$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4883160b-c993-3ea7-9af4-871ae27b39f6.roa File: 4883160b-c993-3ea7-9af4-871ae27b39f6.roa (raw, json) Hash identifier: KPAoXf7XM74G0n6LhE9q+ypxnpiAQSMMjXVpOxh23h8= Subject key identifier: 27:A5:F1:A1:7C:6D:76:75:4D:E4:FF:01:45:92:A6:62:A5:25:CD:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F01A7F063D408CDA96DE4200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4883160b-c993-3ea7-9af4-871ae27b39f6.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 30036 IP address blocks: 2604:2d80:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:7f:06:3d:40:8c:da:96:de:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=53c33044-5f39-4fb0-8f0b-d6dd53a1a0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:14:17:a5:91:2b:4b:e5:d1:26:64:b4:8a: 90:2c:97:40:80:42:06:54:23:06:eb:a4:53:5f:f6: b1:c8:81:92:84:ab:df:89:b4:de:1e:bc:78:3b:2c: c6:c3:7b:2d:96:ec:e4:f9:7c:a4:5d:ff:21:71:52: 61:9e:9b:0f:9e:52:6e:57:f9:41:05:cf:5f:72:89: 7f:cb:e8:14:43:0e:09:c3:ed:e2:03:b2:94:ae:38: 8c:a7:ba:3d:00:2a:ad:a0:fa:8c:82:c0:1e:7f:76: e7:22:eb:3a:12:c2:38:72:62:7b:0a:56:48:ee:24: c5:4b:a4:6d:da:2c:98:ff:07:1b:c7:a9:40:2a:03: f4:be:80:d7:71:c2:92:d2:e9:01:84:9c:58:94:1c: 82:1b:47:fc:8f:54:32:70:a2:ef:33:4d:64:8c:1c: 4f:34:b8:7e:91:6a:a7:18:9f:35:b0:67:2b:fc:8e: f8:fe:94:73:0d:34:a1:60:25:44:0d:6a:02:dc:4f: 36:22:4b:f8:ed:9b:dc:36:33:e2:2e:50:e4:45:0b: 1b:49:cc:db:32:d3:99:2f:3e:e6:7c:36:ab:ea:33: b3:9b:36:ec:d3:dc:a6:b7:de:32:a4:cd:19:19:30: a5:bc:dc:32:69:d1:5e:0b:aa:9a:8c:ae:e3:a7:43: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:F1:A1:7C:6D:76:75:4D:E4:FF:01:45:92:A6:62:A5:25:CD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4883160b-c993-3ea7-9af4-871ae27b39f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c2:52:58:8c:59:7a:56:bc:44:54:32:34:c0:58:36:00:4a: 3f:c9:c2:c6:dd:ce:59:04:76:73:80:e0:55:3c:df:4e:27:50: 81:df:da:e8:a1:31:0a:e7:8a:02:41:ee:e8:5e:53:a8:12:04: db:93:bc:84:70:46:0e:4f:bb:13:39:bf:12:c7:b1:f6:ff:7f: 46:aa:4f:14:05:c8:7f:6a:0a:94:79:9d:13:0d:c7:16:ab:2d: 32:61:f1:f8:91:43:60:ab:ba:6c:f6:cd:78:66:d1:e6:d1:08: 50:88:81:11:6d:1a:ea:41:6a:29:e7:fd:85:30:d4:2b:af:ee: 88:19:2e:49:31:25:b2:7e:39:32:a4:39:7f:16:8a:2b:26:86: a4:c1:55:66:7f:f9:12:32:cf:05:de:df:25:69:c5:d6:3b:c5: dc:c5:ab:bd:11:4c:7b:03:49:38:cd:54:2a:b0:f8:f3:62:d3: 39:51:eb:67:a4:13:7e:bd:f8:76:ba:87:4c:3d:55:de:c8:fe: 13:7f:7e:27:c1:11:ef:59:cf:5b:f5:67:1a:70:6a:39:8c:e8: 81:16:87:d0:d1:27:57:4c:57:72:97:f1:1e:30:7b:a6:57:25: 4f:cd:a3:2e:4d:60:cc:1a:67:b1:38:27:3e:25:5e:c2:c9:d7: ff:d8:93:95 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnwGn8GPUCM2pbeQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NTNjMzMwNDQtNWYzOS00ZmIwLThmMGItZDZkZDUzYTFhMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMUUF6WRK0vl0SZktIqQLJdAgEIGVCMG66RT X/axyIGShKvfibTeHrx4OyzGw3stluzk+XykXf8hcVJhnpsPnlJuV/lBBc9fcol/ y+gUQw4Jw+3iA7KUrjiMp7o9ACqtoPqMgsAef3bnIus6EsI4cmJ7ClZI7iTFS6Rt 2iyY/wcbx6lAKgP0voDXccKS0ukBhJxYlByCG0f8j1QycKLvM01kjBxPNLh+kWqn GJ81sGcr/I74/pRzDTShYCVEDWoC3E82Ikv47ZvcNjPiLlDkRQsbSczbMtOZLz7m fDar6jOzmzbs09ymt94ypM0ZGTClvNwyadFeC6qajK7jp0OibQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCel8aF8bXZ1TeT/AUWSpmKlJc0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDg4MzE2MGItYzk5My0z ZWE3LTlhZjQtODcxYWUyN2IzOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVsJSWIxZela8RFQyNMBYNgBKP8nCxt3OWQR2c4DgVTzfTidQgd/a 6KExCueKAkHu6F5TqBIE25O8hHBGDk+7Ezm/Esex9v9/RqpPFAXIf2oKlHmdEw3H FqstMmHx+JFDYKu6bPbNeGbR5tEIUIiBEW0a6kFqKef9hTDUK6/uiBkuSTElsn45 MqQ5fxaKKyaGpMFVZn/5EjLPBd7fJWnF1jvF3MWrvRFMewNJOM1UKrD482LTOVHr Z6QTfr34drqHTD1V3sj+E39+J8ER71nPW/VnGnBqOYzogRaH0NEnV0xXcpfxHjB7 plclT82jLk1gzBpnsTgnPiVewsnX/9iTlQ== -----END CERTIFICATE-----Generated at Sun Jun 15 14:46:39 2025 by rpki-client