$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa File: 7d8a9d35-8884-3499-a57d-d954bc9b228f.roa (raw, json) Hash identifier: eMvVNmnK3yMGyu/xNlveO/jfgGOgpq4PCl982nMI/Kw= Subject key identifier: EE:53:94:E8:58:B4:6B:DA:91:F0:82:4E:9C:86:51:8B:B0:DD:01:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CE5609C3B56BDD7CF30640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa Signing time: Thu 24 Apr 2025 11:54:43 +0000 ROA not before: Thu 24 Apr 2025 11:54:43 +0000 ROA not after: Wed 23 Jul 2025 11:54:43 +0000 asID: 19905 IP address blocks: 2604:2d80:b180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ce:56:09:c3:b5:6b:dd:7c:f3:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:54:43 2025 GMT Not After : Jul 23 11:54:43 2025 GMT Subject: CN=606909fb-eb33-4030-891d-55fcf6b387fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:74:56:76:6e:a4:7d:90:a0:45:bb:a9:c2: 8c:c4:7f:84:53:33:d4:e7:a5:9d:a2:97:6c:90:90: 34:3d:47:2a:75:08:19:d7:fd:44:c5:41:f4:9e:fc: bf:ff:6d:a4:c7:4e:35:c6:46:3c:84:ae:ac:da:62: 61:e3:7c:d2:24:28:a8:df:b5:28:e3:6d:ed:58:47: 89:6c:25:e2:30:22:af:1c:c9:03:93:10:40:f9:e8: 19:16:c2:f3:9b:c8:82:42:0c:82:14:0a:63:52:9b: 9d:67:f3:2c:2f:12:2f:00:82:19:58:f4:91:49:06: 42:49:f2:48:71:2f:e1:27:48:99:ef:59:17:d7:4c: 41:f7:f2:9a:cc:24:67:50:ba:95:c7:47:e6:43:65: 6c:9c:71:35:06:0e:f8:9c:1b:c7:09:b4:1a:46:c7: 31:52:30:c1:f8:10:f6:47:f3:ea:4b:74:7b:93:fe: 4b:ba:c2:d6:2d:cb:67:1c:c8:d7:0a:e4:7d:b0:1a: b6:c7:05:02:cc:0b:79:9c:4d:f2:bf:bb:59:9b:12: 0b:23:e8:2b:23:06:29:46:f9:a0:2b:9b:a2:5e:44: 2f:7e:cf:62:40:a3:0f:a4:3b:96:57:43:74:6d:c6: 53:e7:79:6f:8c:d7:82:7b:45:2b:80:60:62:e6:bf: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:94:E8:58:B4:6B:DA:91:F0:82:4E:9C:86:51:8B:B0:DD:01:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d8a9d35-8884-3499-a57d-d954bc9b228f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:79:a0:4a:80:57:d0:a4:0f:bc:f0:c9:52:4d:bd:9f:bc:9c: 67:2e:42:91:7b:3c:99:1c:61:9d:d5:da:af:73:88:e7:4d:16: e3:1f:53:fd:02:a6:e1:39:67:00:d5:49:aa:4d:f0:76:0a:ff: 42:1e:87:93:3b:84:e8:93:fd:f1:66:83:ff:d0:4f:4c:3d:7b: 6e:89:1d:db:d2:eb:93:af:33:e5:9b:3f:5f:23:51:4b:93:7a: ff:3e:61:32:40:b2:e4:41:9f:76:39:da:a8:1b:15:dd:35:06: 5d:93:00:cb:b9:b1:33:fb:0f:cb:47:a4:dc:9b:13:13:e4:09: 64:aa:bf:da:e1:67:b8:ad:35:23:d2:08:d9:9a:e5:a8:68:72: 3b:fa:58:4d:25:70:af:ad:cd:f6:b5:38:2f:2b:a1:67:19:fd: fd:11:83:7c:fe:49:1c:09:40:74:30:87:7f:44:02:4c:f7:4a: c4:04:73:f4:df:8b:2c:94:23:11:70:cf:b3:cc:6d:75:23:fc: 1f:38:12:e5:dc:dc:60:03:58:c7:bb:71:0f:8f:5d:8b:b7:66: df:97:41:cb:37:3d:bb:87:36:d6:4c:96:93:f9:9f:4f:f5:3e: 82:88:da:71:ca:4a:90:cc:8c:dd:7f:d4:42:ee:cf:e9:f1:92: 76:f3:62:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmhzlYJw7Vr3XzzBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTQ0M1oXDTI1MDcyMzExNTQ0M1owLzEtMCsGA1UEAxMk NjA2OTA5ZmItZWIzMy00MDMwLTg5MWQtNTVmY2Y2YjM4N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcR0VnZupH2QoEW7qcKMxH+EUzPU56Wdopds kJA0PUcqdQgZ1/1ExUH0nvy//22kx041xkY8hK6s2mJh43zSJCio37Uo423tWEeJ bCXiMCKvHMkDkxBA+egZFsLzm8iCQgyCFApjUpudZ/MsLxIvAIIZWPSRSQZCSfJI cS/hJ0iZ71kX10xB9/KazCRnULqVx0fmQ2VsnHE1Bg74nBvHCbQaRscxUjDB+BD2 R/PqS3R7k/5LusLWLctnHMjXCuR9sBq2xwUCzAt5nE3yv7tZmxILI+grIwYpRvmg K5uiXkQvfs9iQKMPpDuWV0N0bcZT53lvjNeCe0UrgGBi5r8/JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5TlOhYtGvakfCCTpyGUYuw3QGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2Q4YTlkMzUtODg4NC0z NDk5LWE1N2QtZDk1NGJjOWIyMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEx5oEqAV9CkD7zwyVJNvZ+8nGcuQpF7PJkcYZ3V2q9ziOdNFuMf U/0CpuE5ZwDVSapN8HYK/0Ieh5M7hOiT/fFmg//QT0w9e26JHdvS65OvM+WbP18j UUuTev8+YTJAsuRBn3Y52qgbFd01Bl2TAMu5sTP7D8tHpNybExPkCWSqv9rhZ7it NSPSCNma5ahocjv6WE0lcK+tzfa1OC8roWcZ/f0Rg3z+SRwJQHQwh39EAkz3SsQE c/TfiyyUIxFwz7PMbXUj/B84EuXc3GADWMe7cQ+PXYu3Zt+XQcs3PbuHNtZMlpP5 n0/1PoKI2nHKSpDMjN1/1ELuz+nxknbzYhY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:11 2025 by rpki-client