$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a146798c-6370-3f00-a928-422809580953.roa File: a146798c-6370-3f00-a928-422809580953.roa (raw, json) Hash identifier: Mx89X5y8hg3SuyaKJp4fLRoXYtkSomWXM4r6UFYJW0E= Subject key identifier: 50:2C:B0:BD:6E:31:4B:FB:D9:80:49:69:59:36:FB:2F:82:47:E2:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF690FE66BA15C24C66C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a146798c-6370-3f00-a928-422809580953.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:ea80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:69:0f:e6:6b:a1:5c:24:c6:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8fc850b7-f71e-44a9-8afa-188c502eb16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:8f:73:8b:55:7f:1c:93:b4:46:8f:73:f7: eb:14:c7:4e:32:5e:45:e6:63:11:65:21:03:b7:07: f6:84:35:c9:39:96:8d:19:4b:98:d8:ac:be:bb:30: b0:14:c6:e8:f0:d3:47:7e:17:1b:97:4b:2f:9d:7d: a4:05:eb:e9:86:87:8d:c4:ab:07:e6:65:69:c6:d0: e4:95:a1:95:ea:e1:e0:72:10:57:35:98:17:4a:49: d2:29:5d:c5:a3:38:7f:4b:e7:d6:67:d5:47:96:9d: 68:b3:5f:8f:db:40:e9:a5:88:8b:c4:80:04:a3:3c: 50:d1:ad:88:10:51:6b:45:10:7e:c2:b2:9d:d8:44: b8:79:11:0a:58:c4:8a:c0:6f:a7:36:ce:b1:f9:b1: 99:fc:de:f7:ac:55:93:01:56:1a:cb:d9:5a:84:02: 44:8f:57:26:44:c8:a6:2d:cd:5c:dc:e3:b4:1c:85: 34:17:ea:91:5b:eb:8c:ed:53:44:3a:d2:33:eb:c2: 31:ad:0b:2c:07:bd:b2:35:4b:fc:b1:dd:a7:2f:70: eb:1d:43:6c:cd:c0:23:6c:e0:0f:58:9c:e3:a8:b6: 59:13:7d:7a:db:54:e1:60:4b:71:7a:46:fa:f1:a9: ec:08:18:82:08:c7:c2:ff:16:98:1d:e6:15:f6:dd: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:B0:BD:6E:31:4B:FB:D9:80:49:69:59:36:FB:2F:82:47:E2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a146798c-6370-3f00-a928-422809580953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ea80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:71:96:ae:d8:65:5b:86:2f:7a:b0:fa:a0:19:16:3e:6f:f4: 52:2a:8a:49:23:fa:db:aa:cd:e8:1c:98:d6:66:11:36:3f:99: 08:cc:a3:ef:ea:5d:27:a8:57:fe:94:6b:c3:15:06:b7:9a:41: cc:8d:dc:63:fe:df:13:91:3b:b0:73:00:ce:7f:18:27:19:e2: a2:a8:50:5e:19:0f:27:64:51:36:8c:f7:81:1b:df:d1:e7:ea: 56:18:8d:7a:02:ed:79:c7:18:49:03:2c:01:69:7f:00:a9:6f: aa:7e:4e:2b:3d:9c:b3:00:c6:21:1c:46:b6:a3:9a:d2:80:1f: 67:66:0e:ab:3a:c3:b2:f1:b0:c8:61:88:3f:ac:b7:82:2a:59: 33:32:92:54:10:fd:ca:1b:a7:11:af:ce:2e:2b:0b:41:b0:94: db:0e:ac:c4:78:8b:8b:84:e2:78:df:79:94:48:a7:d1:d9:0f: cc:8b:d4:d2:6f:c5:87:58:84:b4:2b:16:de:0c:a1:f4:dd:70: 27:c1:b8:67:fb:9e:8d:0a:b3:f8:0e:24:38:8a:21:1c:8f:5f: a9:a2:d1:cc:a2:8a:0f:2d:02:c3:a1:84:61:ce:99:b4:21:1f: f7:9c:6f:83:48:8e:19:5e:ab:85:f8:c9:ed:1e:ac:84:c1:f6: d7:82:d3:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72kP5muhXCTGbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGZjODUwYjctZjcxZS00NGE5LThhZmEtMTg4YzUwMmViMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0qPc4tVfxyTtEaPc/frFMdOMl5F5mMRZSED twf2hDXJOZaNGUuY2Ky+uzCwFMbo8NNHfhcbl0svnX2kBevphoeNxKsH5mVpxtDk laGV6uHgchBXNZgXSknSKV3Fozh/S+fWZ9VHlp1os1+P20DppYiLxIAEozxQ0a2I EFFrRRB+wrKd2ES4eREKWMSKwG+nNs6x+bGZ/N73rFWTAVYay9lahAJEj1cmRMim Lc1c3OO0HIU0F+qRW+uM7VNEOtIz68IxrQssB72yNUv8sd2nL3DrHUNszcAjbOAP WJzjqLZZE31621ThYEtxekb68ansCBiCCMfC/xaYHeYV9t2wPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFAssL1uMUv72YBJaVk2+y+CR+KxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE0Njc5OGMtNjM3MC0z ZjAwLWE5MjgtNDIyODA5NTgwOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFxlq7YZVuGL3qw+qAZFj5v9FIqikkj+tuqzegcmNZmETY/mQjM o+/qXSeoV/6Ua8MVBreaQcyN3GP+3xORO7BzAM5/GCcZ4qKoUF4ZDydkUTaM94Eb 39Hn6lYYjXoC7XnHGEkDLAFpfwCpb6p+Tis9nLMAxiEcRrajmtKAH2dmDqs6w7Lx sMhhiD+st4IqWTMyklQQ/cobpxGvzi4rC0GwlNsOrMR4i4uE4njfeZRIp9HZD8yL 1NJvxYdYhLQrFt4MofTdcCfBuGf7no0Ks/gOJDiKIRyPX6mi0cyiig8tAsOhhGHO mbQhH/ecb4NIjhleq4X4ye0erITB9teC08s= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:29 2025 by rpki-client