$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa File: 67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa (raw, json) Hash identifier: 4JunAak0GvUoXfflR08lLr5VGiaYwu57Cq/b/8Gagww= Subject key identifier: 9F:4B:CB:67:4A:51:36:ED:2C:C5:3C:47:B4:28:41:6D:21:76:ED:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B7069E62B34D9E4AE1A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:d380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b7:06:9e:62:b3:4d:9e:4a:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e17dc1fe-2d15-4a8b-83f2-5a3e42e3f416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:8f:30:d4:c5:b5:ed:ae:c2:b3:60:de:2d: 9b:ec:35:83:31:11:24:18:af:92:63:08:f6:42:30: 59:f6:d4:df:56:73:79:85:31:68:05:93:41:fe:03: 7c:19:d6:c0:64:8b:6d:9d:2b:fe:df:af:bd:ee:80: b0:ba:16:fb:eb:52:44:84:a9:46:22:21:3d:9a:1d: 7c:f5:d0:28:7f:3d:87:2e:68:d8:09:8b:ed:9f:7e: 24:09:c3:50:f3:13:25:01:14:2b:fa:29:00:18:47: 67:6b:a8:19:07:75:30:3e:71:e8:ea:aa:ba:18:86: d0:ed:b2:d5:9c:c3:d4:a7:98:c7:cc:ee:97:81:f7: b0:73:6c:94:d7:e4:32:e7:ba:8b:8e:8a:24:ef:0b: c1:2a:f2:26:7a:6c:6d:95:94:50:d2:6c:19:6d:d3: f7:7a:83:9f:e8:7f:49:21:fc:01:7b:10:f7:ad:3f: d8:62:8c:bc:da:09:f4:a8:26:e5:31:c3:67:1c:e1: 4d:b5:e1:ed:40:28:2f:96:04:9e:96:f6:09:03:02: 97:4a:75:46:e2:83:fb:43:f4:97:22:d1:2d:32:f1: 90:9b:b1:ce:d8:1a:96:3b:9d:0e:f3:9d:cd:90:17: 62:18:d0:f3:29:ee:0a:61:c8:00:35:54:7a:27:39: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:CB:67:4A:51:36:ED:2C:C5:3C:47:B4:28:41:6D:21:76:ED:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:53:81:ce:3b:63:7e:7c:6d:6a:96:a9:05:9e:5b:25:c4:ae: 80:8f:d2:db:d5:1a:f8:06:af:7c:57:cc:30:d1:e6:fa:fc:39: 25:3d:86:ca:35:2f:19:de:74:d4:24:d7:2c:a5:e9:f5:ef:f3: 11:8b:13:ec:47:65:1c:45:41:ba:c7:37:75:bb:df:00:6c:f9: 25:0f:c0:fc:9b:cd:41:bb:98:5e:03:93:6e:35:1f:30:38:45: e4:a7:c0:c5:23:63:99:26:e6:01:f5:92:41:43:b5:0c:6f:0d: 46:1b:4e:87:d2:bf:00:06:87:fa:a8:40:07:3c:5c:aa:78:86: 02:6e:2f:ca:2d:32:88:91:6c:22:fc:9b:05:06:18:9c:a1:3a: 62:b0:01:69:9a:93:f2:ac:5d:48:76:d2:5b:1a:9b:a1:21:32: 3d:90:59:37:9c:db:81:1c:71:95:c9:c1:e9:1e:d1:54:85:75: 76:6d:f6:3d:3c:86:9a:8f:93:54:bf:85:d6:ea:ff:c8:d0:72: 35:33:c9:aa:1e:13:22:33:73:9b:22:d4:51:36:f3:c0:00:67: 6c:31:80:e7:f4:87:26:38:83:18:79:32:f9:4e:6d:02:80:b4: ae:ff:01:45:89:2e:01:fa:9f:c0:1d:9f:37:6f:8f:24:13:14: 75:63:b5:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhLcGnmKzTZ5K4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTE3ZGMxZmUtMmQxNS00YThiLTgzZjItNWEzZTQyZTNmNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvyPMNTFte2uwrNg3i2b7DWDMREkGK+SYwj2 QjBZ9tTfVnN5hTFoBZNB/gN8GdbAZIttnSv+36+97oCwuhb761JEhKlGIiE9mh18 9dAofz2HLmjYCYvtn34kCcNQ8xMlARQr+ikAGEdna6gZB3UwPnHo6qq6GIbQ7bLV nMPUp5jHzO6Xgfewc2yU1+Qy57qLjook7wvBKvImemxtlZRQ0mwZbdP3eoOf6H9J IfwBexD3rT/YYoy82gn0qCblMcNnHOFNteHtQCgvlgSelvYJAwKXSnVG4oP7Q/SX ItEtMvGQm7HO2BqWO50O853NkBdiGNDzKe4KYcgANVR6JzmLHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9Ly2dKUTbtLMU8R7QoQW0hdu0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdjZjc1M2UtNGQ3Zi0z ZTNjLWFjYjAtMGE2YTM0N2I0ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxTgc47Y358bWqWqQWeWyXEroCP0tvVGvgGr3xXzDDR5vr8OSU9 hso1LxnedNQk1yyl6fXv8xGLE+xHZRxFQbrHN3W73wBs+SUPwPybzUG7mF4Dk241 HzA4ReSnwMUjY5km5gH1kkFDtQxvDUYbTofSvwAGh/qoQAc8XKp4hgJuL8otMoiR bCL8mwUGGJyhOmKwAWmak/KsXUh20lsam6EhMj2QWTec24EccZXJweke0VSFdXZt 9j08hpqPk1S/hdbq/8jQcjUzyaoeEyIzc5si1FE288AAZ2wxgOf0hyY4gxh5MvlO bQKAtK7/AUWJLgH6n8AdnzdvjyQTFHVjtQg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:48:25 2025 by rpki-client