$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9aa91258-05de-33c7-9f65-faa6f4bc8fad.roa File: 9aa91258-05de-33c7-9f65-faa6f4bc8fad.roa (raw, json) Hash identifier: YqGeVivJcbz1Y4Wn4/o09H0Lm8MVvwwCuMmGYTSb5Nk= Subject key identifier: CC:13:3F:E6:B1:8A:C1:12:8F:B0:CE:EA:C5:38:3C:11:77:01:E3:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584981912B4EAF62035AF745E400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9aa91258-05de-33c7-9f65-faa6f4bc8fad.roa Signing time: Sat 12 Apr 2025 22:45:36 +0000 ROA not before: Sat 12 Apr 2025 22:45:36 +0000 ROA not after: Fri 11 Jul 2025 22:45:36 +0000 asID: 19905 IP address blocks: 2604:2d81:1800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:91:2b:4e:af:62:03:5a:f7:45:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 12 22:45:36 2025 GMT Not After : Jul 11 22:45:36 2025 GMT Subject: CN=0927ed01-cd57-4551-9045-b76a1f0956d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:90:fb:2d:96:f6:ac:43:2c:62:2c:e7:18: 9b:9f:a7:b9:47:da:6c:00:1e:db:30:a4:be:67:d3: 7e:56:5a:2d:fd:06:d6:94:6f:f0:e9:86:b5:a4:84: 3b:04:05:72:50:c2:12:ea:ee:2a:39:0e:77:12:65: 04:3b:02:aa:66:79:53:00:b2:60:cd:04:35:15:3c: 3d:77:46:2b:45:3a:04:7a:44:c0:4b:0f:71:29:4b: a9:cb:ad:ca:ee:df:ac:fb:6a:11:f7:18:32:c2:79: bc:dc:93:7c:74:a0:2e:cf:f7:e7:58:af:ff:af:21: 15:d9:cd:81:9c:bf:cd:9b:f6:75:37:ec:fc:4d:29: 67:77:7f:51:44:a4:29:ef:9d:c7:a2:04:ee:be:32: c7:70:15:3b:2d:ed:14:26:c2:5a:54:b8:e6:7f:66: a3:67:e4:0a:0d:16:91:c3:40:1e:fc:d3:ac:85:8b: 7d:0d:37:f0:cf:ea:8a:0f:24:24:e1:a0:b8:7e:0d: 90:42:6c:30:e8:e6:7e:16:98:c7:3c:9f:25:bd:89: 9a:00:21:e2:40:2d:80:a2:a4:b8:e2:f4:5d:04:04: 4f:e0:f0:11:d4:a1:83:b9:28:50:e4:71:ec:22:c7: 1c:32:bc:c1:3a:9a:00:c8:52:2a:b7:d8:1a:6d:b7: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:13:3F:E6:B1:8A:C1:12:8F:B0:CE:EA:C5:38:3C:11:77:01:E3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9aa91258-05de-33c7-9f65-faa6f4bc8fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4c:10:c5:05:fb:7d:7e:4e:50:21:b4:67:37:63:4d:30:7e: 15:f3:7d:85:30:5e:29:ca:24:88:9a:01:e5:c0:07:d2:bf:a7: 6d:65:82:34:79:c4:f5:68:13:35:3e:40:7b:8f:47:f3:09:72: e6:0e:04:b0:ca:b8:d5:01:2d:35:82:82:00:01:fb:e1:de:d6: 40:b3:c4:be:b9:a3:04:cd:bf:22:71:9b:47:ed:06:b3:c3:eb: 15:ab:44:ba:78:97:99:40:fe:0f:d4:05:86:bd:64:2f:45:b9: 27:08:8c:72:5d:0a:75:5d:c5:ac:17:94:67:eb:f8:81:03:0f: d1:20:46:57:96:bf:1d:d2:64:bf:9b:4d:40:37:0a:bc:a4:15: ef:3d:f2:38:dc:18:48:5e:1c:20:ed:83:57:db:d0:23:d6:1f: d3:5f:98:f1:99:0d:fa:c4:e8:66:1b:9d:4e:f0:9b:1e:6a:f4: f3:e4:e9:fb:81:98:aa:1b:0f:bb:5f:ac:5c:e7:4c:6a:ce:f9: 91:e2:77:ca:dc:bb:42:c1:67:8e:d7:91:de:ff:19:4b:a1:be: 90:e6:2e:97:ec:66:f1:1f:ed:23:2e:59:4f:90:ad:65:37:37: 04:e4:34:fb:1a:e2:d3:38:5c:2a:90:5a:c3:8f:47:69:d9:20: a2:dc:37:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmBkStOr2IDWvdF5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxMjIyNDUzNloXDTI1MDcxMTIyNDUzNlowLzEtMCsGA1UEAxMk MDkyN2VkMDEtY2Q1Ny00NTUxLTkwNDUtYjc2YTFmMDk1NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRmQ+y2W9qxDLGIs5xibn6e5R9psAB7bMKS+ Z9N+Vlot/QbWlG/w6Ya1pIQ7BAVyUMIS6u4qOQ53EmUEOwKqZnlTALJgzQQ1FTw9 d0YrRToEekTASw9xKUupy63K7t+s+2oR9xgywnm83JN8dKAuz/fnWK//ryEV2c2B nL/Nm/Z1N+z8TSlnd39RRKQp753HogTuvjLHcBU7Le0UJsJaVLjmf2ajZ+QKDRaR w0Ae/NOshYt9DTfwz+qKDyQk4aC4fg2QQmww6OZ+FpjHPJ8lvYmaACHiQC2AoqS4 4vRdBARP4PAR1KGDuShQ5HHsIsccMrzBOpoAyFIqt9gabbcRpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwTP+axisESj7DO6sU4PBF3AeNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWFhOTEyNTgtMDVkZS0z M2M3LTlmNjUtZmFhNmY0YmM4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJMEMUF+31+TlAhtGc3Y00wfhXzfYUwXinKJIiaAeXAB9K/p21l gjR5xPVoEzU+QHuPR/MJcuYOBLDKuNUBLTWCggAB++He1kCzxL65owTNvyJxm0ft BrPD6xWrRLp4l5lA/g/UBYa9ZC9FuScIjHJdCnVdxawXlGfr+IEDD9EgRleWvx3S ZL+bTUA3CrykFe898jjcGEheHCDtg1fb0CPWH9NfmPGZDfrE6GYbnU7wmx5q9PPk 6fuBmKobD7tfrFznTGrO+ZHid8rcu0LBZ47Xkd7/GUuhvpDmLpfsZvEf7SMuWU+Q rWU3NwTkNPsa4tM4XCqQWsOPR2nZIKLcN60= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:04 2025 by rpki-client