$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa File: a95f9b31-d487-3b38-84a7-bad66aec3412.roa (raw, json) Hash identifier: 4fXIm3FRhVYEZCtSlNbIFWSgU8LZ2KnCMOZ5phDHI64= Subject key identifier: 85:72:2A:CB:58:74:D7:1B:B7:45:1B:09:61:E6:BE:E9:2A:DF:FE:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49C8ACE5742F6F7077520 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:2400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9c:8a:ce:57:42:f6:f7:07:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5b232360-724d-40e5-bd55-fc38e1255fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a5:75:e3:6c:2e:96:0e:9a:44:15:97:23:c1: e6:2f:75:c0:44:04:c5:62:01:09:8a:97:5e:30:c8: 6a:01:3a:23:64:a9:bb:32:57:d7:59:f7:a4:3a:31: 86:bf:10:d2:95:e3:a0:fa:65:16:18:e9:3d:43:ad: e9:30:56:26:8e:51:3f:e1:be:89:79:d5:34:8c:f5: 87:c3:ed:0e:e0:04:ba:51:c6:7a:2d:64:c8:6a:58: 46:4e:de:d6:b7:75:b1:57:70:40:53:60:78:0f:bf: e4:a2:7f:25:35:ce:c1:37:a9:3b:5c:bb:18:7a:96: a1:c5:75:9e:e2:bc:78:5f:7b:11:50:76:25:9e:cd: 80:7f:cd:60:c0:79:f4:d2:39:89:f2:89:74:ae:4a: 67:83:d5:74:5f:14:c0:cf:1b:d6:9c:63:45:85:8e: e1:de:fe:ae:3c:55:d7:32:b9:8d:c8:3e:47:9b:98: f0:5c:d0:23:0c:83:78:98:f8:80:66:e2:24:35:11: 3e:17:1e:fd:5e:36:80:a3:f5:eb:7c:c7:c6:5b:ec: c7:e6:f6:50:2e:e6:82:fc:f4:23:e3:f3:df:33:97: 1b:25:d4:ea:df:43:51:fe:59:e5:3e:fb:18:3a:37: d6:49:98:7c:f3:dc:20:ee:fd:a7:8e:20:5d:46:d8: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:2A:CB:58:74:D7:1B:B7:45:1B:09:61:E6:BE:E9:2A:DF:FE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2d:93:f7:8a:22:fe:36:af:00:25:7d:1b:7c:51:14:13:8a: 0e:44:66:8f:0a:16:7c:c1:6f:9c:68:7d:00:ac:5c:18:56:7e: a0:da:ae:86:5e:07:6c:31:e2:d1:57:f1:3f:8f:98:29:fc:45: 85:4c:9a:31:be:16:7e:1b:ad:2b:ee:52:f4:2c:cb:ea:08:14: 6a:de:d5:8f:76:ea:1a:a7:23:d8:27:d0:22:fd:08:71:2b:35: f1:9d:65:21:b5:d9:ec:f6:fe:6e:d2:fa:8e:9f:8f:e0:c3:61: d6:66:f3:44:0a:35:7a:24:ca:2c:fc:bb:25:7a:5d:7d:a8:fc: 88:cc:4b:a9:05:8e:0a:40:0b:8d:0c:b0:f2:a2:0d:bc:e4:54: 34:52:65:bf:60:3f:83:7d:f3:ee:f0:08:d5:5c:2e:8e:bc:44: c0:76:14:47:de:04:a7:af:1a:d6:08:05:dd:58:0d:c1:fe:f7: 2d:9e:6e:2e:7b:94:27:de:d3:17:73:3f:65:26:57:c6:d4:c0: a9:52:ef:8b:da:a4:b1:5e:9a:95:fe:54:11:e1:18:df:96:c3: 01:9f:4e:dc:a6:ec:43:4d:22:93:50:d9:23:d3:1e:40:6f:85: a6:c6:5a:f6:19:a4:c6:3c:cc:cf:d6:c5:33:09:87:0e:8e:12: 2f:6c:e5:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJyKzldC9vcHdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWIyMzIzNjAtNzI0ZC00MGU1LWJkNTUtZmMzOGUxMjU1ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKV142wulg6aRBWXI8HmL3XARATFYgEJipde MMhqATojZKm7MlfXWfekOjGGvxDSleOg+mUWGOk9Q63pMFYmjlE/4b6JedU0jPWH w+0O4AS6UcZ6LWTIalhGTt7Wt3WxV3BAU2B4D7/kon8lNc7BN6k7XLsYepahxXWe 4rx4X3sRUHYlns2Af81gwHn00jmJ8ol0rkpng9V0XxTAzxvWnGNFhY7h3v6uPFXX MrmNyD5Hm5jwXNAjDIN4mPiAZuIkNRE+Fx79XjaAo/XrfMfGW+zH5vZQLuaC/PQj 4/PfM5cbJdTq30NR/lnlPvsYOjfWSZh889wg7v2njiBdRtiOyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVyKstYdNcbt0UbCWHmvukq3/65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk1ZjliMzEtZDQ4Ny0z YjM4LTg0YTctYmFkNjZhZWMzNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEtk/eKIv42rwAlfRt8URQTig5EZo8KFnzBb5xofQCsXBhWfqDa roZeB2wx4tFX8T+PmCn8RYVMmjG+Fn4brSvuUvQsy+oIFGre1Y926hqnI9gn0CL9 CHErNfGdZSG12ez2/m7S+o6fj+DDYdZm80QKNXokyiz8uyV6XX2o/IjMS6kFjgpA C40MsPKiDbzkVDRSZb9gP4N98+7wCNVcLo68RMB2FEfeBKevGtYIBd1YDcH+9y2e bi57lCfe0xdzP2UmV8bUwKlS74vapLFempX+VBHhGN+WwwGfTtym7ENNIpNQ2SPT HkBvhabGWvYZpMY8zM/WxTMJhw6OEi9s5T4= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:23 2025 by rpki-client