$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa File: a1893040-a1c9-3e17-a413-e2c3c75567de.roa (raw, json) Hash identifier: P1zlFDs4QH8YmesYW/JlbgLGtlZuSJQJdYQLQOWHtyo= Subject key identifier: 28:01:D6:55:E8:B3:D3:B6:0F:F0:DB:AB:0F:BB:FF:A2:E1:17:D2:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848D960DCBF3BBBF4F0B61D9E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa Signing time: Tue 11 Feb 2025 16:52:28 +0000 ROA not before: Tue 11 Feb 2025 16:52:28 +0000 ROA not after: Mon 12 May 2025 15:52:28 +0000 asID: 30036 IP address blocks: 2604:2d80:3e80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:60:dc:bf:3b:bb:f4:f0:b6:1d:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 11 16:52:28 2025 GMT Not After : May 12 15:52:28 2025 GMT Subject: CN=6095c7d4-6bf3-47af-9611-86f448d36e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:fa:6d:a8:27:99:5e:1a:7c:ee:20:86:ee: 3e:6a:fb:e0:66:bc:a1:23:c5:f2:12:a7:7a:17:8a: b4:48:32:7d:9d:d4:ee:a2:15:ab:70:3b:3e:df:fb: 8b:80:0e:4b:c8:9f:45:35:bd:5b:2c:b8:f0:6e:69: 63:af:70:fe:5c:1d:37:48:9e:18:f9:f9:7d:9d:68: 47:7e:00:1c:ce:1c:47:ab:e0:54:d3:a5:40:8c:f0: 75:23:5f:28:79:15:3a:01:b2:d7:5f:77:1b:3b:b4: 9c:d7:f6:80:fd:03:35:e7:96:58:13:33:74:0a:66: 96:88:ef:31:86:ac:b5:38:0a:d6:fa:60:38:d1:4e: dd:18:8d:e8:90:49:21:f7:e5:23:87:a2:52:37:67: 9a:aa:2a:08:e1:4f:70:6c:62:e4:41:10:2b:3b:d7: 8d:f3:c2:6d:d5:30:22:b0:ce:8c:b0:aa:4f:ae:c3: 6c:47:25:ed:d7:f2:fa:34:30:2e:f0:0e:61:ea:45: d2:e7:93:d3:ee:6b:ca:83:0d:78:67:22:69:2c:11: 8e:77:c5:3d:98:01:77:a6:aa:13:b5:57:63:26:8a: 2c:0d:46:f9:2f:82:45:72:04:70:9c:44:c1:0b:f3: 9a:07:fd:e7:0a:77:7b:0c:0c:16:6d:74:8e:b7:0c: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:D6:55:E8:B3:D3:B6:0F:F0:DB:AB:0F:BB:FF:A2:E1:17:D2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3e80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1c:eb:89:d9:d9:f7:c6:4b:4e:a2:8f:ff:50:47:49:4d:16: c3:81:a8:d7:1b:65:88:4c:9a:c0:80:c6:a1:cf:61:1d:8b:33: 46:44:ab:b6:a5:71:42:65:c1:c3:26:3c:46:2e:e0:fb:d7:58: 0b:b4:59:e9:ec:8f:3e:c0:37:7d:07:80:19:98:8c:11:2b:95: 41:d6:92:35:b8:c6:c6:ee:d0:03:12:4e:dc:3b:aa:02:82:b0: 7a:93:63:a8:2c:75:00:4e:f7:c6:c0:f5:54:b0:d9:65:c7:fd: 88:12:a7:b0:f7:96:00:fe:12:35:ab:5b:e3:13:b0:c8:3e:89: 88:e9:be:c2:36:4f:45:0c:d7:dd:e6:5c:a9:4e:88:a0:5f:0a: 84:be:77:6c:a6:82:da:81:05:a7:7f:58:02:d5:ed:71:7e:d1: 1d:81:07:f3:c0:8a:b9:0b:d8:23:06:b8:81:5c:47:df:0e:db: b4:bd:f9:ec:70:ed:9c:84:1a:9c:8e:5b:ca:a9:36:af:ae:1a: d0:17:b5:45:e1:1b:24:cb:51:f9:fb:3d:c4:01:f2:dd:67:15: 4d:ba:39:e7:de:52:bc:cb:ce:44:b9:4d:06:c7:a1:36:ea:41: 2f:e3:5e:ed:fc:e7:97:f2:c5:80:b6:8a:ab:c9:6f:b2:ff:68: 7d:8e:0f:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjZYNy/O7v08LYdnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIxMTE2NTIyOFoXDTI1MDUxMjE1NTIyOFowLzEtMCsGA1UEAxMk NjA5NWM3ZDQtNmJmMy00N2FmLTk2MTEtODZmNDQ4ZDM2ZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwD6bagnmV4afO4ghu4+avvgZryhI8XyEqd6 F4q0SDJ9ndTuohWrcDs+3/uLgA5LyJ9FNb1bLLjwbmljr3D+XB03SJ4Y+fl9nWhH fgAczhxHq+BU06VAjPB1I18oeRU6AbLXX3cbO7Sc1/aA/QM155ZYEzN0CmaWiO8x hqy1OArW+mA40U7dGI3okEkh9+Ujh6JSN2eaqioI4U9wbGLkQRArO9eN88Jt1TAi sM6MsKpPrsNsRyXt1/L6NDAu8A5h6kXS55PT7mvKgw14ZyJpLBGOd8U9mAF3pqoT tVdjJoosDUb5L4JFcgRwnETBC/OaB/3nCnd7DAwWbXSOtwyezwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgB1lXos9O2D/Dbqw+7/6LhF9IBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE4OTMwNDAtYTFjOS0z ZTE3LWE0MTMtZTJjM2M3NTU2N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcc64nZ2ffGS06ij/9QR0lNFsOBqNcbZYhMmsCAxqHPYR2LM0ZE q7alcUJlwcMmPEYu4PvXWAu0Wensjz7AN30HgBmYjBErlUHWkjW4xsbu0AMSTtw7 qgKCsHqTY6gsdQBO98bA9VSw2WXH/YgSp7D3lgD+EjWrW+MTsMg+iYjpvsI2T0UM 193mXKlOiKBfCoS+d2ymgtqBBad/WALV7XF+0R2BB/PAirkL2CMGuIFcR98O27S9 +exw7ZyEGpyOW8qpNq+uGtAXtUXhGyTLUfn7PcQB8t1nFU26OefeUrzLzkS5TQbH oTbqQS/jXu3855fyxYC2iqvJb7L/aH2OD6k= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:34 2025 by rpki-client