$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa File: 53c0c917-499c-3626-95b1-5e150764f9ad.roa (raw, json) Hash identifier: eBh4MhrGrjTyKyeboQUvzBmfMROGe1D2BYdtDmm2VEk= Subject key identifier: B6:3F:03:80:89:6A:D5:3B:BA:A2:9D:7B:B7:E3:F6:57:72:FF:97:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49DAF012750FF7C6EAFC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:4d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9d:af:01:27:50:ff:7c:6e:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f2b0c4bc-0fc7-4305-8fee-fdbf1f3f37bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:af:6b:46:2d:ad:a6:1d:d2:56:bc:96:c5: e8:e5:59:6a:dc:ee:4d:48:25:7b:32:76:ef:5a:2d: ef:d0:8e:53:31:a8:8b:ea:87:71:4b:de:79:d6:74: 63:1a:aa:2d:cb:2c:e1:f8:69:32:9a:ba:75:b4:a9: 0b:29:7d:ea:3f:96:29:a0:f9:3b:2a:a7:44:15:5a: d5:cf:b6:9b:50:2f:a3:fd:07:a8:2c:d0:df:b4:b8: 00:ef:b5:5b:f3:70:9f:e9:22:eb:cc:f5:f0:9c:f7: 21:36:9e:a1:3e:10:af:9a:b2:f8:b0:63:b7:62:55: b0:25:a8:e5:28:63:5f:2d:b6:04:a6:de:26:06:9a: 80:19:26:ba:0a:16:74:81:64:5a:ff:62:b5:e6:2f: db:62:9d:43:9f:95:d7:c2:85:4d:25:64:53:03:40: fb:2b:31:67:42:d5:b9:f0:67:cb:51:8d:c0:9b:ba: f9:9a:1b:f0:9c:3b:8b:9a:4b:af:be:e9:1d:38:f3: 48:d7:26:cb:e0:dd:80:46:9d:64:7d:f4:d4:c7:43: 0c:13:0d:5f:46:58:c6:8e:35:43:d9:d9:6f:ca:b9: e2:1e:09:5f:24:84:2b:86:a7:cb:ac:91:5b:d0:fe: fb:4c:64:82:6d:6e:33:7c:93:17:c5:13:9e:d6:82: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:03:80:89:6A:D5:3B:BA:A2:9D:7B:B7:E3:F6:57:72:FF:97:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8c:ed:f1:f8:e5:14:73:03:b7:37:56:1a:1e:b7:d9:9c:49: ac:4c:68:3f:c6:de:37:f4:52:49:5c:ab:33:e0:59:a4:f4:80: 26:07:be:41:43:18:75:d1:e0:f3:64:b1:99:f8:e4:2f:cf:53: 13:d0:35:67:c4:88:b7:32:fa:7e:01:1b:0b:72:a0:f6:a7:79: 29:c4:dd:8b:d9:65:c4:7c:aa:27:6c:b1:ea:92:f6:c7:d8:22: a8:d4:f6:d6:5f:ae:2b:31:93:73:23:6a:6f:b4:a4:7f:75:9f: 65:35:ca:86:0b:1d:84:36:38:71:0d:2e:25:f2:eb:7d:d5:c8: 91:82:0e:9d:de:6f:c4:9d:fa:e3:b9:c5:43:1f:f5:09:99:69: c6:81:9c:d9:29:91:05:4b:81:74:d8:9b:df:4a:09:c8:94:08: 40:3d:93:9c:9a:51:79:84:a6:4b:17:53:a6:1c:08:75:06:27: 61:e1:bf:36:98:bd:d5:5e:4f:3f:2a:59:29:4d:be:ca:fd:ae: 10:f7:46:62:9f:bd:b7:f6:3a:54:ca:40:81:cb:d3:9e:f6:61: e5:6c:d5:01:08:2e:e6:47:f7:fd:b9:22:c9:49:87:0c:52:26: b3:a7:75:91:f9:e1:11:b8:4d:4f:25:02:9e:ea:a6:1e:77:92: 20:b2:24:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJ2vASdQ/3xur8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjJiMGM0YmMtMGZjNy00MzA1LThmZWUtZmRiZjFmM2YzN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm16va0YtraYd0la8lsXo5Vlq3O5NSCV7Mnbv Wi3v0I5TMaiL6odxS9551nRjGqotyyzh+Gkymrp1tKkLKX3qP5YpoPk7KqdEFVrV z7abUC+j/QeoLNDftLgA77Vb83Cf6SLrzPXwnPchNp6hPhCvmrL4sGO3YlWwJajl KGNfLbYEpt4mBpqAGSa6ChZ0gWRa/2K15i/bYp1Dn5XXwoVNJWRTA0D7KzFnQtW5 8GfLUY3Am7r5mhvwnDuLmkuvvukdOPNI1ybL4N2ARp1kffTUx0MMEw1fRljGjjVD 2dlvyrniHglfJIQrhqfLrJFb0P77TGSCbW4zfJMXxROe1oKQPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLY/A4CJatU7uqKde7fj9ldy/5ehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTNjMGM5MTctNDk5Yy0z NjI2LTk1YjEtNWUxNTA3NjRmOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgE2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaM7fH45RRzA7c3Vhoet9mcSaxMaD/G3jf0UklcqzPgWaT0gCYH vkFDGHXR4PNksZn45C/PUxPQNWfEiLcy+n4BGwtyoPaneSnE3YvZZcR8qidsseqS 9sfYIqjU9tZfrisxk3Mjam+0pH91n2U1yoYLHYQ2OHENLiXy633VyJGCDp3eb8Sd +uO5xUMf9QmZacaBnNkpkQVLgXTYm99KCciUCEA9k5yaUXmEpksXU6YcCHUGJ2Hh vzaYvdVeTz8qWSlNvsr9rhD3RmKfvbf2OlTKQIHL0572YeVs1QEILuZH9/25IslJ hwxSJrOndZH54RG4TU8lAp7qph53kiCyJC8= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:24 2025 by rpki-client