$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa File: 687f65d2-eb58-3eee-bd80-b9aa039300aa.roa (raw, json) Hash identifier: HoiA0GZFmXMdOGOo/oftxbN80ME+16LtAiFAo63wq2E= Subject key identifier: B7:84:BA:0C:4B:D5:44:8E:5E:10:57:48:ED:EF:89:1C:91:3D:67:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CE5C9FB867BFDEF3C5B280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa Signing time: Thu 24 Apr 2025 11:54:46 +0000 ROA not before: Thu 24 Apr 2025 11:54:46 +0000 ROA not after: Wed 23 Jul 2025 11:54:46 +0000 asID: 19905 IP address blocks: 2604:2d80:b480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ce:5c:9f:b8:67:bf:de:f3:c5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:54:46 2025 GMT Not After : Jul 23 11:54:46 2025 GMT Subject: CN=93707d16-2c56-4f20-915d-4582016adcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c0:f2:32:76:18:6c:cb:d8:51:0d:ed:ac:a2: a0:87:f1:17:40:d2:b7:f6:f7:b5:87:72:e6:97:72: 96:9c:2a:31:36:c5:87:10:10:b7:d3:a5:e6:2a:c4: 3e:a6:48:a5:1d:de:5d:b2:24:89:90:20:93:ae:0f: e6:41:b5:c0:33:e6:99:28:e3:fe:30:b8:10:70:97: 85:c3:61:3a:12:d1:9d:5f:3f:3d:ba:04:b0:4e:72: 1b:7f:07:f8:de:14:17:91:e8:45:ae:3c:38:f4:96: 4d:46:15:d4:70:b6:3b:1b:ca:0b:dc:2c:55:54:8a: 31:23:dc:5b:c5:05:2e:a2:e8:63:84:42:e8:11:e3: 94:ec:c5:07:5e:23:1e:1d:d2:e3:ae:84:fe:9d:7e: 16:22:1a:19:66:34:76:96:00:ea:74:4c:4e:16:51: bb:d0:d3:d4:f7:98:65:e1:a3:dc:55:85:05:1a:30: 42:26:b4:b0:ef:2d:22:d5:1f:aa:13:d4:93:0d:c2: 29:ef:43:38:55:88:ca:9f:05:28:2b:db:e9:78:1e: 51:84:19:f3:e1:63:b3:48:48:23:3f:bc:cc:dd:df: a3:69:6c:fc:62:67:96:07:5a:35:3e:28:7a:d8:e1: 43:59:89:c1:4e:5b:81:fa:5d:fb:0d:f8:41:38:db: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:84:BA:0C:4B:D5:44:8E:5E:10:57:48:ED:EF:89:1C:91:3D:67:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b480::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:69:74:9b:c4:ec:7f:6e:b6:88:0a:93:ce:b5:33:3c:62:55: 1a:77:fe:9b:4c:f6:d0:56:ad:11:d4:62:ab:83:21:2d:77:3d: 3a:7b:e2:5d:18:9c:4b:62:eb:4b:a2:ca:68:0a:bf:36:21:4d: 7c:3c:cb:6a:93:90:d0:3b:4d:a9:99:70:2a:be:37:ae:4f:c1: 5a:70:bd:25:76:37:7f:a7:55:ab:22:8f:8e:7c:48:5d:88:c4: 5e:04:a6:1e:9e:9d:91:b0:7a:41:78:80:b8:56:aa:5a:33:45: c8:5c:d6:ae:43:cf:3d:23:bc:2f:0a:3e:a7:a6:de:98:e7:8e: 19:4c:89:97:fb:3e:fd:4c:03:fe:89:37:c4:59:ef:a3:0a:3b: 1c:90:1a:61:72:88:20:e0:3e:25:e5:a9:1e:66:fc:d1:f1:76: 7e:0c:62:89:1a:52:44:1c:8c:2c:c7:7f:2a:a7:21:6c:22:34: ca:d9:5c:33:8d:0d:aa:7d:08:b1:5f:1e:f7:b0:3a:45:27:fc: 21:e2:1a:17:6b:9e:15:40:ae:b6:86:f6:58:be:07:1d:b3:fe: 03:f9:3b:87:be:ab:29:ed:b5:d6:be:7d:4b:32:98:fa:b3:f1: d2:4e:12:75:31:9d:26:64:db:91:af:09:3f:80:70:d6:ef:d6: ab:57:f8:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmhzlyfuGe/3vPFsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTQ0NloXDTI1MDcyMzExNTQ0NlowLzEtMCsGA1UEAxMk OTM3MDdkMTYtMmM1Ni00ZjIwLTkxNWQtNDU4MjAxNmFkY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsDyMnYYbMvYUQ3trKKgh/EXQNK39ve1h3Lm l3KWnCoxNsWHEBC306XmKsQ+pkilHd5dsiSJkCCTrg/mQbXAM+aZKOP+MLgQcJeF w2E6EtGdXz89ugSwTnIbfwf43hQXkehFrjw49JZNRhXUcLY7G8oL3CxVVIoxI9xb xQUuouhjhELoEeOU7MUHXiMeHdLjroT+nX4WIhoZZjR2lgDqdExOFlG70NPU95hl 4aPcVYUFGjBCJrSw7y0i1R+qE9STDcIp70M4VYjKnwUoK9vpeB5RhBnz4WOzSEgj P7zM3d+jaWz8YmeWB1o1Pih62OFDWYnBTluB+l37DfhBONuBKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLeEugxL1USOXhBXSO3viRyRPWc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjg3ZjY1ZDItZWI1OC0z ZWVlLWJkODAtYjlhYTAzOTMwMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlpdJvE7H9utogKk861MzxiVRp3/ptM9tBWrRHUYquDIS13PTp7 4l0YnEti60uiymgKvzYhTXw8y2qTkNA7TamZcCq+N65PwVpwvSV2N3+nVasij458 SF2IxF4Eph6enZGwekF4gLhWqlozRchc1q5Dzz0jvC8KPqem3pjnjhlMiZf7Pv1M A/6JN8RZ76MKOxyQGmFyiCDgPiXlqR5m/NHxdn4MYokaUkQcjCzHfyqnIWwiNMrZ XDONDap9CLFfHvewOkUn/CHiGhdrnhVArraG9li+Bx2z/gP5O4e+qynttda+fUsy mPqz8dJOEnUxnSZk25GvCT+AcNbv1qtX+EI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:44 2025 by rpki-client