$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa File: a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa (raw, json) Hash identifier: J/lthghUiwQOdo6TQXNcwQ+yv0i9LXO1Vj1pBs8DqKc= Subject key identifier: AA:B0:9A:11:0A:DE:BD:95:5E:9F:98:0F:CD:9D:65:94:77:C3:17:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF666D7F318A27D1538080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:6800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:66:6d:7f:31:8a:27:d1:53:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=b4d34f6e-d5d8-46a0-b2e0-068327862784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:a7:6b:89:e5:c4:7a:56:c8:06:1b:b1:96: a9:5e:69:5b:1d:20:af:b9:ba:c3:be:25:94:f0:e5: 19:bb:c2:59:20:24:9d:20:79:a7:6b:5b:af:cd:d5: 35:0b:93:e7:82:b8:a0:ea:74:c4:4c:d1:30:7a:c5: e4:69:ac:b6:9d:a0:60:6b:35:cc:b4:ad:07:5b:fa: 5c:fb:41:50:31:ac:06:3b:c4:4a:62:e8:76:02:78: be:28:d0:54:9c:12:b2:44:33:4e:6b:2f:ce:9c:9d: cf:c9:d5:1f:ec:bb:b3:38:6e:ee:1b:e3:da:f6:88: c0:5a:c1:88:b6:83:51:bb:71:fa:44:d1:be:c4:3f: be:da:ec:e2:2d:19:df:91:c9:d9:14:3f:22:c1:40: e0:bd:b2:84:7f:1c:9e:a5:97:c7:29:6d:31:0a:b3: 3d:8d:81:f9:3c:7b:94:de:f8:f7:9d:c2:b5:bb:3d: f9:df:49:44:fd:b2:96:df:98:54:0b:ef:51:55:39: 94:20:29:b3:fe:d3:18:49:01:01:e2:fe:3e:d4:75: be:cc:56:8c:30:a3:03:96:31:f7:17:74:69:d9:9d: dc:92:27:55:60:cf:29:76:f5:e3:c5:3d:de:64:94: 66:9d:bb:bc:a1:7f:53:a2:6f:e4:aa:95:82:d9:a6: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:9A:11:0A:DE:BD:95:5E:9F:98:0F:CD:9D:65:94:77:C3:17:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:46:05:d1:f5:67:3c:b8:3a:d6:e2:2c:7a:7d:a8:e6:3a:13: ba:5a:0c:d9:a9:df:e5:b9:0a:1f:f5:21:e7:74:a9:44:eb:ee: 24:8d:2b:a2:af:7f:55:62:b1:9c:ff:be:3d:f5:4b:41:be:1e: 05:bf:25:a7:41:4d:c5:04:d3:7a:41:c7:6a:41:1e:37:19:67: ec:59:91:0e:bf:97:fa:db:f5:20:59:a2:98:d6:b9:a5:02:8a: 9f:66:19:c5:ab:71:ca:23:da:fe:17:94:c1:a8:2c:68:88:30: 2f:d5:09:85:33:d6:6e:4d:3a:a0:f9:04:ab:9f:03:6e:4d:e6: ef:d2:bf:43:d1:00:b1:1e:80:78:83:1d:b4:a0:88:a7:5d:4c: 2d:ff:74:c9:a9:65:49:82:d8:07:70:42:26:12:69:7f:63:68: 0f:7a:43:6b:bb:3a:e5:f9:4c:d2:72:cd:f3:d7:1b:18:8d:4c: 54:48:ea:ed:e8:b9:b5:c1:3b:65:dc:51:9b:d4:0f:bb:49:31: 3b:53:c8:eb:aa:b6:6b:35:a5:3b:0b:f1:87:35:a0:1f:90:6f: 57:36:b9:ab:8f:82:12:42:b0:08:a0:9c:3f:5d:1c:11:63:d5: c7:01:76:58:d4:3c:f9:95:4c:3d:bb:a5:22:17:3b:6f:9e:ff: 05:16:94:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72ZtfzGKJ9FTgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YjRkMzRmNmUtZDVkOC00NmEwLWIyZTAtMDY4MzI3ODYyNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6na4nlxHpWyAYbsZapXmlbHSCvubrDviWU 8OUZu8JZICSdIHmna1uvzdU1C5Pngrig6nTETNEwesXkaay2naBgazXMtK0HW/pc +0FQMawGO8RKYuh2Ani+KNBUnBKyRDNOay/OnJ3PydUf7LuzOG7uG+Pa9ojAWsGI toNRu3H6RNG+xD++2uziLRnfkcnZFD8iwUDgvbKEfxyepZfHKW0xCrM9jYH5PHuU 3vj3ncK1uz3530lE/bKW35hUC+9RVTmUICmz/tMYSQEB4v4+1HW+zFaMMKMDljH3 F3Rp2Z3ckidVYM8pdvXjxT3eZJRmnbu8oX9Tom/kqpWC2abIlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqwmhEK3r2VXp+YD82dZZR3wxetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg2MGFjYmMtZmIyYi0z ZGFmLTk0MTQtZDBjYzUzYzZkOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJGBdH1Zzy4OtbiLHp9qOY6E7paDNmp3+W5Ch/1Ied0qUTr7iSN K6Kvf1VisZz/vj31S0G+HgW/JadBTcUE03pBx2pBHjcZZ+xZkQ6/l/rb9SBZopjW uaUCip9mGcWrccoj2v4XlMGoLGiIMC/VCYUz1m5NOqD5BKufA25N5u/Sv0PRALEe gHiDHbSgiKddTC3/dMmpZUmC2AdwQiYSaX9jaA96Q2u7OuX5TNJyzfPXGxiNTFRI 6u3oubXBO2XcUZvUD7tJMTtTyOuqtms1pTsL8Yc1oB+Qb1c2uauPghJCsAignD9d HBFj1ccBdljUPPmVTD27pSIXO2+e/wUWlEk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:21 2025 by rpki-client