$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa File: ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa (raw, json) Hash identifier: jSQSXPDrJYFROKctZUZp4HD9F1OnRWx2y7r6ToQvYhw= Subject key identifier: 1C:82:0D:75:9C:84:E4:3D:C9:C3:C4:72:AE:C0:E0:5C:67:60:84:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA23758B89C14D53811E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:ba00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:23:75:8b:89:c1:4d:53:81:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fe463d8f-d5b8-47a9-a12c-d381cbafd7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:b6:44:53:ba:a3:a1:75:de:10:c6:fd:0b: 2a:f8:28:d0:bf:1a:2e:45:4d:4a:5e:97:ae:e5:88: c5:b7:63:ea:ec:45:7e:d4:54:2c:eb:5b:ed:e6:36: 8a:ac:d5:0e:82:43:f4:83:45:0b:50:9b:02:5a:3c: d9:ef:5c:46:a2:61:d6:12:1e:1b:21:1f:77:5c:88: 83:eb:84:71:19:a4:83:44:12:c1:05:3a:af:67:86: 33:1d:12:e0:c4:24:37:b5:4b:fa:11:ea:01:2b:9e: e6:5d:0f:3a:e4:96:e3:1e:d9:00:ac:6f:2a:8a:3d: b0:fa:ad:a1:f7:81:c1:23:16:fd:f1:1b:1b:b5:8b: f0:12:cb:26:1f:c8:f9:ae:ad:5c:2c:9b:a3:b8:a5: 60:24:65:49:a9:10:0d:de:28:86:11:8f:94:fc:8c: 78:b6:4e:a6:30:0d:55:4f:e0:b9:a7:87:e0:c9:97: 6c:13:34:b5:87:a7:4d:5a:bd:fe:5f:92:8f:6e:5b: e7:a1:8e:dc:8d:13:28:42:d3:07:66:0f:93:30:2b: ae:e5:73:e0:12:fe:67:ae:ef:6d:1d:43:27:ad:fa: bb:80:e3:b4:37:1b:fc:56:7b:14:76:a7:29:7b:a3: a4:77:78:8d:11:04:03:a6:a7:d2:8f:d9:ab:ed:16: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:0D:75:9C:84:E4:3D:C9:C3:C4:72:AE:C0:E0:5C:67:60:84:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ba00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:72:47:7f:3c:f8:3d:80:ab:70:85:e4:22:68:4e:1f:e9:12: 2f:e5:8b:b0:78:82:ba:45:b3:fb:c2:ea:16:65:cc:6c:8a:a0: ee:9f:31:4c:dd:cf:ea:9e:d7:24:24:c9:28:56:7c:44:43:db: d3:78:51:40:32:fa:99:c7:55:f1:34:81:f2:8d:ae:64:e0:73: 6e:62:89:eb:11:13:74:54:01:d0:f0:70:48:c7:d0:1e:59:cf: 3a:eb:32:4c:c0:b1:ee:b2:f9:3f:cd:98:da:b6:0a:60:7a:98: e9:fd:7e:57:36:78:4b:5a:b9:47:94:fd:1c:95:cf:c7:bb:f7: f7:fb:a2:0c:1a:e6:6b:32:ee:80:1c:5e:6d:48:72:a2:e3:c3: f1:ad:34:b5:0f:28:e8:df:16:eb:ab:d8:17:39:3c:b6:28:61: d1:e2:47:88:a3:98:81:9d:14:db:3e:59:39:1e:3e:68:63:25: c0:8c:01:d3:4e:54:6c:78:87:b0:4d:9b:2f:f3:f7:8c:c9:c4: d0:d1:6c:3f:21:9e:47:00:4f:15:7d:80:19:8a:27:d4:2d:bc: 15:89:a9:0e:66:6f:27:cc:c8:cd:a7:a1:68:32:92:7e:f7:3b: d3:73:58:ad:de:2f:9b:9b:40:b4:b5:ca:b8:f8:a4:45:5b:8e: f8:e0:ba:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuiN1i4nBTVOBHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmU0NjNkOGYtZDViOC00N2E5LWExMmMtZDM4MWNiYWZkN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsi2RFO6o6F13hDG/Qsq+CjQvxouRU1KXpeu 5YjFt2Pq7EV+1FQs61vt5jaKrNUOgkP0g0ULUJsCWjzZ71xGomHWEh4bIR93XIiD 64RxGaSDRBLBBTqvZ4YzHRLgxCQ3tUv6EeoBK57mXQ865JbjHtkArG8qij2w+q2h 94HBIxb98RsbtYvwEssmH8j5rq1cLJujuKVgJGVJqRAN3iiGEY+U/Ix4tk6mMA1V T+C5p4fgyZdsEzS1h6dNWr3+X5KPblvnoY7cjRMoQtMHZg+TMCuu5XPgEv5nru9t HUMnrfq7gOO0Nxv8VnsUdqcpe6Okd3iNEQQDpqfSj9mr7RYZ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFByCDXWchOQ9ycPEcq7A4FxnYITgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ1MzJmZjktYTcwMC0z ZjJiLThmNzgtNDliNmJmMjJkOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNyR388+D2Aq3CF5CJoTh/pEi/li7B4grpFs/vC6hZlzGyKoO6f MUzdz+qe1yQkyShWfERD29N4UUAy+pnHVfE0gfKNrmTgc25iiesRE3RUAdDwcEjH 0B5ZzzrrMkzAse6y+T/NmNq2CmB6mOn9flc2eEtauUeU/RyVz8e79/f7ogwa5msy 7oAcXm1IcqLjw/GtNLUPKOjfFuur2Bc5PLYoYdHiR4ijmIGdFNs+WTkePmhjJcCM AdNOVGx4h7BNmy/z94zJxNDRbD8hnkcATxV9gBmKJ9QtvBWJqQ5mbyfMyM2noWgy kn73O9NzWK3eL5ubQLS1yrj4pEVbjvjguvk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:57 2025 by rpki-client