXwpqgrX eoZLEKcQJhX5mo2R/N0qEhJPE8otf7UKl6d8zNsmVbmm1UGec836Zet8qyzVLJQ4 0/LvyOtIqFUibsxFDo/OUW4I060wmnw87UFCuYicxTrbBKnukBCxemKhJVa97AOt cgIxTeHqevS6XHDyguRkopga4Mk/wjPMKglRNN3Bh1Y2fWd5332r6/lhEsjHXCMZ FPKjt4NjqTT25RIGhh/Vd6sRj8FczFwlGk+DHWC7gHChH/OzUZJCz2fwCsHXMdn6 Xoqr/hp6NvvjChPBxEcmDjKU6E10Sl1rCwy6O46rY8daZju+gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFcH+NJOLBJfTsCZvMEsKhdWGvZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNiMmUxZDYtNDRiOC0z MjVkLTkwNTctMzYxODY3MmJlNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlXc65QXxSOfynoxAba1ldHltSCV/UAv7UxWxl3xb7KRm30cLBO wZAmRWHBbvTYNyFXCqW8oQ1knuZre85SWXto3OkCSK2ocmxb9mr51+lnqW0smvYT bL7opx2w36TYXyJIO7URWGmVqU6jdINx5Wkya6pYSJw1Rvnj5kQmteHhJJfDbQIK Gxy6CqcyKE7VTnyiUu/8aBHRFEJ+gAnMb7ZOBKxWrfalQls34PxaEcnmq3zm/bA3 SfFqf1CruphBVw/SR2OPg7HCmXCT/D/4aGUyQm8xopWH/K2PruXf2T+2yCXPzFA9 h2mac6LlbDx3VJqyPpyJbzFmSpeRKyDpja0= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:35 2025 by rpki-client