$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa File: 5ca038ca-01d4-3085-bff0-b339906772a4.roa (raw, json) Hash identifier: k1F4Hw94GnsKpBSQ6p3jaX0WNdnqU2S1NX3bcC5WpdI= Subject key identifier: 88:0C:68:D5:A0:96:80:E0:B6:B7:FE:77:AB:2A:D5:89:76:3E:15:C9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA49254CA769932581B000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:1480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:49:25:4c:a7:69:93:25:81:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ca8505b5-e4c1-4a8b-974b-6261b8cc1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:9d:e6:62:e4:03:88:c6:5d:80:b2:4e:a6: 4d:58:48:66:7c:c2:1f:46:e5:2d:44:13:92:f7:74: 44:ca:43:2a:a4:ff:74:24:9f:32:92:39:73:f4:4c: 7f:e1:61:20:0f:ac:3e:3c:0b:08:76:70:82:9f:22: b3:f7:7f:6a:28:ae:48:4d:76:4b:fd:33:f0:99:a4: 06:00:1e:6e:71:84:51:a6:33:bc:49:8b:20:d8:12: 69:7f:79:47:4d:1c:c0:96:59:d7:fd:ec:67:ec:2f: 07:31:79:4a:c7:84:7b:8b:54:34:e5:92:02:7e:6f: 51:8c:02:cd:6c:bc:64:17:19:93:2d:4c:a1:65:2f: 21:4d:86:92:ae:e0:13:a8:a4:1f:55:b4:26:ff:ba: 44:be:b0:b8:b9:44:77:25:65:d2:c0:fd:57:83:33: a0:e6:ac:d6:e2:e8:f4:85:ff:70:c3:e1:70:a7:9b: c6:6e:ab:2d:f2:d5:1c:8a:1f:a4:1f:bb:f6:88:b4: cb:94:29:ae:79:0e:9c:57:09:c6:96:45:4a:ca:09: 99:2a:19:db:d7:5f:06:79:af:d9:ae:ac:03:3e:7b: 51:48:1f:00:58:3f:64:d6:b3:d1:5d:8b:b6:31:32: d5:07:bd:fe:fe:48:e4:2d:86:2a:40:f7:4c:f0:7d: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:68:D5:A0:96:80:E0:B6:B7:FE:77:AB:2A:D5:89:76:3E:15:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1480::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e5:50:7b:99:8f:67:ad:56:f7:26:b4:91:2e:4b:1f:28:b2: 71:e5:99:59:f1:7a:a1:d7:18:82:ca:91:40:a8:b9:76:10:af: 2b:66:ca:7e:44:da:ca:59:75:2f:bb:42:d4:a0:67:9d:4f:db: 7c:96:aa:7b:81:b5:b5:89:8e:1b:e0:cd:57:a5:a9:a6:ff:b7: ef:c2:ec:7a:f8:39:99:c3:a0:81:a6:44:df:9c:8b:fb:74:04: 1f:a9:a8:25:5d:cf:28:54:18:6e:81:f4:48:b3:a7:4d:be:be: 29:8d:2d:d1:61:ad:65:9e:1e:03:d2:99:f6:2c:8a:1c:0a:c4: 6b:86:7f:67:f1:c8:84:26:61:a2:52:cc:4e:d0:c4:d5:44:af: 62:73:e1:45:ed:68:4b:8c:54:c8:f0:e6:f0:06:25:f9:66:c1: 50:87:99:4e:4e:cb:c6:99:f1:5d:f9:a7:d2:4a:9a:70:d2:9f: 8a:f3:93:ad:29:33:67:e1:90:11:33:39:87:0a:5c:16:6b:e5: 1a:fd:50:4e:15:65:cf:9f:e5:76:0a:e9:7d:54:92:7e:55:a2: 07:ed:36:74:63:96:f8:a0:7b:fd:43:86:b5:0c:a1:a0:ce:5b: 22:04:ec:1f:9a:67:9b:30:a3:40:6f:cc:da:f1:92:12:93:ff: 72:bb:02:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkukklTKdpkyWBsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2E4NTA1YjUtZTRjMS00YThiLTk3NGItNjI2MWI4Y2MxNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vud5mLkA4jGXYCyTqZNWEhmfMIfRuUtRBOS 93REykMqpP90JJ8ykjlz9Ex/4WEgD6w+PAsIdnCCnyKz939qKK5ITXZL/TPwmaQG AB5ucYRRpjO8SYsg2BJpf3lHTRzAllnX/exn7C8HMXlKx4R7i1Q05ZICfm9RjALN bLxkFxmTLUyhZS8hTYaSruATqKQfVbQm/7pEvrC4uUR3JWXSwP1XgzOg5qzW4uj0 hf9ww+Fwp5vGbqst8tUcih+kH7v2iLTLlCmueQ6cVwnGlkVKygmZKhnb118Gea/Z rqwDPntRSB8AWD9k1rPRXYu2MTLVB73+/kjkLYYqQPdM8H2B3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgMaNWgloDgtrf+d6sq1Yl2PhXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNhMDM4Y2EtMDFkNC0z MDg1LWJmZjAtYjMzOTkwNjc3MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3lUHuZj2etVvcmtJEuSx8osnHlmVnxeqHXGILKkUCouXYQrytm yn5E2spZdS+7QtSgZ51P23yWqnuBtbWJjhvgzVelqab/t+/C7Hr4OZnDoIGmRN+c i/t0BB+pqCVdzyhUGG6B9Eizp02+vimNLdFhrWWeHgPSmfYsihwKxGuGf2fxyIQm YaJSzE7QxNVEr2Jz4UXtaEuMVMjw5vAGJflmwVCHmU5Oy8aZ8V35p9JKmnDSn4rz k60pM2fhkBEzOYcKXBZr5Rr9UE4VZc+f5XYK6X1Ukn5VogftNnRjlvige/1DhrUM oaDOWyIE7B+aZ5swo0BvzNrxkhKT/3K7Aow= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:39 2025 by rpki-client