$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa File: 2d9e0001-4453-32f7-9672-5f03e81e875f.roa (raw, json) Hash identifier: 2Gf0Cq8Jd+YhqXMXwtSTVgC/P8V/bqUhA7kEngX+/GQ= Subject key identifier: E3:D2:15:96:5A:C7:63:5B:85:F1:73:F3:2E:AD:15:B9:2A:6F:C2:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B5487CD8D191BFBE4280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:2900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b5:48:7c:d8:d1:91:bf:be:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5b9a13be-6de1-47f2-9677-f3f79a147543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:78:34:b0:c5:3e:36:4e:81:bb:81:94:05: a2:9c:e8:79:86:3f:12:0c:88:93:2f:eb:30:ce:58: 25:51:3e:41:bf:f1:40:f6:0d:f1:87:28:8c:78:89: cd:84:82:d7:4d:56:ec:05:5e:90:1e:ea:2e:f8:18: a7:58:12:a4:ac:a4:01:7f:2d:37:55:ed:ca:18:37: b8:66:bd:5c:e5:96:95:89:70:ec:33:10:54:c7:d0: 3f:0d:4d:84:63:ac:fc:d1:23:69:2d:e4:28:12:18: 95:2d:75:ba:45:ee:c9:33:6e:fe:91:53:45:27:be: aa:05:9d:0d:3d:3a:37:8d:fb:e7:c3:23:7b:88:73: 12:05:21:e4:a0:1a:69:9a:7e:90:9f:34:b7:4a:a6: ed:1b:12:d2:e5:0d:b0:0f:ea:4d:94:83:fd:32:40: 44:bd:be:7e:2c:c8:15:12:c8:e1:ab:32:fc:b3:00: e7:b2:07:37:3d:6c:95:ec:28:87:f0:e1:40:75:98: 4d:68:c8:b8:7e:24:9f:27:68:2f:16:f8:27:c0:f8: 14:68:21:b3:f3:2f:32:43:9f:a6:62:8d:22:fc:db: b0:4f:89:2d:0f:33:a7:0e:3e:67:dc:9b:7c:2a:82: 0a:03:15:b0:76:95:ca:f1:79:6b:c9:df:95:97:ff: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:15:96:5A:C7:63:5B:85:F1:73:F3:2E:AD:15:B9:2A:6F:C2:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:21:9d:22:28:d3:52:84:b9:4c:da:26:9e:12:31:50:4b:60: 05:37:c2:f1:f6:c1:7b:c8:99:58:bf:48:f4:8b:02:90:85:74: 50:e0:7b:64:78:1c:cf:63:5c:3c:d5:e0:24:f5:e7:e0:5a:b5: 0d:42:86:8f:16:e7:97:a8:c7:e9:fc:0c:c8:89:5a:ce:ec:e8: a7:ee:9b:3a:e3:10:61:78:ef:fa:d2:2a:a3:50:d6:6e:ab:24: c5:ab:3f:9c:a8:41:e3:11:bf:f5:94:f0:50:7c:b2:db:55:ef: 32:08:74:97:22:bb:4f:4f:4d:29:96:db:c7:72:ae:df:85:a4: d5:d3:0f:be:5b:ad:4f:8b:d0:66:6a:b4:68:15:4b:09:35:d8: 25:c2:19:00:f5:5b:e8:6a:24:81:b3:46:da:c9:1a:b5:1c:21: 24:62:5d:41:d0:71:86:2f:f4:20:79:e4:7c:c9:51:91:63:39: ed:f7:56:e8:47:8c:b6:9e:4b:71:9b:b7:1b:a5:56:1e:61:7b: e5:c0:fb:5a:aa:b4:75:f5:92:87:71:29:bc:c7:b6:1c:16:31: a1:32:3a:d3:e8:a4:6e:a1:5f:dc:52:31:45:03:e0:a8:f0:90: 6b:e0:85:5f:d9:38:9e:da:81:39:33:40:86:cd:e1:a1:2a:12: 5d:f9:37:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhLVIfNjRkb++QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWI5YTEzYmUtNmRlMS00N2YyLTk2NzctZjNmNzlhMTQ3NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk54NLDFPjZOgbuBlAWinOh5hj8SDIiTL+sw zlglUT5Bv/FA9g3xhyiMeInNhILXTVbsBV6QHuou+BinWBKkrKQBfy03Ve3KGDe4 Zr1c5ZaViXDsMxBUx9A/DU2EY6z80SNpLeQoEhiVLXW6Re7JM27+kVNFJ76qBZ0N PTo3jfvnwyN7iHMSBSHkoBppmn6QnzS3SqbtGxLS5Q2wD+pNlIP9MkBEvb5+LMgV EsjhqzL8swDnsgc3PWyV7CiH8OFAdZhNaMi4fiSfJ2gvFvgnwPgUaCGz8y8yQ5+m Yo0i/NuwT4ktDzOnDj5n3Jt8KoIKAxWwdpXK8Xlryd+Vl/8SUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPSFZZax2NbhfFz8y6tFbkqb8JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ5ZTAwMDEtNDQ1My0z MmY3LTk2NzItNWYwM2U4MWU4NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0hnSIo01KEuUzaJp4SMVBLYAU3wvH2wXvImVi/SPSLApCFdFDg e2R4HM9jXDzV4CT15+BatQ1Cho8W55eox+n8DMiJWs7s6KfumzrjEGF47/rSKqNQ 1m6rJMWrP5yoQeMRv/WU8FB8sttV7zIIdJciu09PTSmW28dyrt+FpNXTD75brU+L 0GZqtGgVSwk12CXCGQD1W+hqJIGzRtrJGrUcISRiXUHQcYYv9CB55HzJUZFjOe33 VuhHjLaeS3GbtxulVh5he+XA+1qqtHX1kodxKbzHthwWMaEyOtPopG6hX9xSMUUD 4KjwkGvghV/ZOJ7agTkzQIbN4aEqEl35N2U= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:27 2025 by rpki-client