$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa File: 5876539f-5b68-3fa4-b595-0e67f68b72d2.roa (raw, json) Hash identifier: KO0+bRQIboThtjPIpe3SK0k9XxH3R1i1jBZhMTeYEJs= Subject key identifier: 12:54:EA:96:0F:A8:C9:4F:B1:B5:9E:EF:15:30:B0:CF:62:60:F6:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA107B333EA15427F62D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:ae00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:10:7b:33:3e:a1:54:27:f6:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c1fc4329-8658-44db-97a1-bb4947d4a05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:53:85:d9:43:65:71:ec:b5:f3:45:3a:cb: 1f:50:2f:50:19:78:b9:8e:ac:ad:10:a2:41:4a:3b: d0:09:5c:82:bd:d5:63:89:75:1a:e7:54:c1:7e:a5: ca:b8:4c:55:a5:53:b5:4a:2e:59:8e:be:89:a0:b5: fa:f7:16:be:16:04:03:e5:ee:b2:44:99:cf:ac:30: 39:31:78:84:3a:f9:8a:55:9a:d1:07:ce:73:98:e4: e7:9e:66:74:1e:8b:0f:b7:1f:34:57:e9:fa:74:18: 5d:c4:8b:a4:08:1c:5d:eb:28:c6:90:59:9c:dd:b1: b8:12:38:7c:14:65:56:4b:4b:ec:dc:5b:98:56:61: 13:74:86:8b:ec:c4:19:b4:fe:93:fb:27:05:46:f9: 40:9d:b7:f0:5c:17:80:a3:6a:d9:b4:58:8b:ea:1c: 2b:26:56:3b:bd:74:eb:2f:e1:ff:c5:06:20:41:8b: 7a:c6:11:5f:eb:24:e9:05:31:73:cc:86:3f:e1:c2: 6b:5f:9a:b3:a4:45:82:06:01:78:11:61:e9:8c:96: 72:b6:53:2b:91:9f:5a:a3:bd:cf:c6:d6:64:ae:08: 9e:dc:af:9b:6d:a6:2f:4d:33:3b:34:b9:2f:42:7f: 76:36:b1:a6:40:9a:80:21:3d:31:fc:bd:89:ce:dd: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:EA:96:0F:A8:C9:4F:B1:B5:9E:EF:15:30:B0:CF:62:60:F6:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ae00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9a:fc:0e:aa:4d:8b:9b:63:f2:cb:88:66:fc:84:d1:7e:27: 26:3b:8b:00:a6:9f:2c:6e:a7:89:c5:bd:54:a9:98:cb:ce:e9: 13:3f:7a:20:08:6d:e0:94:33:94:c0:30:d5:9a:71:f0:6d:af: 37:4e:24:a9:ee:7c:4e:32:8c:3c:e7:4f:aa:2d:f8:6c:d4:93: b9:38:b0:32:df:e4:2a:9f:54:ad:80:bc:7a:83:b9:b0:46:c1: 39:a9:6b:b4:3b:4b:30:01:f1:9c:f4:2c:2e:37:f4:30:43:ca: 55:fd:3f:0a:1f:72:d2:20:09:0e:e5:fa:55:aa:8d:87:a5:74: 2a:31:b5:7b:0c:bd:68:6f:2a:ad:d7:c2:d8:ad:39:66:af:96: 7b:7f:ce:a0:de:56:76:cc:7d:11:7c:8f:d9:b2:9d:72:84:54: 17:34:14:90:eb:30:42:ca:83:47:b9:af:b0:f0:f4:bb:b5:67: 7b:a2:21:12:b2:8c:49:32:1d:0b:1a:e9:52:f4:9b:db:82:20: fa:48:c6:e8:30:42:6a:1e:77:26:e3:e2:4c:ca:8c:aa:17:ef: 68:6d:3a:83:c3:a3:35:89:50:b1:1b:87:64:a7:95:0b:5c:94: 1a:d2:e6:eb:5a:e1:20:fd:10:7d:e1:ba:fa:4f:04:73:ba:9d: 8f:63:23:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhB7Mz6hVCf2LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzFmYzQzMjktODY1OC00NGRiLTk3YTEtYmI0OTQ3ZDRhMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K1ThdlDZXHstfNFOssfUC9QGXi5jqytEKJB SjvQCVyCvdVjiXUa51TBfqXKuExVpVO1Si5Zjr6JoLX69xa+FgQD5e6yRJnPrDA5 MXiEOvmKVZrRB85zmOTnnmZ0HosPtx80V+n6dBhdxIukCBxd6yjGkFmc3bG4Ejh8 FGVWS0vs3FuYVmETdIaL7MQZtP6T+ycFRvlAnbfwXBeAo2rZtFiL6hwrJlY7vXTr L+H/xQYgQYt6xhFf6yTpBTFzzIY/4cJrX5qzpEWCBgF4EWHpjJZytlMrkZ9ao73P xtZkrgie3K+bbaYvTTM7NLkvQn92NrGmQJqAIT0x/L2Jzt3q9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJU6pYPqMlPsbWe7xUwsM9iYPYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg3NjUzOWYtNWI2OC0z ZmE0LWI1OTUtMGU2N2Y2OGI3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgK4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGma/A6qTYubY/LLiGb8hNF+JyY7iwCmnyxup4nFvVSpmMvO6RM/ eiAIbeCUM5TAMNWacfBtrzdOJKnufE4yjDznT6ot+GzUk7k4sDLf5CqfVK2AvHqD ubBGwTmpa7Q7SzAB8Zz0LC439DBDylX9PwofctIgCQ7l+lWqjYeldCoxtXsMvWhv Kq3XwtitOWavlnt/zqDeVnbMfRF8j9mynXKEVBc0FJDrMELKg0e5r7Dw9Lu1Z3ui IRKyjEkyHQsa6VL0m9uCIPpIxugwQmoedybj4kzKjKoX72htOoPDozWJULEbh2Sn lQtclBrS5uta4SD9EH3huvpPBHO6nY9jI5s= -----END CERTIFICATE-----Generated at Sat Apr 26 21:51:44 2025 by rpki-client