$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa File: 86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa (raw, json) Hash identifier: ZCPsE8pYsjxzgkgnccwhgvuPMA51/XbZzrR+1c6ExxU= Subject key identifier: 42:1D:16:19:58:45:C0:24:CD:92:D1:FE:21:0A:C9:C8:C0:E9:F6:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF64E25883234F2FCD9D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:3a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:64:e2:58:83:23:4f:2f:cd:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=287ca417-ae65-4b9d-9441-9e421432ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:8f:a3:fc:1e:e0:60:d7:47:88:39:f3:70: 4b:08:59:62:f8:ed:77:44:a2:92:bf:d0:74:bb:b4: 2e:2f:94:ee:e1:88:04:8e:2d:30:c5:97:95:4d:b2: 6b:0b:a4:e2:7b:65:e2:51:b4:d7:09:f9:4d:71:9d: 69:34:b0:b8:01:14:53:33:52:4e:4a:0c:4e:77:99: 8b:34:f4:ca:e9:0a:b3:e4:27:9c:cc:44:44:ba:3f: d0:93:63:b4:ec:80:39:5d:c7:0a:95:12:e9:fb:ad: c6:a1:d6:5c:50:94:29:3b:c6:44:e9:e1:e5:22:1b: d2:49:38:d2:ff:a9:b3:90:e4:a0:5e:d0:72:a2:dc: 92:af:4f:b0:2c:4a:72:ad:f2:76:18:75:fa:c3:27: 4c:ac:78:cb:3d:d2:6c:8b:a3:db:21:e5:6b:04:28: 0d:a6:12:3c:56:3f:d9:25:05:fe:17:37:c8:0e:d1: 9f:88:62:bd:07:21:c4:51:f4:26:6d:08:37:bb:27: 35:3a:7f:72:f2:cd:82:80:d7:f7:b4:0f:21:16:05: be:d8:7f:20:09:50:ab:4c:8b:e3:81:b8:1b:b8:1a: bc:69:c6:6f:b3:53:20:a9:25:5f:65:71:89:52:d2: e1:da:b7:68:69:94:70:a2:f5:e7:05:2d:b3:75:c6: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:16:19:58:45:C0:24:CD:92:D1:FE:21:0A:C9:C8:C0:E9:F6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3a00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:48:f6:fc:47:f6:43:46:7c:e9:7d:fc:f6:d0:be:9b:ca:c8: 25:63:12:0f:50:94:dd:48:00:57:0e:b4:fb:0f:62:20:b8:22: 50:02:19:49:22:88:49:0f:5f:79:de:cd:13:0c:03:14:6d:d5: 49:a4:a7:58:e2:4b:6d:45:ca:b1:0a:82:d7:47:af:15:0d:55: ac:35:22:b1:c0:d4:cd:a8:d6:49:6f:fb:4d:fd:3c:97:71:6f: 41:a9:96:ef:c1:16:ae:93:ba:41:ed:9b:37:29:e9:28:5a:65: 8b:2d:4d:9c:fb:54:dc:67:dc:a2:3d:1d:9f:61:84:72:62:2a: ab:22:e3:2a:72:61:bb:f7:f1:2f:6a:b9:08:4c:9d:bb:74:88: 6a:2b:17:65:fd:f5:42:8b:6f:7a:74:d9:b1:f2:0c:3e:2c:f3: 96:e9:ed:d0:d8:b5:98:02:55:dd:09:13:48:92:98:3e:39:54: dd:0a:45:6d:2b:28:1b:9f:9f:33:8c:ae:86:2a:08:ad:8c:22: 32:ff:7c:d0:1d:8f:be:65:1f:58:5a:19:b1:bf:dd:da:a7:db: ba:15:33:ab:c7:4c:bc:83:9b:52:2b:f5:34:f6:3c:d1:92:7e: d2:3c:92:8c:10:5c:b3:8f:5c:8a:7a:9d:e2:2b:34:b7:df:ac: 7c:11:54:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72TiWIMjTy/NnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Mjg3Y2E0MTctYWU2NS00YjlkLTk0NDEtOWU0MjE0MzJlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZWPo/we4GDXR4g583BLCFli+O13RKKSv9B0 u7QuL5Tu4YgEji0wxZeVTbJrC6Tie2XiUbTXCflNcZ1pNLC4ARRTM1JOSgxOd5mL NPTK6Qqz5CeczEREuj/Qk2O07IA5XccKlRLp+63GodZcUJQpO8ZE6eHlIhvSSTjS /6mzkOSgXtByotySr0+wLEpyrfJ2GHX6wydMrHjLPdJsi6PbIeVrBCgNphI8Vj/Z JQX+FzfIDtGfiGK9ByHEUfQmbQg3uyc1On9y8s2CgNf3tA8hFgW+2H8gCVCrTIvj gbgbuBq8acZvs1MgqSVfZXGJUtLh2rdoaZRwovXnBS2zdcb25wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIdFhlYRcAkzZLR/iEKycjA6fY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZhZmZjMGQtZjEyNy0z YzViLTk4MGUtZTBhOWI0YTI0YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpI9vxH9kNGfOl9/PbQvpvKyCVjEg9QlN1IAFcOtPsPYiC4IlAC GUkiiEkPX3nezRMMAxRt1Umkp1jiS21FyrEKgtdHrxUNVaw1IrHA1M2o1klv+039 PJdxb0Gplu/BFq6TukHtmzcp6ShaZYstTZz7VNxn3KI9HZ9hhHJiKqsi4ypyYbv3 8S9quQhMnbt0iGorF2X99UKLb3p02bHyDD4s85bp7dDYtZgCVd0JE0iSmD45VN0K RW0rKBufnzOMroYqCK2MIjL/fNAdj75lH1haGbG/3dqn27oVM6vHTLyDm1Ir9TT2 PNGSftI8kowQXLOPXIp6neIrNLffrHwRVGQ= -----END CERTIFICATE-----Generated at Tue Apr 29 09:22:40 2025 by rpki-client