$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa File: be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa (raw, json) Hash identifier: OOcB3c8S/vSu2My9nwB5yCLRjrLyoWkTSmrBfhETXfU= Subject key identifier: F9:56:9F:C6:30:9E:98:DD:6E:9E:6C:D4:CA:34:31:5F:CC:EC:79:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF672C57B38492CD9AC280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:9c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:67:2c:57:b3:84:92:cd:9a:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=465845ef-1ab2-4460-8c29-f5bb80b0e317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c2:f7:10:e6:6d:0b:c5:a0:76:c3:9f:57:eb: d3:af:2c:59:4f:26:48:bb:fd:17:68:dd:43:19:10: 36:74:bd:89:0f:78:35:02:3b:6e:af:55:48:fd:4a: 41:a4:01:71:8e:5d:3d:f1:8a:9f:e5:ad:6d:b2:b9: fc:af:8a:b2:17:fe:ad:06:39:eb:60:77:a1:b0:f7: e0:06:ee:8c:08:76:84:15:cd:1f:e1:7d:89:aa:3b: 42:2b:a7:f7:ab:7d:b4:02:f5:ce:35:10:b2:2b:3e: 61:6d:64:bd:61:37:dc:08:3d:89:5c:97:9c:f7:ca: 22:c3:8f:af:ca:8f:99:d4:64:0a:fb:cc:d0:fb:c5: 14:ea:50:bc:62:42:60:f6:d8:53:64:55:78:8a:1c: 73:59:02:d9:29:68:3d:a7:a3:16:b1:bc:d0:ef:71: cd:26:c8:e2:25:84:4b:b0:f2:2c:f9:2a:6c:1f:23: 85:a8:7e:1f:92:13:93:f9:63:aa:7e:80:82:f5:2a: ec:b2:ce:ec:ce:e8:6f:8b:6a:8a:83:db:11:66:a8: 2c:8a:e6:d8:8c:84:1b:19:5e:22:51:bc:82:72:37: cd:4c:6d:f6:c3:1e:08:4e:e8:8f:52:20:97:53:7f: f0:9b:c6:22:f0:69:cb:2f:dc:7b:42:fb:df:c2:e9: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:9F:C6:30:9E:98:DD:6E:9E:6C:D4:CA:34:31:5F:CC:EC:79:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:30:83:73:37:6a:13:b1:81:dc:d5:fd:4b:84:fc:f4:b7:8c: b0:82:54:52:9b:a7:ce:22:a6:27:92:de:64:a4:e8:a2:27:7d: a2:39:90:4f:e9:01:96:db:54:79:07:87:aa:41:2c:da:ce:f5: bb:e8:04:2b:f5:94:ad:ea:b1:e0:17:7d:a1:f9:58:38:10:a4: 34:e5:dc:0f:f5:6b:96:ca:44:ac:48:18:54:d8:76:d6:a7:29: 45:45:b2:15:cf:7c:5f:23:3e:bd:0a:a5:b5:1e:16:e9:3f:de: 5a:8d:c5:7b:20:89:55:6f:4d:f2:0c:e9:d5:3d:ae:25:06:c3: 97:c7:39:c1:dc:fa:fa:0b:52:cc:6f:ca:2e:81:c6:d7:6f:38: 30:e3:b1:64:4b:ad:31:f0:5b:32:94:50:ee:0d:79:61:24:4c: a2:0e:9c:c7:74:67:f7:4c:7f:6f:7d:0c:33:5e:fe:4e:e3:f1: 0d:a3:76:9b:0a:33:fb:49:e5:1c:15:99:fe:8e:87:97:56:bb: fb:8c:e9:e1:09:a5:41:d8:77:22:4a:6d:ad:e4:87:01:b9:33: a1:3c:ed:61:bf:c3:51:88:9d:c5:4e:16:97:5a:ba:85:fa:c9: cb:42:f6:63:74:1a:95:8e:3d:f9:74:46:2f:48:4e:5e:c1:19: 5c:bb:82:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72csV7OEks2awoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDY1ODQ1ZWYtMWFiMi00NDYwLThjMjktZjViYjgwYjBlMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsL3EOZtC8WgdsOfV+vTryxZTyZIu/0XaN1D GRA2dL2JD3g1Ajtur1VI/UpBpAFxjl098Yqf5a1tsrn8r4qyF/6tBjnrYHehsPfg Bu6MCHaEFc0f4X2JqjtCK6f3q320AvXONRCyKz5hbWS9YTfcCD2JXJec98oiw4+v yo+Z1GQK+8zQ+8UU6lC8YkJg9thTZFV4ihxzWQLZKWg9p6MWsbzQ73HNJsjiJYRL sPIs+SpsHyOFqH4fkhOT+WOqfoCC9Srsss7szuhvi2qKg9sRZqgsiubYjIQbGV4i UbyCcjfNTG32wx4ITuiPUiCXU3/wm8Yi8GnLL9x7QvvfwunhAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlWn8Ywnpjdbp5s1Mo0MV/M7HmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU5YjQxMWYtMGVkMS0z NzU5LTk0MTUtZDNiNTdiOWYzZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAwg3M3ahOxgdzV/UuE/PS3jLCCVFKbp84ipieS3mSk6KInfaI5 kE/pAZbbVHkHh6pBLNrO9bvoBCv1lK3qseAXfaH5WDgQpDTl3A/1a5bKRKxIGFTY dtanKUVFshXPfF8jPr0KpbUeFuk/3lqNxXsgiVVvTfIM6dU9riUGw5fHOcHc+voL Usxvyi6BxtdvODDjsWRLrTHwWzKUUO4NeWEkTKIOnMd0Z/dMf299DDNe/k7j8Q2j dpsKM/tJ5RwVmf6Oh5dWu/uM6eEJpUHYdyJKba3khwG5M6E87WG/w1GIncVOFpda uoX6yctC9mN0GpWOPfl0Ri9ITl7BGVy7gpI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:01 2025 by rpki-client