$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa File: 5cff5eba-b27d-3274-83f0-8e14a3836930.roa (raw, json) Hash identifier: ec6WgknjQfWeLtrrkjQTjwvTA9rTntKdoD63BJEcBQ4= Subject key identifier: C1:9A:EA:A1:BB:93:B5:45:3D:78:9E:AA:9A:79:04:D2:63:C1:AD:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF564007CED9E37FFD9FF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa Signing time: Tue 22 Apr 2025 09:38:33 +0000 ROA not before: Tue 22 Apr 2025 09:38:33 +0000 ROA not after: Mon 21 Jul 2025 09:38:33 +0000 asID: 19905 IP address blocks: 2604:2d80:da00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:64:00:7c:ed:9e:37:ff:d9:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:38:33 2025 GMT Not After : Jul 21 09:38:33 2025 GMT Subject: CN=86568dc1-2e1e-48b6-bb35-eea8f16dbb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:95:73:0d:39:89:c5:a1:16:70:c9:9a:9c: 4e:bd:73:6b:c2:4d:7c:6c:4c:7e:44:5d:34:fb:ef: cf:c7:55:97:94:47:b5:13:d3:35:00:e4:5f:5a:9a: 49:94:ca:ac:ff:c8:12:55:2a:c0:62:53:4e:97:9e: 74:19:64:4f:f5:15:6f:94:54:84:d3:cc:e7:95:3c: bb:fb:6a:03:2d:08:2d:dd:0b:5e:99:1e:a5:c1:4b: 4c:c5:24:30:c9:ea:a4:6e:f0:f9:91:9e:7d:35:bc: ca:8f:0a:21:d1:d1:37:fe:26:85:20:af:c6:17:4c: 37:32:23:59:e4:88:77:53:be:fe:8b:24:f5:9f:e9: db:1d:cb:58:7a:3b:5f:48:73:07:31:40:56:7f:44: 6d:2b:a0:a6:cd:b2:85:65:6d:bd:6d:75:b1:dd:d3: df:70:d9:4f:45:5d:84:a0:ad:9b:0e:71:41:0b:e2: 7a:29:02:26:a1:77:20:9a:23:b6:5f:fa:a7:07:b7: 64:50:41:57:97:85:95:49:40:a3:bf:8f:14:f4:37: 3d:18:52:72:6e:9f:eb:0a:51:ce:e0:26:b5:5f:3b: d1:59:44:0d:1d:37:be:ca:dc:21:74:2b:c6:f2:d3: 6f:95:a5:b8:42:a7:08:92:4f:a3:16:c6:8b:ae:6c: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9A:EA:A1:BB:93:B5:45:3D:78:9E:AA:9A:79:04:D2:63:C1:AD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:da00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c2:e3:22:a5:b4:a7:06:67:1d:a1:bb:2b:1c:5a:a3:90:05: 02:37:ab:cb:49:00:0a:d9:5e:b6:5a:71:a7:fc:f2:91:ad:c7: 14:3e:68:b4:1b:8e:9e:a6:98:4f:f9:f2:f7:4b:dc:1b:c0:19: 74:c9:a7:42:5a:9c:4c:c8:7c:2d:56:77:aa:32:cb:a1:7f:57: aa:c7:73:85:0d:ec:82:63:ba:8e:47:37:0d:00:f3:fe:12:44: d6:1c:2f:93:d1:53:21:48:7c:40:50:8c:8b:e0:f6:6a:3f:92: 7d:76:8c:b7:6a:72:03:0f:79:3b:24:70:5f:58:3a:84:5e:9f: 89:34:5d:b6:cd:5a:73:28:48:99:bc:89:c2:d3:f7:7d:b9:23: 86:83:ba:23:b7:b3:ad:cb:2f:95:e2:68:d3:7b:b5:6a:e2:de: 38:2f:16:e7:0b:b1:4a:ff:92:1b:2a:3f:d1:80:4e:49:55:8b: 06:a1:b7:a5:2d:32:b4:4e:86:db:88:dd:b0:c1:6a:86:45:17: 0d:1c:af:f7:f3:c5:7d:59:e6:73:f8:a8:dd:7c:67:a2:2d:a7: 66:dd:c0:b3:6f:e8:2b:08:db:a5:21:8e:c8:4d:9b:d9:9c:b5: 36:5f:57:71:bd:41:23:d1:17:b5:4a:14:6c:c2:a5:cd:0b:91: 49:e7:1b:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmb9WQAfO2eN//Z/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzgzM1oXDTI1MDcyMTA5MzgzM1owLzEtMCsGA1UEAxMk ODY1NjhkYzEtMmUxZS00OGI2LWJiMzUtZWVhOGYxNmRiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX+Vcw05icWhFnDJmpxOvXNrwk18bEx+RF00 ++/Px1WXlEe1E9M1AORfWppJlMqs/8gSVSrAYlNOl550GWRP9RVvlFSE08znlTy7 +2oDLQgt3QtemR6lwUtMxSQwyeqkbvD5kZ59NbzKjwoh0dE3/iaFIK/GF0w3MiNZ 5Ih3U77+iyT1n+nbHctYejtfSHMHMUBWf0RtK6CmzbKFZW29bXWx3dPfcNlPRV2E oK2bDnFBC+J6KQImoXcgmiO2X/qnB7dkUEFXl4WVSUCjv48U9Dc9GFJybp/rClHO 4Ca1XzvRWUQNHTe+ytwhdCvG8tNvlaW4QqcIkk+jFsaLrmzcnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGa6qG7k7VFPXieqpp5BNJjwa0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNmZjVlYmEtYjI3ZC0z Mjc0LTgzZjAtOGUxNGEzODM2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrC4yKltKcGZx2huyscWqOQBQI3q8tJAArZXrZacaf88pGtxxQ+ aLQbjp6mmE/58vdL3BvAGXTJp0JanEzIfC1Wd6oyy6F/V6rHc4UN7IJjuo5HNw0A 8/4SRNYcL5PRUyFIfEBQjIvg9mo/kn12jLdqcgMPeTskcF9YOoRen4k0XbbNWnMo SJm8icLT9325I4aDuiO3s63LL5XiaNN7tWri3jgvFucLsUr/khsqP9GATklViwah t6UtMrROhtuI3bDBaoZFFw0cr/fzxX1Z5nP4qN18Z6Itp2bdwLNv6CsI26UhjshN m9mctTZfV3G9QSPRF7VKFGzCpc0LkUnnG3s= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:32 2025 by rpki-client