$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa File: 223e52b0-13c4-348e-85a8-6b0ee28e3102.roa (raw, json) Hash identifier: azCN5vbMiqowjVxCBmV6SKP+zrMKr6ukGdQeHjLrHtk= Subject key identifier: 6A:9D:E1:EF:D0:9D:52:16:E3:B6:5B:A9:85:2B:1B:82:9F:C5:D1:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF67E8FA05168C89C0AFA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:d680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:67:e8:fa:05:16:8c:89:c0:af:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=57fe633a-0089-43a4-8d33-6862549a4c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:2e:8e:0e:33:94:25:de:0c:95:7d:7e:aa: 79:6e:c1:05:f6:87:f0:fc:ec:e7:47:01:d9:4d:68: fe:f5:1d:a1:3c:92:de:62:1d:21:37:ea:fd:3c:5c: 2e:e0:7b:60:7d:61:21:12:2a:fb:2a:af:a3:ee:e2: b0:4d:89:9b:a9:63:38:c3:ac:8b:71:ec:cd:d7:38: d2:e2:bc:38:6f:96:85:94:36:c0:39:a3:8e:56:5b: a6:c5:bd:df:33:08:9e:00:6f:d0:4f:24:21:46:8e: 28:cf:de:5c:9f:76:81:8f:1d:b1:0a:72:94:a0:e2: 87:55:33:2f:66:4a:e4:7d:f0:58:d9:d6:2f:b4:e2: 00:f1:cf:a1:71:af:d1:60:6a:13:2a:d0:52:30:0d: 0b:1d:46:ed:c5:23:4f:89:f3:2c:ba:82:de:ca:44: 5c:4e:15:19:5c:97:54:0d:48:05:fb:c5:f6:9c:e1: cf:79:be:de:59:08:f5:18:33:c5:ab:15:07:3a:96: 50:cf:d6:08:de:8d:b6:59:e6:4d:e2:31:2a:0e:d8: 4c:78:23:a8:f8:a9:69:53:21:22:42:9c:5c:9f:25: c4:1a:57:3a:98:ea:7c:9e:7b:90:a7:b2:8b:dc:d1: fd:99:15:88:93:27:e1:f4:27:26:3b:f1:b7:52:89: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:E1:EF:D0:9D:52:16:E3:B6:5B:A9:85:2B:1B:82:9F:C5:D1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d4:9e:82:a0:28:25:f5:fa:94:ec:a6:4e:f4:b6:4f:50:0e: a5:01:20:61:43:fe:86:2b:cf:f9:0a:e4:71:78:7c:67:9e:60: 8d:0d:9f:20:71:aa:35:cc:a1:dc:8b:be:c8:5d:2a:da:0b:47: 3c:48:d2:b1:31:e1:d9:eb:69:51:5c:2f:1a:4b:7d:f0:09:de: 8a:c7:e2:f0:55:69:7b:ce:0f:43:89:e6:9a:e0:e9:93:f8:19: 73:ed:b7:e4:be:f7:64:b2:16:be:d6:19:9a:c0:fb:0e:c1:bb: 20:01:56:da:1c:9c:00:30:d1:0f:a8:48:0f:22:5d:82:e1:80: 4c:29:54:d2:5b:21:52:20:80:b2:bc:bc:af:11:87:86:a3:29: 3c:99:2b:a2:45:19:19:41:38:8f:44:b3:00:99:c3:e2:fd:3c: 5e:52:8e:9a:93:62:b7:55:64:06:03:53:22:87:c4:16:3e:dc: 7f:fa:b3:36:fd:20:e4:ae:9a:b3:a7:b2:1f:e4:81:33:d8:aa: 83:81:e4:92:db:07:cf:5f:b7:80:00:82:ef:1c:f1:ec:14:12: bd:8e:f4:d5:59:5a:a7:61:35:e0:e5:ef:5a:cc:cc:44:39:94: 92:f2:78:d0:cd:ac:88:8e:74:ae:6f:1a:9c:06:65:b9:50:3e: ed:26:2b:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72fo+gUWjInAr6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NTdmZTYzM2EtMDA4OS00M2E0LThkMzMtNjg2MjU0OWE0YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqYujg4zlCXeDJV9fqp5bsEF9ofw/OznRwHZ TWj+9R2hPJLeYh0hN+r9PFwu4HtgfWEhEir7Kq+j7uKwTYmbqWM4w6yLcezN1zjS 4rw4b5aFlDbAOaOOVlumxb3fMwieAG/QTyQhRo4oz95cn3aBjx2xCnKUoOKHVTMv ZkrkffBY2dYvtOIA8c+hca/RYGoTKtBSMA0LHUbtxSNPifMsuoLeykRcThUZXJdU DUgF+8X2nOHPeb7eWQj1GDPFqxUHOpZQz9YI3o22WeZN4jEqDthMeCOo+KlpUyEi QpxcnyXEGlc6mOp8nnuQp7KL3NH9mRWIkyfh9CcmO/G3UolfXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqd4e/QnVIW47ZbqYUrG4KfxdGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIzZTUyYjAtMTNjNC0z NDhlLTg1YTgtNmIwZWUyOGUzMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXUnoKgKCX1+pTspk70tk9QDqUBIGFD/oYrz/kK5HF4fGeeYI0N nyBxqjXModyLvshdKtoLRzxI0rEx4dnraVFcLxpLffAJ3orH4vBVaXvOD0OJ5prg 6ZP4GXPtt+S+92SyFr7WGZrA+w7BuyABVtocnAAw0Q+oSA8iXYLhgEwpVNJbIVIg gLK8vK8Rh4ajKTyZK6JFGRlBOI9EswCZw+L9PF5SjpqTYrdVZAYDUyKHxBY+3H/6 szb9IOSumrOnsh/kgTPYqoOB5JLbB89ft4AAgu8c8ewUEr2O9NVZWqdhNeDl71rM zEQ5lJLyeNDNrIiOdK5vGpwGZblQPu0mK+Y= -----END CERTIFICATE-----Generated at Sun Apr 27 15:39:00 2025 by rpki-client