$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87ed25bb-035f-34ae-96c2-c029f9a3c630.roa File: 87ed25bb-035f-34ae-96c2-c029f9a3c630.roa (raw, json) Hash identifier: gkFx/OdSfL1JpOdQ2pxD3e9tU7D0bvDna0V8IJqqpE0= Subject key identifier: 96:5D:F4:86:EB:88:A2:82:2D:7B:75:ED:7B:05:FC:90:BB:48:AC:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49DBE31FDDFCCD15B95C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87ed25bb-035f-34ae-96c2-c029f9a3c630.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:4e00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9d:be:31:fd:df:cc:d1:5b:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f51ee53f-300f-4efe-8a50-807bb7062a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:9c:8e:45:3d:45:a8:15:ef:ca:8e:a2:fc: 9f:7c:0c:34:82:d5:72:0c:15:d8:2e:c5:79:85:d7: 0f:73:92:43:bc:14:c0:aa:62:8d:43:41:c9:27:e1: d3:59:98:81:5a:2d:c6:ad:90:61:64:e7:aa:5f:6b: ca:ef:ca:cb:80:34:e2:9d:1d:f8:c4:4d:b8:43:da: 61:fb:13:28:5f:6e:ab:34:16:a2:95:70:43:97:fc: f2:67:82:ec:c3:bf:7f:01:51:44:fa:0f:fa:e8:b2: 15:42:d7:3f:3c:60:4d:3c:7a:ce:43:7b:b7:74:40: c6:17:49:9a:17:43:f0:02:97:b1:13:92:a7:1a:a5: 7f:b8:4f:a4:1f:22:55:1b:d7:ef:77:25:3c:44:b8: 80:30:b6:d1:ab:64:96:35:0d:14:a6:0b:59:94:df: 65:e2:c2:98:01:37:22:1a:44:8b:c6:69:c9:1c:3f: 38:97:85:c8:1a:14:af:08:db:fd:6f:61:ab:6f:02: 85:7f:26:c8:c5:05:6c:c4:8e:01:63:6f:3a:5f:8b: 58:c3:6f:ba:93:fa:02:73:c3:8c:ff:a5:9d:46:86: 9e:c7:1b:19:5f:5b:14:63:8f:dd:2c:dd:18:a8:be: eb:a7:6d:8e:b2:44:c8:21:46:fc:46:34:ca:fe:b4: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5D:F4:86:EB:88:A2:82:2D:7B:75:ED:7B:05:FC:90:BB:48:AC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87ed25bb-035f-34ae-96c2-c029f9a3c630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4e00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:52:dd:95:78:0b:f3:1e:1c:b9:80:3b:4a:c1:37:8b:87:69: b9:55:bc:b1:a5:f0:aa:30:f4:36:39:f2:ae:ef:e5:5d:71:f8: ba:11:f5:42:e8:ef:f2:4e:5b:5d:b5:71:23:bf:c8:5d:7c:e1: c1:ac:97:b4:43:a0:07:11:6b:dc:a9:7b:9f:bf:dd:1a:d8:07: fa:f6:73:41:25:d9:c8:68:ad:75:58:c7:03:ab:86:de:05:96: f5:eb:81:1b:34:bc:47:0a:f1:10:44:8c:da:ab:49:e8:0c:5b: 02:f1:ba:e8:fd:57:7a:04:89:96:e6:f8:5a:f3:92:23:d8:11: 34:26:2e:a6:e9:58:0b:a9:0f:83:1b:69:31:28:22:77:83:c0: 60:68:64:94:90:a5:94:c4:e6:4c:78:96:d5:c4:c3:ef:1e:7a: bb:87:02:f2:04:63:1f:76:d8:8a:f6:e4:bc:21:f1:83:23:58: 5f:db:cb:91:e5:95:83:40:f4:eb:19:20:c3:03:21:55:04:97: e9:e8:c7:ca:3a:e1:12:03:04:3d:a7:f9:60:35:20:18:3d:42: ad:8f:fa:36:05:08:a4:da:6e:87:6f:f3:5e:dc:9f:2a:2d:7d: 8b:cb:b2:b4:d1:bf:88:95:e3:4a:5b:80:1c:e6:fd:9d:f4:ad: 6b:65:1d:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJ2+Mf3fzNFblcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjUxZWU1M2YtMzAwZi00ZWZlLThhNTAtODA3YmI3MDYyYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWycjkU9RagV78qOovyffAw0gtVyDBXYLsV5 hdcPc5JDvBTAqmKNQ0HJJ+HTWZiBWi3GrZBhZOeqX2vK78rLgDTinR34xE24Q9ph +xMoX26rNBailXBDl/zyZ4Lsw79/AVFE+g/66LIVQtc/PGBNPHrOQ3u3dEDGF0ma F0PwApexE5KnGqV/uE+kHyJVG9fvdyU8RLiAMLbRq2SWNQ0UpgtZlN9l4sKYATci GkSLxmnJHD84l4XIGhSvCNv9b2GrbwKFfybIxQVsxI4BY286X4tYw2+6k/oCc8OM /6WdRoaexxsZX1sUY4/dLN0YqL7rp22OskTIIUb8RjTK/rQAmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZd9IbriKKCLXt17XsF/JC7SKzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODdlZDI1YmItMDM1Zi0z NGFlLTk2YzItYzAyOWY5YTNjNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgE4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZS3ZV4C/MeHLmAO0rBN4uHablVvLGl8Kow9DY58q7v5V1x+LoR 9ULo7/JOW121cSO/yF184cGsl7RDoAcRa9ype5+/3RrYB/r2c0El2chorXVYxwOr ht4FlvXrgRs0vEcK8RBEjNqrSegMWwLxuuj9V3oEiZbm+FrzkiPYETQmLqbpWAup D4MbaTEoIneDwGBoZJSQpZTE5kx4ltXEw+8eeruHAvIEYx922Ir25Lwh8YMjWF/b y5HllYNA9OsZIMMDIVUEl+nox8o64RIDBD2n+WA1IBg9Qq2P+jYFCKTabodv817c nyotfYvLsrTRv4iV40pbgBzm/Z30rWtlHa0= -----END CERTIFICATE-----Generated at Sun Apr 27 13:24:02 2025 by rpki-client