$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa File: 4af779d3-3ad5-368f-ae8a-873a3a528992.roa (raw, json) Hash identifier: BXGFNEslkUxpRyGP8yncPHK/MaZHRUwdh/fEaThqZU0= Subject key identifier: 1D:E9:15:B5:00:48:6A:E8:B2:E4:2A:73:77:DC:1C:29:3D:BE:CC:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0FA3F9B16971737F1860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:a680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:0f:a3:f9:b1:69:71:73:7f:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=71d39068-80e5-45cb-a6bc-595f5ad32bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:5e:69:fd:80:e7:f7:1e:ae:1a:ab:2d:b5: e2:50:ae:cc:ab:f4:8e:63:3f:9e:23:a9:8b:ec:ea: 30:32:01:7e:c2:13:95:a5:d5:56:5f:f8:9e:4b:cd: 97:54:68:17:6c:43:d3:40:31:50:39:2a:4f:ca:b9: f5:b3:df:a9:95:86:fe:81:dc:58:07:d2:2c:2a:f4: d2:16:d0:76:a6:9c:41:a0:19:c2:93:37:5b:01:96: 16:e1:44:67:86:6f:c6:d4:02:56:2d:bb:3b:0c:d0: 72:b9:0c:29:34:e4:75:6b:5b:3d:13:20:31:a0:9c: 1b:1a:d8:f2:f2:09:1e:5e:eb:37:11:c0:06:8a:ba: ac:2a:a6:ba:d3:3b:31:e6:01:40:28:6e:0b:ca:03: 2f:25:45:c6:c5:52:15:28:ca:53:58:27:a2:e6:6f: db:4c:74:af:6b:5d:ce:97:fb:e9:f5:1d:6a:60:03: e5:5c:7a:d9:9c:5d:5d:df:fc:d8:dc:58:d4:e9:a9: c0:6a:81:59:1d:61:07:21:e1:6f:3c:f8:c8:a4:4a: a3:3a:45:82:af:f4:bf:33:e0:9c:cb:e4:d9:40:25: 88:a2:43:f3:70:1a:af:98:cf:3e:e7:ba:56:ee:07: e0:4f:66:06:f0:2e:8e:e7:c2:b9:c8:ba:0c:8f:c9: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:15:B5:00:48:6A:E8:B2:E4:2A:73:77:DC:1C:29:3D:BE:CC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:06:f8:05:7e:ca:47:15:12:7b:5d:56:5f:8c:b4:7d:ed:45: 80:42:89:81:2a:2e:74:cc:67:3b:00:65:23:8b:ff:6f:18:fa: 2d:a6:01:29:a4:22:8c:a4:13:43:f2:d2:e2:00:86:13:df:fc: 74:1e:06:ad:05:a6:51:e5:42:c0:07:8a:53:32:a3:15:cb:47: c1:0b:a4:3a:a0:02:a0:a8:fc:45:fa:91:6c:ba:6a:bb:c7:50: a5:00:f0:36:e9:1c:63:ca:bb:10:c9:6f:83:a2:a3:6a:38:39: dd:f1:f0:28:c6:f2:cf:71:ac:0b:55:fb:02:68:dc:8f:93:60: dc:fb:4a:6f:df:46:f4:f8:10:fd:88:c4:e9:67:0b:c1:bf:a2: a8:4f:d7:02:62:78:d7:9c:3d:f8:30:a1:fe:d3:12:2a:67:af: b2:13:32:5c:5f:d2:bb:e4:ad:60:cd:03:d1:58:98:02:18:94: 19:d7:b4:b5:7d:d9:9b:6a:e6:ec:96:3a:6b:8b:86:71:fd:f9: 56:06:df:fb:d2:a0:7c:0a:a8:2f:f0:0b:c1:7e:dd:95:c5:67: 5d:dc:52:78:09:77:8f:09:2f:68:50:b8:30:a0:b2:38:bf:e4: d1:4b:eb:8b:c8:cf:a0:44:6b:1c:a4:02:05:a0:ba:38:3a:48: 50:03:84:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkug+j+bFpcXN/GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzFkMzkwNjgtODBlNS00NWNiLWE2YmMtNTk1ZjVhZDMyYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Reaf2A5/cerhqrLbXiUK7Mq/SOYz+eI6mL 7OowMgF+whOVpdVWX/ieS82XVGgXbEPTQDFQOSpPyrn1s9+plYb+gdxYB9IsKvTS FtB2ppxBoBnCkzdbAZYW4URnhm/G1AJWLbs7DNByuQwpNOR1a1s9EyAxoJwbGtjy 8gkeXus3EcAGirqsKqa60zsx5gFAKG4LygMvJUXGxVIVKMpTWCei5m/bTHSva13O l/vp9R1qYAPlXHrZnF1d3/zY3FjU6anAaoFZHWEHIeFvPPjIpEqjOkWCr/S/M+Cc y+TZQCWIokPzcBqvmM8+57pW7gfgT2YG8C6O58K5yLoMj8kjLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB3pFbUASGrosuQqc3fcHCk9vsxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGFmNzc5ZDMtM2FkNS0z NjhmLWFlOGEtODczYTNhNTI4OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGAG+AV+ykcVEntdVl+MtH3tRYBCiYEqLnTMZzsAZSOL/28Y+i2m ASmkIoykE0Py0uIAhhPf/HQeBq0FplHlQsAHilMyoxXLR8ELpDqgAqCo/EX6kWy6 arvHUKUA8DbpHGPKuxDJb4Oio2o4Od3x8CjG8s9xrAtV+wJo3I+TYNz7Sm/fRvT4 EP2IxOlnC8G/oqhP1wJieNecPfgwof7TEipnr7ITMlxf0rvkrWDNA9FYmAIYlBnX tLV92Ztq5uyWOmuLhnH9+VYG3/vSoHwKqC/wC8F+3ZXFZ13cUngJd48JL2hQuDCg sji/5NFL64vIz6BEaxykAgWgujg6SFADhOI= -----END CERTIFICATE-----Generated at Sun Apr 27 07:23:18 2025 by rpki-client