$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa File: af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json) Hash identifier: PGfgKwIqmfAHRXRwexbpETS+HtODuga7w9ZcYl8Xd74= Subject key identifier: 3A:A5:4C:5A:C2:66:71:87:7E:E7:8F:43:47:5E:B7:7F:47:05:7C:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849E0BF8B4C9A911F2A4C69D9E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 30036 IP address blocks: 2604:2d80:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8b:4c:9a:91:1f:2a:4c:69:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=9d004f5e-0279-4761-ae8d-92f7645b2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:87:c8:43:33:c6:3f:17:df:88:39:1e:a1:27: 79:a7:17:44:5b:cf:67:6e:50:d4:42:61:0f:8b:43: 12:bf:bd:60:41:7d:e9:f3:84:6f:4b:d8:0e:78:08: 75:c8:e6:93:60:bc:e1:17:21:fb:67:b7:ed:13:77: 1d:62:3b:bd:42:59:ea:0e:b0:8f:3e:4a:ad:16:a8: f2:4a:cb:ff:79:dd:32:12:af:ce:43:68:8d:dd:4e: 31:15:3d:81:2a:e2:f1:7f:77:1a:ec:e2:d1:e9:33: 55:a0:31:54:45:cd:5e:19:d3:92:ed:c6:7e:1d:8e: 9b:5c:03:3c:63:b4:fe:85:e4:54:d1:d2:2d:47:36: c2:4f:37:be:8d:2e:91:53:31:c5:61:a7:85:6a:73: db:3f:bf:fc:e6:4b:83:d1:84:d8:17:1c:06:da:0e: f7:f8:92:87:00:24:bf:e4:22:91:a8:59:da:05:cf: 34:de:86:64:77:5e:f2:ec:3a:b8:80:9c:04:9d:b6: ee:41:2c:df:bf:32:9f:ff:54:c7:cf:8a:5b:97:57: e7:3f:46:a6:11:79:f2:ee:bb:90:06:97:ef:44:56: 26:93:46:81:cf:28:2c:9e:85:c5:7c:2c:c1:01:df: 71:1f:02:af:1b:50:66:2a:e7:da:0b:b0:c1:7e:96: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:4C:5A:C2:66:71:87:7E:E7:8F:43:47:5E:B7:7F:47:05:7C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7a:b7:6f:a0:6f:af:cc:45:e6:5b:92:c6:93:fd:a7:b7:27: ad:2c:e8:78:1c:ca:a0:ef:63:4a:81:33:2a:b0:4b:b3:5c:6a: f0:7b:0d:d6:b0:10:db:e5:ea:d7:ae:30:29:0f:7a:76:57:c9: 9a:84:68:b6:86:7e:68:74:4b:03:f8:d4:df:89:5a:6a:d7:a5: 42:2f:de:e3:12:bb:81:67:9e:da:2f:5b:f4:51:9f:cd:47:f9: 00:b9:6f:4e:3c:49:0e:33:2f:45:e0:45:3a:be:42:f0:e4:e8: ed:0c:24:f0:f6:94:21:96:f6:6a:04:83:7b:64:76:7a:7d:03: 57:06:2d:d4:0f:82:43:de:b0:3b:4e:a6:17:ed:54:b0:c8:07: f7:ed:79:2c:a4:4d:5c:ff:6a:8f:63:f2:ef:0c:c7:40:2e:40: 05:8a:0d:21:08:19:67:8d:67:d4:bf:2b:e9:56:61:3f:18:ea: 30:d0:1e:99:43:80:c1:ef:e3:01:db:1b:88:1f:fd:1c:76:f8: 73:f6:a5:23:dc:c7:15:9d:ee:67:da:e7:97:a6:d0:b7:d3:1c: 2a:48:4f:7f:50:36:5b:79:e3:23:c5:44:db:f6:2f:6c:a2:25: 79:7d:a3:96:5a:28:84:c6:d7:82:b5:78:03:ac:ca:da:0f:ba: 0e:ca:39:52 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEngv4tMmpEfKkxp2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk OWQwMDRmNWUtMDI3OS00NzYxLWFlOGQtOTJmNzY0NWIyNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IfIQzPGPxffiDkeoSd5pxdEW89nblDUQmEP i0MSv71gQX3p84RvS9gOeAh1yOaTYLzhFyH7Z7ftE3cdYju9QlnqDrCPPkqtFqjy Ssv/ed0yEq/OQ2iN3U4xFT2BKuLxf3ca7OLR6TNVoDFURc1eGdOS7cZ+HY6bXAM8 Y7T+heRU0dItRzbCTze+jS6RUzHFYaeFanPbP7/85kuD0YTYFxwG2g73+JKHACS/ 5CKRqFnaBc803oZkd17y7Dq4gJwEnbbuQSzfvzKf/1THz4pbl1fnP0amEXny7ruQ BpfvRFYmk0aBzygsnoXFfCzBAd9xHwKvG1BmKufaC7DBfpaoBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDqlTFrCZnGHfuePQ0det39HBXzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYyNGZhYmItYTQ0Ni0z NTkzLTliMDItNzU0NGI0ZmJiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfXq3b6Bvr8xF5luSxpP9p7cnrSzoeBzKoO9jSoEzKrBLs1xq8HsN 1rAQ2+Xq164wKQ96dlfJmoRotoZ+aHRLA/jU34laatelQi/e4xK7gWee2i9b9FGf zUf5ALlvTjxJDjMvReBFOr5C8OTo7Qwk8PaUIZb2agSDe2R2en0DVwYt1A+CQ96w O06mF+1UsMgH9+15LKRNXP9qj2Py7wzHQC5ABYoNIQgZZ41n1L8r6VZhPxjqMNAe mUOAwe/jAdsbiB/9HHb4c/alI9zHFZ3uZ9rnl6bQt9McKkhPf1A2W3njI8VE2/Yv bKIleX2jlloohMbXgrV4A6zK2g+6Dso5Ug== -----END CERTIFICATE-----Generated at Mon Jun 16 12:00:45 2025 by rpki-client