$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa File: 2c5c95e4-0541-3987-b7e1-993bb9e37090.roa (raw, json) Hash identifier: oQQ108egn0F8+NOw53+Vz3+JVgsOrEEyQ/569uMa7qE= Subject key identifier: EC:E5:77:3F:BD:1F:EA:75:C9:82:F7:D2:81:98:38:AA:FE:58:58:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3A19194334D73195C050 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:7580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3a:19:19:43:34:d7:31:95:c0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b5138ecf-6266-484e-ba6f-961b486200b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:33:13:9b:0d:e0:a0:55:97:58:fb:b3:b2: d0:37:0b:a3:23:89:bf:d3:3b:17:74:7f:63:96:b9: 9c:b4:6c:b5:c0:01:37:64:89:f0:8d:24:3a:c4:42: 70:4b:86:a9:5b:74:eb:07:97:5f:11:5d:a0:7a:7b: 79:9c:e4:c0:53:f9:f6:f6:89:62:e2:3c:89:24:a7: eb:94:1c:1c:88:6c:99:43:a3:60:97:7b:ad:8b:70: 2a:93:a3:19:6a:7d:0d:3a:12:69:69:32:0b:14:0d: 59:f6:8b:a1:ba:c7:f0:10:d3:35:ee:da:96:d7:f6: 14:93:91:49:50:30:71:af:18:26:f5:56:25:2e:c5: 4f:7c:da:ba:13:08:9f:7a:3c:fc:4f:19:78:f3:5e: 56:97:84:d2:14:e2:a9:89:9d:6f:42:ee:83:c7:1c: 9a:30:10:03:93:d1:ca:cc:d0:72:7e:8d:e2:1d:43: 99:3a:ec:62:ec:66:63:d5:90:d5:c5:8e:a9:29:7d: 25:6f:b6:1a:5c:8e:63:40:a5:28:8e:00:f2:f3:86: 2b:c0:40:6f:9b:25:ac:3d:90:d0:73:2d:b1:a3:f1: b6:f3:50:ad:21:78:b2:3c:6a:55:5f:54:16:08:59: 5c:1a:7d:08:01:2c:14:b4:f5:dc:23:1c:a4:12:03: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:77:3F:BD:1F:EA:75:C9:82:F7:D2:81:98:38:AA:FE:58:58:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5c95e4-0541-3987-b7e1-993bb9e37090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:5b:8d:2d:6e:85:2a:a4:bc:af:70:43:17:79:61:c4:d8: bf:2f:b3:cd:ca:48:01:ec:59:06:4b:4a:f7:64:26:92:35:79: 31:c6:7f:d4:bd:d7:89:ab:1f:90:35:e7:eb:46:4c:7d:ab:66: ec:30:31:df:01:c5:26:f9:d2:36:c7:ec:0a:75:34:b9:89:7a: 5c:b6:61:a4:fd:75:7c:75:24:00:21:9c:68:d9:48:17:32:c2: 0e:1d:90:0f:07:b3:42:af:c3:e0:91:5e:9a:0f:77:d7:3a:9f: 8c:1b:4a:40:87:a3:e9:9a:b6:b8:9f:16:8e:3f:0e:4a:ba:39: 61:95:3d:94:6c:dd:83:d8:36:f4:9d:6f:7a:e1:7d:c7:50:62: 0c:d2:2e:08:8e:f3:08:c1:d0:f4:9c:4f:32:93:35:40:74:e6: 2f:a8:3b:95:aa:46:27:9c:3a:eb:86:55:bd:49:98:2a:81:11: ed:a5:8d:8c:55:e2:82:90:59:3e:01:4d:5a:e9:ec:65:42:97: 33:42:a9:93:fe:5d:6d:b5:65:1e:15:00:3d:c1:48:6f:58:e4: 81:99:08:00:0f:b1:1e:38:d5:d8:50:a1:0f:85:dd:4f:bf:3b: 56:d1:8c:2f:dc:b2:09:6e:cd:ed:34:7c:ea:e2:1e:9d:43:72: cf:1c:a8:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujoZGUM01zGVwFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjUxMzhlY2YtNjI2Ni00ODRlLWJhNmYtOTYxYjQ4NjIwMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPozE5sN4KBVl1j7s7LQNwujI4m/0zsXdH9j lrmctGy1wAE3ZInwjSQ6xEJwS4apW3TrB5dfEV2gent5nOTAU/n29oli4jyJJKfr lBwciGyZQ6Ngl3uti3Aqk6MZan0NOhJpaTILFA1Z9ouhusfwENM17tqW1/YUk5FJ UDBxrxgm9VYlLsVPfNq6Ewifejz8Txl4815Wl4TSFOKpiZ1vQu6DxxyaMBADk9HK zNByfo3iHUOZOuxi7GZj1ZDVxY6pKX0lb7YaXI5jQKUojgDy84YrwEBvmyWsPZDQ cy2xo/G281CtIXiyPGpVX1QWCFlcGn0IASwUtPXcIxykEgMdFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzldz+9H+p1yYL30oGYOKr+WFgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmM1Yzk1ZTQtMDU0MS0z OTg3LWI3ZTEtOTkzYmI5ZTM3MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpQW40tboUqpLyvcEMXeWHE2L8vs83KSAHsWQZLSvdkJpI1eTHG f9S914mrH5A15+tGTH2rZuwwMd8BxSb50jbH7Ap1NLmJely2YaT9dXx1JAAhnGjZ SBcywg4dkA8Hs0Kvw+CRXpoPd9c6n4wbSkCHo+matrifFo4/Dkq6OWGVPZRs3YPY NvSdb3rhfcdQYgzSLgiO8wjB0PScTzKTNUB05i+oO5WqRiecOuuGVb1JmCqBEe2l jYxV4oKQWT4BTVrp7GVClzNCqZP+XW21ZR4VAD3BSG9Y5IGZCAAPsR441dhQoQ+F 3U+/O1bRjC/csgluze00fOriHp1Dcs8cqPI= -----END CERTIFICATE-----Generated at Mon Apr 28 08:30:18 2025 by rpki-client