$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa File: 28b24b22-bb78-33fd-9149-0b9f56384bf3.roa (raw, json) Hash identifier: kgiIIHFKYUFuaPMwwqMOit1soO8qKufErHL4chjCtCA= Subject key identifier: B0:A5:39:4A:F4:97:EA:4E:7D:66:79:BD:91:0D:CB:CB:46:55:F0:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49E675826027476BD1F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:5300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9e:67:58:26:02:74:76:bd:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=68b8b816-6bb3-42a6-a0eb-10dba799412d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:f5:70:c8:ee:0f:0c:25:00:6d:a1:e9:d3: 3d:ab:29:29:4f:7e:7d:2d:e9:ec:35:66:00:a4:4c: 28:3e:53:65:13:73:04:66:58:22:14:c6:3a:b8:a4: 1d:6c:3d:de:dd:97:a4:2c:41:72:68:8a:71:04:b3: 15:3f:26:62:93:be:8f:27:73:b8:81:bb:2f:97:6d: 62:47:f3:4a:b7:0f:7f:40:ff:5c:76:0b:6f:80:86: 90:b9:b2:a2:e5:1c:c6:57:82:a0:96:a7:fd:46:69: 72:e8:6c:4b:27:60:d3:b8:53:f8:ee:9a:84:ab:d7: a7:a2:09:77:e6:a2:29:99:81:3e:f9:68:bc:8e:8e: 5f:f2:0d:a2:5a:f2:1e:9a:89:32:98:3c:25:4a:36: c5:31:0d:1a:f0:18:a3:07:7a:ac:68:e0:25:bc:1f: e1:8a:9e:06:06:29:a7:82:e7:64:2d:c6:0f:4a:f9: 5d:42:7a:28:c4:ee:4d:0c:af:8c:3f:6b:ee:b8:b3: e5:24:e6:c2:d6:e7:b8:99:e7:74:c3:c5:87:c7:02: 5e:31:8f:4f:25:34:14:b0:5f:7e:19:49:3d:d8:67: e1:ce:dd:6e:16:7c:bb:43:d4:82:71:55:92:bd:c2: ef:42:d7:70:c4:c8:7c:75:e8:62:67:b8:88:92:74: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:39:4A:F4:97:EA:4E:7D:66:79:BD:91:0D:CB:CB:46:55:F0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8a:fb:4d:05:db:dc:7f:a4:fb:a0:a1:9d:20:28:a1:f5:a4: 31:9e:05:40:b4:92:32:98:25:55:dc:ae:ad:cc:cd:1d:3d:13: 49:12:79:0a:62:53:0f:4f:d7:a9:ea:34:b8:5a:95:b1:d9:bf: 9f:4d:28:50:b2:06:0d:b4:3d:1c:2b:ef:d6:79:df:4c:cf:54: 22:ab:11:78:b9:85:4b:70:a7:0c:92:1d:72:1c:99:a8:29:ce: 07:00:54:d1:7c:89:22:aa:da:06:5e:5f:d5:78:fb:bf:e2:f2: 54:81:b7:d7:c6:88:79:ff:b7:1e:c6:e7:a5:04:56:38:52:ca: 5c:4f:5c:3d:74:c9:3e:12:de:14:7f:aa:c6:8e:0d:ff:e8:85: df:2b:22:a4:c5:b6:38:11:4f:61:1d:0c:81:c1:3e:d7:db:c7: 88:60:d7:31:d8:b2:74:5a:a2:09:09:a6:15:ca:9d:64:fb:67: e6:ed:a5:7d:b0:15:fa:75:fa:26:ef:5d:b9:1f:d7:02:9e:bf: 12:f4:f8:1b:04:99:82:aa:c6:d3:12:41:c4:16:87:72:eb:b9: fb:49:ee:69:c6:ed:66:fc:af:57:5f:05:07:41:d9:e3:19:85: 18:7b:16:73:81:94:7a:5a:d3:29:f0:e9:66:e9:21:00:31:7b: 8f:24:e4:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJ5nWCYCdHa9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NjhiOGI4MTYtNmJiMy00MmE2LWEwZWItMTBkYmE3OTk0MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowr1cMjuDwwlAG2h6dM9qykpT359LensNWYA pEwoPlNlE3MEZlgiFMY6uKQdbD3e3ZekLEFyaIpxBLMVPyZik76PJ3O4gbsvl21i R/NKtw9/QP9cdgtvgIaQubKi5RzGV4Kglqf9Rmly6GxLJ2DTuFP47pqEq9enogl3 5qIpmYE++Wi8jo5f8g2iWvIemokymDwlSjbFMQ0a8BijB3qsaOAlvB/hip4GBimn gudkLcYPSvldQnooxO5NDK+MP2vuuLPlJObC1ue4med0w8WHxwJeMY9PJTQUsF9+ GUk92Gfhzt1uFny7Q9SCcVWSvcLvQtdwxMh8dehiZ7iIknTt0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLClOUr0l+pOfWZ5vZENy8tGVfCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhiMjRiMjItYmI3OC0z M2ZkLTkxNDktMGI5ZjU2Mzg0YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAmK+00F29x/pPugoZ0gKKH1pDGeBUC0kjKYJVXcrq3MzR09E0kS eQpiUw9P16nqNLhalbHZv59NKFCyBg20PRwr79Z530zPVCKrEXi5hUtwpwySHXIc magpzgcAVNF8iSKq2gZeX9V4+7/i8lSBt9fGiHn/tx7G56UEVjhSylxPXD10yT4S 3hR/qsaODf/ohd8rIqTFtjgRT2EdDIHBPtfbx4hg1zHYsnRaogkJphXKnWT7Z+bt pX2wFfp1+ibvXbkf1wKevxL0+BsEmYKqxtMSQcQWh3LruftJ7mnG7Wb8r1dfBQdB 2eMZhRh7FnOBlHpa0ynw6WbpIQAxe48k5KU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:12 2025 by rpki-client