$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d83bd21-8fbc-3614-a0f1-2d5510310991.roa File: 8d83bd21-8fbc-3614-a0f1-2d5510310991.roa (raw, json) Hash identifier: GqAyPBnIQeovI2SYiHNoiKyJcFYLynS1AOC2r8DOal4= Subject key identifier: B0:64:1F:13:35:77:66:E2:11:7F:D6:2F:E2:3B:BB:4F:C7:EF:B7:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BFBA27593E62B24E1900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d83bd21-8fbc-3614-a0f1-2d5510310991.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:1c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bf:ba:27:59:3e:62:b2:4e:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6684da4b-6072-46be-aa4d-a25a534a441c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:58:04:f9:97:9d:80:1a:76:26:80:1d:0e: 45:24:ac:d2:ad:83:d3:aa:97:6d:ae:7e:6b:fa:d6: c1:6b:be:f1:3b:57:08:d5:f2:73:76:64:9f:6d:6e: 64:8c:c0:91:23:79:4a:23:c6:bb:99:e1:65:a2:68: 5a:43:af:8d:93:ad:b4:6c:32:35:80:58:08:9e:73: 10:c9:35:68:62:60:59:07:ee:8e:69:45:78:fc:55: cf:88:34:67:a8:90:93:99:be:90:c2:e2:d2:d2:45: 75:48:31:5f:45:47:1b:35:d5:00:f7:2e:20:f9:d6: 45:ff:d3:75:46:5d:56:ed:6f:8e:89:84:a0:6e:fe: 54:5a:b7:d9:b9:68:e7:06:ad:26:0a:84:df:48:5d: bd:d5:72:92:5b:2d:8d:2f:ce:bd:f5:7d:c9:2c:ae: 8a:6a:cc:37:3a:5f:69:b3:7f:b8:05:e5:16:e8:8f: 6e:6f:3a:6a:fb:1d:61:98:45:71:4d:af:6c:fb:e2: e7:ec:64:db:3e:a2:f5:c9:26:fc:58:d0:51:03:bd: 3a:8e:ab:b5:81:f6:1b:1e:72:3d:03:58:37:76:37: 88:32:47:8e:e9:3c:93:ff:4b:bc:c4:26:a6:4e:2d: de:8c:e5:83:0f:98:0d:52:c3:98:80:37:89:08:4b: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:64:1F:13:35:77:66:E2:11:7F:D6:2F:E2:3B:BB:4F:C7:EF:B7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d83bd21-8fbc-3614-a0f1-2d5510310991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:80:49:60:c1:bc:85:bc:14:d3:18:7e:9e:e2:0c:e8:d8:ad: d2:f2:9d:49:a2:0a:4c:54:25:cf:4d:1e:15:40:a8:80:fa:e1: 96:49:8c:aa:6e:d3:98:fd:18:06:3b:e7:96:50:66:f8:7c:4a: 79:28:a5:50:af:9d:ae:19:a0:02:45:d9:a1:bc:47:a7:e5:a2: 62:cd:ba:48:23:e0:14:ba:50:66:45:18:23:aa:73:4a:18:aa: fc:64:49:a6:76:65:df:0b:1d:1a:f1:95:af:e1:8d:e7:0f:e7: ad:fd:71:7b:e9:ba:d2:0e:58:57:81:f6:63:85:9c:a0:17:43: 38:7f:43:76:c2:84:98:14:76:15:7d:88:c4:0a:3b:ed:e6:d2: 3f:4b:f1:1f:0d:8b:fb:c8:2b:95:7a:ff:96:82:46:c5:e5:ef: 01:d3:c8:42:9b:1f:81:6e:d8:a4:3c:17:e0:b1:cf:c4:ec:65: bd:a7:f1:ae:9e:d7:6b:04:d9:b1:a3:26:e2:59:17:d9:53:28: 58:6c:de:0f:54:2b:21:42:d7:8a:a4:9b:0c:91:6d:c8:e1:29: 4a:d9:6f:4e:71:d0:b5:ad:2b:ac:98:16:a9:f9:bc:e7:5b:bc: 4d:c0:52:8e:b4:4f:a6:b8:51:58:c9:c7:1f:84:4f:9c:34:88: ad:da:a1:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhL+6J1k+YrJOGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjY4NGRhNGItNjA3Mi00NmJlLWFhNGQtYTI1YTUzNGE0NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhYBPmXnYAadiaAHQ5FJKzSrYPTqpdtrn5r +tbBa77xO1cI1fJzdmSfbW5kjMCRI3lKI8a7meFlomhaQ6+Nk620bDI1gFgInnMQ yTVoYmBZB+6OaUV4/FXPiDRnqJCTmb6QwuLS0kV1SDFfRUcbNdUA9y4g+dZF/9N1 Rl1W7W+OiYSgbv5UWrfZuWjnBq0mCoTfSF291XKSWy2NL8699X3JLK6Kasw3Ol9p s3+4BeUW6I9ubzpq+x1hmEVxTa9s++Ln7GTbPqL1ySb8WNBRA706jqu1gfYbHnI9 A1g3djeIMkeO6TyT/0u8xCamTi3ejOWDD5gNUsOYgDeJCEvGkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBkHxM1d2biEX/WL+I7u0/H77cEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQ4M2JkMjEtOGZiYy0z NjE0LWEwZjEtMmQ1NTEwMzEwOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASASWDBvIW8FNMYfp7iDOjYrdLynUmiCkxUJc9NHhVAqID64ZZJ jKpu05j9GAY755ZQZvh8SnkopVCvna4ZoAJF2aG8R6flomLNukgj4BS6UGZFGCOq c0oYqvxkSaZ2Zd8LHRrxla/hjecP5639cXvputIOWFeB9mOFnKAXQzh/Q3bChJgU dhV9iMQKO+3m0j9L8R8Ni/vIK5V6/5aCRsXl7wHTyEKbH4Fu2KQ8F+Cxz8TsZb2n 8a6e12sE2bGjJuJZF9lTKFhs3g9UKyFC14qkmwyRbcjhKUrZb05x0LWtK6yYFqn5 vOdbvE3AUo60T6a4UVjJxx+ET5w0iK3aoVk= -----END CERTIFICATE-----Generated at Sun Apr 27 16:36:01 2025 by rpki-client