$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa File: bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa (raw, json) Hash identifier: mgNYokzgE8FRyUAFvvHP+x7cUmQMOA3EBb+UVaA03pA= Subject key identifier: 51:4E:52:6F:44:A3:9A:B0:8E:D6:FA:72:4B:6F:DA:6A:26:D1:1C:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1B4EF28A174AAAA05730 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:7880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:4e:f2:8a:17:4a:aa:a0:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8c70af6a-d30c-4839-9630-6e99c2327207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:87:2b:3e:36:25:e5:df:46:0f:41:7c:d9: 14:9d:d6:82:b1:76:8c:ba:89:be:2f:9e:95:c5:50: ff:4d:91:f9:71:13:1b:7e:ce:ae:48:61:bc:16:15: 4a:36:43:80:dd:f7:92:81:3c:47:cc:4b:f4:bf:7e: 1a:16:0f:69:e2:a9:00:a4:93:ae:86:9b:4a:ff:47: 26:df:69:e0:5f:c8:1e:ce:03:23:68:5c:98:5f:9b: 07:36:0d:bd:5d:c0:69:0f:52:0d:3d:9a:ae:a2:39: 32:7d:f3:30:91:8e:cd:75:e7:22:64:7b:45:d8:c5: e7:ba:85:df:c1:e9:1a:32:da:84:f7:c9:5f:a2:c0: 10:d6:44:fd:e6:ff:9a:38:ac:6a:03:23:c3:c5:cc: 8b:dd:65:d1:fd:63:de:9f:f6:f9:5c:5c:79:90:10: 9a:16:c3:92:58:57:9a:8c:c9:1d:df:56:ae:03:e5: c7:81:4f:9e:62:21:87:17:2b:3e:50:ce:88:21:dc: 62:6f:f3:8f:0d:02:2a:2f:85:01:72:b3:6a:19:fa: f9:10:90:d8:41:88:3a:ca:e7:9b:9d:0d:b5:8c:4e: ad:5d:92:3f:c4:33:4f:76:71:2f:ed:5d:fe:b8:d9: 81:5b:e4:47:67:ea:ac:9a:af:a3:3a:92:5f:58:36: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:52:6F:44:A3:9A:B0:8E:D6:FA:72:4B:6F:DA:6A:26:D1:1C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ef:d5:cf:9c:dc:fb:57:1d:f2:1e:c6:71:b1:06:fa:a7:03: d4:c1:af:e9:67:ea:ac:5f:89:f7:5f:be:d0:f0:a8:d4:20:f1: 43:d4:46:fa:de:89:54:58:4d:39:56:05:e4:bc:7e:b8:50:71: 24:47:4b:e7:3d:c0:bc:d9:5d:c0:6e:7f:ad:47:3e:da:4c:e1: f1:dd:0c:30:99:47:29:7a:22:24:a0:ac:df:94:38:1a:3c:96: 67:81:1d:29:14:45:e6:8e:82:5b:f5:86:d7:68:cb:3f:cf:57: 8c:aa:d8:b5:0c:ec:6b:40:8e:0b:35:6a:36:08:a8:ba:03:60: e0:95:17:af:77:c0:50:68:28:af:a6:94:fc:37:a2:4d:dc:e1: a9:f6:00:ed:39:91:c0:b0:95:05:b3:82:84:10:7b:2e:73:da: 64:bf:b4:02:06:17:fb:a5:7e:46:c3:c3:44:28:3d:e6:02:49: 64:4f:ab:92:76:4c:dc:cb:6d:42:dd:2a:f3:07:84:36:4f:3c: f8:62:94:5f:d7:5e:0e:a2:96:2c:ee:1b:6e:34:7a:a7:52:00: a2:1e:b3:d0:ec:3f:a8:7f:93:23:f5:5b:39:d4:3d:bc:5b:63: 54:00:5a:34:be:77:b1:1d:7b:0b:0a:e0:1b:82:52:0a:d2:c3: 4f:92:ff:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhtO8ooXSqqgVzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGM3MGFmNmEtZDMwYy00ODM5LTk2MzAtNmU5OWMyMzI3MjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8eHKz42JeXfRg9BfNkUndaCsXaMuom+L56V xVD/TZH5cRMbfs6uSGG8FhVKNkOA3feSgTxHzEv0v34aFg9p4qkApJOuhptK/0cm 32ngX8gezgMjaFyYX5sHNg29XcBpD1INPZquojkyffMwkY7NdeciZHtF2MXnuoXf wekaMtqE98lfosAQ1kT95v+aOKxqAyPDxcyL3WXR/WPen/b5XFx5kBCaFsOSWFea jMkd31auA+XHgU+eYiGHFys+UM6IIdxib/OPDQIqL4UBcrNqGfr5EJDYQYg6yueb nQ21jE6tXZI/xDNPdnEv7V3+uNmBW+RHZ+qsmq+jOpJfWDauyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFOUm9Eo5qwjtb6cktv2mom0RzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmNzI4ZjUtZmUyZi0z YzlhLWI1ZDgtMjU2OWZjOWIyMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACTv1c+c3PtXHfIexnGxBvqnA9TBr+ln6qxfifdfvtDwqNQg8UPU RvreiVRYTTlWBeS8frhQcSRHS+c9wLzZXcBuf61HPtpM4fHdDDCZRyl6IiSgrN+U OBo8lmeBHSkUReaOglv1htdoyz/PV4yq2LUM7GtAjgs1ajYIqLoDYOCVF693wFBo KK+mlPw3ok3c4an2AO05kcCwlQWzgoQQey5z2mS/tAIGF/ulfkbDw0QoPeYCSWRP q5J2TNzLbULdKvMHhDZPPPhilF/XXg6ilizuG240eqdSAKIes9DsP6h/kyP1WznU PbxbY1QAWjS+d7EdewsK4BuCUgrSw0+S/xs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:01:00 2025 by rpki-client