$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa File: 25408213-8be9-3550-85f7-0518ad056289.roa (raw, json) Hash identifier: cHpRMc5+kBvnRFSytqSXPT7+bWF3IuDkM9RSqDxLlKs= Subject key identifier: 85:EA:DF:1E:AF:08:25:3C:25:E2:90:47:AE:97:7F:C8:25:5E:2C:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849134FB8BDDD418DD0CDAE8480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa Signing time: Tue 04 Mar 2025 10:54:49 +0000 ROA not before: Tue 04 Mar 2025 10:54:49 +0000 ROA not after: Mon 02 Jun 2025 09:54:49 +0000 asID: 30036 IP address blocks: 2604:2d81::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:4f:b8:bd:dd:41:8d:d0:cd:ae:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 4 10:54:49 2025 GMT Not After : Jun 2 09:54:49 2025 GMT Subject: CN=b90c56ae-c0e8-4cbc-8a88-ea2caadb1e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:2a:15:53:bd:69:68:8f:50:bd:81:14:b0: 8c:52:d8:33:a7:b7:48:b0:03:65:bf:7b:e3:be:04: 8c:ff:c7:0e:67:d9:3a:ac:34:74:a0:f9:4e:f7:30: 55:ac:5c:a6:b7:17:36:db:ea:4a:27:0d:c4:8e:77: bc:b9:94:3a:b9:28:db:59:ad:1b:71:aa:ad:8b:84: 94:b1:42:71:41:06:b8:b3:2b:eb:9a:97:9a:c8:e4: dd:63:87:e0:06:a8:b7:8a:33:b8:41:0c:08:d4:04: ea:06:6a:f4:f3:f9:ce:76:e9:b9:4e:15:54:21:a1: 0d:92:bc:c0:7a:54:17:dd:7e:45:8f:45:aa:aa:24: 59:7a:31:c3:f3:ce:49:17:c0:56:26:51:2f:45:34: 3e:3c:9a:4d:0a:97:03:96:e6:c2:24:51:ea:b0:5d: 97:54:04:d3:e7:fe:a8:65:f4:13:8d:d5:a8:9b:91: 0e:7e:68:0a:aa:c4:c2:cd:5a:75:d0:e0:17:00:66: 43:ca:93:41:61:c4:fb:aa:ed:23:ec:c5:e3:b1:f4: df:e2:c3:70:70:97:d1:a7:96:55:4b:15:20:32:61: 16:8d:7a:17:b0:76:e1:ca:fe:7a:c2:d7:ee:4b:98: b7:2d:f7:ef:b8:ad:10:0d:6f:b9:3e:a7:26:1b:18: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:DF:1E:AF:08:25:3C:25:E2:90:47:AE:97:7F:C8:25:5E:2C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:38:5a:44:4b:5d:8f:72:36:73:d8:09:fc:cb:b6:04:31:fb: b4:8a:88:e9:18:10:6f:09:26:6e:f8:2f:98:43:cd:b1:6d:de: b9:c9:79:69:c9:ac:e8:16:c7:45:a1:71:05:f8:e7:4e:97:bd: f9:5a:14:9f:ac:46:63:08:51:22:c4:42:43:12:21:25:fa:06: 04:2c:71:de:28:85:f8:3b:f9:ce:75:2b:54:85:45:b9:a3:e5: 7c:b8:be:81:50:ae:b6:bc:44:3a:a7:e0:90:7e:12:89:0c:70: f2:bf:fb:c2:d7:81:f8:a8:30:8a:b1:a2:ad:e4:e7:21:f3:ba: f1:4e:df:20:a6:1f:c2:c3:ad:5d:ac:77:41:c8:9b:d9:9e:e8: c3:92:3c:57:ec:1f:b8:b1:ab:63:1b:89:f6:7f:3f:8c:94:3a: bc:56:be:7a:07:38:7f:cd:d0:f3:af:0a:ff:e9:e8:2c:2b:1c: 5c:bc:9c:e1:75:a4:33:e1:d0:e3:4a:18:99:1e:4f:a9:87:71: 9f:b7:fe:97:55:2f:1d:29:15:4d:fa:e7:98:0d:d5:eb:13:f9: 76:87:db:9e:3a:ee:e7:ea:e7:3a:e5:19:25:3b:98:b5:e7:31: 1a:d0:03:31:f7:2a:0e:77:60:6f:48:69:aa:4e:89:b8:2c:81: e4:80:95:da -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT7i93UGN0M2uhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMwNDEwNTQ0OVoXDTI1MDYwMjA5NTQ0OVowLzEtMCsGA1UEAxMk YjkwYzU2YWUtYzBlOC00Y2JjLThhODgtZWEyY2FhZGIxZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglgqFVO9aWiPUL2BFLCMUtgzp7dIsANlv3vj vgSM/8cOZ9k6rDR0oPlO9zBVrFymtxc22+pKJw3Ejne8uZQ6uSjbWa0bcaqti4SU sUJxQQa4syvrmpeayOTdY4fgBqi3ijO4QQwI1ATqBmr08/nOdum5ThVUIaENkrzA elQX3X5Fj0WqqiRZejHD885JF8BWJlEvRTQ+PJpNCpcDlubCJFHqsF2XVATT5/6o ZfQTjdWom5EOfmgKqsTCzVp10OAXAGZDypNBYcT7qu0j7MXjsfTf4sNwcJfRp5ZV SxUgMmEWjXoXsHbhyv56wtfuS5i3LffvuK0QDW+5PqcmGxhJfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIXq3x6vCCU8JeKQR66Xf8glXiytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjU0MDgyMTMtOGJlOS0z NTUwLTg1ZjctMDUxOGFkMDU2Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQThaREtdj3I2c9gJ/Mu2BDH7tIqI6RgQbwkmbvgvmEPNsW3eucl5 acms6BbHRaFxBfjnTpe9+VoUn6xGYwhRIsRCQxIhJfoGBCxx3iiF+Dv5znUrVIVF uaPlfLi+gVCutrxEOqfgkH4SiQxw8r/7wteB+KgwirGireTnIfO68U7fIKYfwsOt Xax3Qcib2Z7ow5I8V+wfuLGrYxuJ9n8/jJQ6vFa+egc4f83Q868K/+noLCscXLyc 4XWkM+HQ40oYmR5PqYdxn7f+l1UvHSkVTfrnmA3V6xP5dofbnjru5+rnOuUZJTuY tecxGtADMfcqDndgb0hpqk6JuCyB5ICV2g== -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:17 2025 by rpki-client