$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa File: 42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa (raw, json) Hash identifier: RMblsBrfK7DAvWxTjWJts/YIS0/Z2Ayycu3/Wpelybk= Subject key identifier: 5B:E9:6E:64:7E:73:1E:44:61:D7:34:E9:A4:8F:C2:D0:B2:5D:23:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1BD2B70B455AE4F7E200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:b480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:d2:b7:0b:45:5a:e4:f7:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=68d48f26-a83a-4a70-ac73-655cdfc25cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:47:93:1b:f1:e2:11:c9:e4:37:e7:0f:5d: aa:59:03:04:52:a4:d5:48:8d:64:f7:ff:75:d6:b6: ae:b6:a9:6a:90:12:93:f8:ed:55:9f:52:bc:a7:92: 4a:90:81:37:b2:35:d0:b1:18:77:3f:e3:31:24:bb: 70:8d:47:ea:96:a5:7d:39:d3:df:26:31:40:d2:aa: 49:bb:b9:8d:19:fc:3e:49:4b:37:dd:6b:1e:5c:50: aa:be:f9:38:73:f3:57:d4:80:1d:66:a3:46:3a:56: 16:8d:a9:b3:1d:c2:ec:dd:a9:be:9d:bf:8e:aa:cc: 5b:16:3d:1c:76:8e:9f:67:ad:48:8d:d9:6e:a4:45: 64:ad:72:77:9f:dc:ff:5b:90:31:7d:56:79:7d:e4: b3:2d:05:19:3f:70:b6:30:6f:13:1b:8b:8e:8c:a3: 9b:cd:a0:58:08:6e:f0:68:53:62:37:71:8e:36:76: a1:ee:14:36:92:a6:f5:d5:4b:7e:fc:4c:af:06:29: 15:4b:05:71:4a:bc:ac:fb:67:76:70:49:8c:7e:37: ac:29:3a:1e:44:6e:5d:19:7c:1d:cd:9d:cb:5c:44: 01:2e:de:e9:07:2a:2e:4c:4b:2a:31:cb:7e:2b:f2: 8a:aa:55:ad:79:aa:01:a0:58:a7:9a:bd:9c:52:ca: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:6E:64:7E:73:1E:44:61:D7:34:E9:A4:8F:C2:D0:B2:5D:23:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b480::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4a:04:90:52:28:78:aa:b2:9c:c6:01:f2:34:e0:bf:a0:29: 00:c3:8e:f5:05:c8:c1:99:b4:15:6e:f2:89:2d:89:36:e6:b7: 76:6d:29:1a:80:68:a7:96:5b:f6:00:63:83:1e:64:e0:63:50: 62:63:d2:9d:5f:97:84:5f:d0:a4:76:b1:4f:77:ad:0b:a7:bc: 92:c9:f1:4b:06:60:6c:96:e3:e0:87:3a:7c:c1:31:0d:1e:2e: 7a:0d:6a:a6:ae:f7:93:ba:ec:ab:1f:a4:c8:78:e7:58:d7:7a: 12:2f:d6:bf:22:20:71:41:f3:e0:95:db:44:fe:df:2e:2b:93: ba:1b:be:a6:92:62:55:10:a6:2b:3e:4d:82:3f:28:61:d6:1a: c9:ea:df:93:56:f2:67:78:17:96:a7:97:4f:58:74:25:42:97: 8f:45:28:dc:34:4f:96:be:a5:98:5c:b6:9e:59:39:d4:ba:c2: 2a:e2:6e:94:3f:20:c8:bc:b4:9f:89:a7:5d:ee:84:c5:8e:08: 26:37:c5:04:5b:ea:e6:3e:fa:93:11:90:89:6e:4c:42:c5:60: 3d:76:73:34:54:a6:6c:e2:bc:48:9e:38:b9:6a:ef:09:90:93: ef:e8:29:db:72:eb:0e:88:5b:1f:55:d5:4e:4a:1c:b3:65:c1: c6:56:c5:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhvStwtFWuT34gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjhkNDhmMjYtYTgzYS00YTcwLWFjNzMtNjU1Y2RmYzI1Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTlHkxvx4hHJ5DfnD12qWQMEUqTVSI1k9/91 1rautqlqkBKT+O1Vn1K8p5JKkIE3sjXQsRh3P+MxJLtwjUfqlqV9OdPfJjFA0qpJ u7mNGfw+SUs33WseXFCqvvk4c/NX1IAdZqNGOlYWjamzHcLs3am+nb+OqsxbFj0c do6fZ61IjdlupEVkrXJ3n9z/W5AxfVZ5feSzLQUZP3C2MG8TG4uOjKObzaBYCG7w aFNiN3GONnah7hQ2kqb11Ut+/EyvBikVSwVxSrys+2d2cEmMfjesKToeRG5dGXwd zZ3LXEQBLt7pByouTEsqMct+K/KKqlWteaoBoFinmr2cUsopDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvpbmR+cx5EYdc06aSPwtCyXSMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDJjNGJkZGEtMWNiZi0z ZjAwLTg2MTQtNTQzMTRjZWViODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABKBJBSKHiqspzGAfI04L+gKQDDjvUFyMGZtBVu8oktiTbmt3Zt KRqAaKeWW/YAY4MeZOBjUGJj0p1fl4Rf0KR2sU93rQunvJLJ8UsGYGyW4+CHOnzB MQ0eLnoNaqau95O67KsfpMh451jXehIv1r8iIHFB8+CV20T+3y4rk7obvqaSYlUQ pis+TYI/KGHWGsnq35NW8md4F5anl09YdCVCl49FKNw0T5a+pZhctp5ZOdS6wiri bpQ/IMi8tJ+Jp13uhMWOCCY3xQRb6uY++pMRkIluTELFYD12czRUpmzivEieOLlq 7wmQk+/oKdty6w6IWx9V1U5KHLNlwcZWxdA= -----END CERTIFICATE-----Generated at Sun Apr 27 17:43:58 2025 by rpki-client