$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa File: 2908e372-28dc-3583-8025-0be1feb02253.roa (raw, json) Hash identifier: WgXQNZ6Dl0jg//SuVkMpDY2QKjKxjjn079vbQ1AAq3k= Subject key identifier: 9D:BC:61:F6:CD:7C:4A:12:05:D5:88:51:BA:CB:98:76:C4:76:54:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF68C62CD86EA01704E580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:e500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:68:c6:2c:d8:6e:a0:17:04:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=cf269f32-abeb-45fc-990c-f8bdc7933da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:50:3e:4a:bc:b6:6d:24:6c:1b:be:e4:42: 6c:c7:a4:42:8b:e3:ef:55:2b:0c:85:de:57:6b:08: a0:32:da:e8:51:1e:24:f3:69:96:6a:66:c7:41:a2: d4:43:39:ae:c3:75:ef:3c:34:53:5d:82:53:b7:70: 43:56:39:62:3d:a1:aa:75:36:56:f7:d4:5c:fd:07: c5:a1:e8:6e:7d:d7:bf:6b:eb:ed:4e:b7:d7:45:f0: 16:52:4b:18:a1:d3:77:af:93:ca:27:6b:c1:da:53: 35:0f:56:38:af:af:fb:e0:d9:66:b2:d4:2e:3f:99: 98:af:f8:25:88:72:ed:41:b1:93:ad:c9:b3:a5:3d: 63:a2:c5:27:02:90:90:0d:ed:6a:e6:6d:e5:18:eb: c7:20:9f:b1:50:58:2e:a2:ec:b6:da:99:1c:94:ee: 5a:ac:e3:f5:ae:12:96:78:c6:1f:99:b5:01:74:fc: da:0a:2c:46:81:d9:09:14:63:08:9a:d2:70:06:d8: 88:5a:a8:4c:18:d0:e5:23:17:c6:36:77:4f:cf:95: 3a:69:df:58:53:af:08:7a:7e:ca:45:b9:00:da:8d: 8c:cd:d9:a0:2f:31:ae:8e:50:1a:6b:f9:e0:27:22: 4a:85:d0:9e:4f:16:c0:7a:68:7e:60:94:db:1a:e6: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:61:F6:CD:7C:4A:12:05:D5:88:51:BA:CB:98:76:C4:76:54:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2908e372-28dc-3583-8025-0be1feb02253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:e500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7f:7b:a0:10:80:ab:41:74:54:ee:02:98:df:64:34:df:25: 77:62:79:0d:17:1e:b0:3c:bd:cb:54:63:76:60:26:4f:aa:70: 97:e0:78:9a:a5:d3:94:0e:18:13:76:25:78:af:f6:72:41:44: 7f:00:ba:a0:a9:ef:51:eb:4b:6b:f4:e6:06:0a:f4:37:5c:b3: 4f:08:66:d0:b8:9a:71:44:d7:70:d4:1c:f6:9a:0d:03:2d:e3: 19:fc:3d:e5:78:d3:4a:a1:8b:ab:b0:75:ea:56:c2:b7:fd:fa: a9:85:de:58:5d:fe:e0:36:ad:f0:aa:ae:9a:fb:8c:d5:b0:54: e0:04:81:8d:db:57:b7:24:e3:89:92:fc:b2:b3:da:92:02:e9: 5a:fd:ad:40:99:67:a8:71:c5:fc:e0:2c:8d:e9:3d:7e:76:b5: fd:fa:a8:b1:b2:8f:04:f3:84:be:52:94:6d:2f:1f:e2:a8:1f: 00:c8:31:9f:55:01:e0:0d:1a:b3:c0:ac:74:f2:e5:d6:8c:f5: 0f:a3:e9:22:c4:19:d6:d1:9f:6f:ee:f9:cd:85:eb:c9:60:6d: c0:5c:2d:80:be:27:3d:e8:c2:fc:0d:0a:81:bc:48:61:da:19: 27:e3:26:0b:c4:8f:49:af:0b:a9:c8:0b:7e:ba:1e:c5:31:ee: ab:dc:b1:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72jGLNhuoBcE5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2YyNjlmMzItYWJlYi00NWZjLTk5MGMtZjhiZGM3OTMzZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPdQPkq8tm0kbBu+5EJsx6RCi+PvVSsMhd5X awigMtroUR4k82mWambHQaLUQzmuw3XvPDRTXYJTt3BDVjliPaGqdTZW99Rc/QfF oehufde/a+vtTrfXRfAWUksYodN3r5PKJ2vB2lM1D1Y4r6/74NlmstQuP5mYr/gl iHLtQbGTrcmzpT1josUnApCQDe1q5m3lGOvHIJ+xUFguouy22pkclO5arOP1rhKW eMYfmbUBdPzaCixGgdkJFGMImtJwBtiIWqhMGNDlIxfGNndPz5U6ad9YU68Ien7K RbkA2o2MzdmgLzGujlAaa/ngJyJKhdCeTxbAemh+YJTbGuYppwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ28YfbNfEoSBdWIUbrLmHbEdlQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjkwOGUzNzItMjhkYy0z NTgzLTgwMjUtMGJlMWZlYjAyMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACp/e6AQgKtBdFTuApjfZDTfJXdieQ0XHrA8vctUY3ZgJk+qcJfg eJql05QOGBN2JXiv9nJBRH8AuqCp71HrS2v05gYK9Ddcs08IZtC4mnFE13DUHPaa DQMt4xn8PeV400qhi6uwdepWwrf9+qmF3lhd/uA2rfCqrpr7jNWwVOAEgY3bV7ck 44mS/LKz2pIC6Vr9rUCZZ6hxxfzgLI3pPX52tf36qLGyjwTzhL5SlG0vH+KoHwDI MZ9VAeANGrPArHTy5daM9Q+j6SLEGdbRn2/u+c2F68lgbcBcLYC+Jz3owvwNCoG8 SGHaGSfjJgvEj0mvC6nIC366HsUx7qvcsZA= -----END CERTIFICATE-----Generated at Sat Apr 26 22:49:56 2025 by rpki-client