$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa File: 628a1e81-1f9a-3aa4-a9ab-b91409298406.roa (raw, json) Hash identifier: pAQMjOtHEIo6r5cMHFnkrLH89c5oGLfdsOGZ5Z9T0CU= Subject key identifier: 24:8D:0E:C5:3A:3F:45:EC:6A:5E:C1:F0:E8:59:9F:83:39:12:CF:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CE4687F3D0416482E6C7C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa Signing time: Thu 24 Apr 2025 11:54:35 +0000 ROA not before: Thu 24 Apr 2025 11:54:35 +0000 ROA not after: Wed 23 Jul 2025 11:54:35 +0000 asID: 19905 IP address blocks: 2604:2d80:2300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ce:46:87:f3:d0:41:64:82:e6:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:54:35 2025 GMT Not After : Jul 23 11:54:35 2025 GMT Subject: CN=5cf8ea2f-ccea-4505-9f4e-62a88e8c3995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:eb:d1:b5:9e:b0:ef:45:4c:fa:b2:4b:d5: 7f:0f:4c:41:4a:31:21:6e:6f:59:f1:f3:e0:99:39: 9c:a3:52:0c:74:b9:85:93:e0:42:85:b9:94:9b:5f: de:da:c7:05:3a:be:e2:2c:dd:a3:58:05:ac:9e:ab: 15:2a:44:e1:0d:c4:8e:94:19:ef:55:fb:d2:cc:72: ec:d6:8e:81:81:16:1e:e7:43:83:71:f8:b6:53:b3: 09:cd:19:40:59:e2:2c:b4:a6:09:8d:a1:41:08:f3: d1:61:00:22:65:7f:cb:c7:48:42:85:18:e7:df:25: 77:fc:5f:e9:a2:b2:75:54:7a:67:da:d9:92:a9:7d: de:ed:26:2c:de:14:5c:91:95:30:a8:0b:3e:6d:d8: a5:c9:65:fc:8e:d7:8f:30:f6:39:4e:9d:a3:73:00: 94:68:a1:b3:02:a3:e8:2d:12:13:e6:2c:f1:79:b6: ec:f3:e2:20:2a:e1:57:66:96:a7:79:5d:0f:91:0a: 68:18:71:c1:30:f2:31:43:d6:33:80:45:b3:6c:22: 0c:a9:8b:d8:8e:64:38:80:b2:29:4f:d7:84:ab:58: 9a:5b:15:33:b4:84:0c:ab:51:85:a1:89:70:35:7d: 8c:08:b1:47:21:14:e2:12:f0:d3:38:33:10:c0:28: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:0E:C5:3A:3F:45:EC:6A:5E:C1:F0:E8:59:9F:83:39:12:CF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a7:c1:6a:95:d8:82:c1:a5:b4:44:3b:17:d9:7f:b6:89:b4: 26:9e:98:3f:32:ea:3a:95:36:d6:eb:24:2b:19:11:35:49:ca: 44:ba:2a:15:ed:07:df:54:06:23:27:c6:2d:5c:c4:df:25:02: 45:e7:3e:dd:b9:7c:5b:ef:ce:18:af:30:85:28:19:07:f0:81: 03:1f:81:c7:61:7a:3b:9b:ef:5d:ef:ed:0d:67:69:fd:bf:40: 4f:07:6b:12:26:a7:36:f9:8c:9c:04:81:07:c6:0c:7a:73:6f: 8a:10:61:94:96:05:3f:dd:c2:24:56:32:4a:c8:52:b5:c2:20: 75:8d:ec:83:d3:46:3b:6f:f0:06:f2:4a:02:18:31:fc:38:c6: 71:f3:7c:26:17:1a:4a:60:44:5f:51:b0:d1:cf:0c:7d:14:f4: 94:99:c5:97:93:37:b0:3c:13:bd:b9:ad:27:23:09:a2:79:f7: 5d:2b:63:3e:5c:97:c2:99:a5:6a:70:b4:8b:8f:6a:cf:ff:db: d6:f1:f6:59:b9:0c:e9:c7:ae:44:4f:61:d7:7e:9f:c8:5f:8c: a5:3f:b9:c7:37:1b:25:c0:d6:8f:d9:a4:3a:c3:48:9e:a1:6a: 8f:65:27:ce:ec:dd:aa:72:09:5e:9e:50:f1:46:d5:2b:0f:bd: d8:b9:7b:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmhzkaH89BBZILmx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTQzNVoXDTI1MDcyMzExNTQzNVowLzEtMCsGA1UEAxMk NWNmOGVhMmYtY2NlYS00NTA1LTlmNGUtNjJhODhlOGMzOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp3r0bWesO9FTPqyS9V/D0xBSjEhbm9Z8fPg mTmco1IMdLmFk+BChbmUm1/e2scFOr7iLN2jWAWsnqsVKkThDcSOlBnvVfvSzHLs 1o6BgRYe50ODcfi2U7MJzRlAWeIstKYJjaFBCPPRYQAiZX/Lx0hChRjn3yV3/F/p orJ1VHpn2tmSqX3e7SYs3hRckZUwqAs+bdilyWX8jtePMPY5Tp2jcwCUaKGzAqPo LRIT5izxebbs8+IgKuFXZpaneV0PkQpoGHHBMPIxQ9YzgEWzbCIMqYvYjmQ4gLIp T9eEq1iaWxUztIQMq1GFoYlwNX2MCLFHIRTiEvDTODMQwCgeiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSNDsU6P0Xsal7B8OhZn4M5Es9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI4YTFlODEtMWY5YS0z YWE0LWE5YWItYjkxNDA5Mjk4NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6nwWqV2ILBpbREOxfZf7aJtCaemD8y6jqVNtbrJCsZETVJykS6 KhXtB99UBiMnxi1cxN8lAkXnPt25fFvvzhivMIUoGQfwgQMfgcdhejub713v7Q1n af2/QE8HaxImpzb5jJwEgQfGDHpzb4oQYZSWBT/dwiRWMkrIUrXCIHWN7IPTRjtv 8AbySgIYMfw4xnHzfCYXGkpgRF9RsNHPDH0U9JSZxZeTN7A8E725rScjCaJ5910r Yz5cl8KZpWpwtIuPas//29bx9lm5DOnHrkRPYdd+n8hfjKU/ucc3GyXA1o/ZpDrD SJ6hao9lJ87s3apyCV6eUPFG1SsPvdi5e/s= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:16 2025 by rpki-client