$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa File: cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa (raw, json) Hash identifier: MyDG3X5KWr3Aue9VYWabF5pbp7prK0wBgYx2xJrkZH0= Subject key identifier: E2:EE:5F:39:61:3A:50:28:A0:25:7C:60:D8:98:B0:DD:49:3F:18:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3B1D569E38CFE379E300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:ec80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:1d:56:9e:38:cf:e3:79:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f17392aa-d06f-4126-ad2f-4b129701f100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:5a:f2:00:86:b7:cb:d5:63:fe:8f:99:b6: 1e:8c:98:0f:52:ff:2d:e8:5f:0f:14:55:39:39:e5: 63:5a:ff:43:4e:e4:61:cf:88:b8:fb:4d:6a:a3:0a: 7b:75:19:98:17:12:48:60:64:40:6e:96:c9:09:ce: 89:18:47:cd:86:79:f2:54:37:d8:15:8e:c4:d9:ac: 55:05:6f:e8:a1:f8:6a:69:9e:5b:f8:a9:f3:eb:91: d3:de:a0:a0:cb:65:35:6f:08:63:fa:b1:12:86:5f: eb:a2:70:0c:39:29:0b:8c:e1:44:2a:79:d6:06:06: 52:4e:b3:74:54:89:92:3e:f8:cc:34:c3:d6:46:f5: 54:2d:ad:bb:08:36:af:63:60:76:c9:0b:8c:55:64: 61:2a:09:e2:02:89:a2:84:b0:e0:52:2f:73:e0:a3: ae:79:d6:a4:f3:5b:ba:6b:4e:f9:7b:ad:86:95:fe: 8f:da:0e:3e:39:32:a5:c4:69:79:d8:57:ec:24:39: 30:1d:cc:5c:05:e9:02:94:67:b5:bb:a0:40:c8:fd: 03:2b:a3:5c:c5:7b:c4:e3:a2:98:f1:43:ba:f4:c5: 87:11:62:ff:9b:2f:b9:6b:79:5a:20:98:bd:c7:97: 63:8f:7a:5d:17:47:1a:c6:bd:8a:9b:a7:77:21:83: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EE:5F:39:61:3A:50:28:A0:25:7C:60:D8:98:B0:DD:49:3F:18:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd290f5a-573d-3cb2-a1bc-6f35a13e262f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ec80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:83:97:83:ce:dd:19:ea:1d:5c:bd:c1:2e:15:b6:5e:df: f2:db:34:ad:1c:b0:f2:2f:17:c8:7b:c7:b7:7c:6a:8f:7a:ae: 7f:df:c8:a4:a2:2a:93:8a:02:29:bd:64:3a:75:5b:66:cb:33: bf:c1:ca:6f:eb:51:00:2e:7b:31:79:ef:25:9e:dc:81:0a:a6: 5f:b9:a0:1b:90:1d:80:a5:2f:44:f4:84:88:25:eb:11:d1:db: 28:19:43:0e:24:77:e4:a1:8c:67:40:32:b5:54:0e:93:e8:fb: 38:6b:39:47:cf:59:5e:49:97:49:52:e9:f9:9e:1a:0f:cc:c7: 39:84:b8:17:52:5d:f7:23:42:e1:ff:24:b4:24:e9:9f:e8:9d: 7c:a3:ea:c5:ad:eb:9c:77:45:14:2e:7d:1b:a4:6d:70:dc:4e: b8:4e:7e:2b:63:41:fe:44:76:06:a4:5b:6b:51:be:85:fa:1c: 6f:c6:01:7f:60:3f:80:62:f1:44:06:01:27:fd:ab:31:37:15: ae:eb:49:8a:db:4c:61:f2:37:33:1d:ee:94:8f:bd:b1:ca:ff: 6e:1b:98:2a:1a:15:e3:6f:1f:71:83:ca:96:cf:96:b4:d0:36: 80:e9:5c:43:58:9e:2f:5f:09:4d:59:7a:a8:11:02:b8:dc:dd: 37:74:63:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujsdVp44z+N54wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjE3MzkyYWEtZDA2Zi00MTI2LWFkMmYtNGIxMjk3MDFmMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR9a8gCGt8vVY/6PmbYejJgPUv8t6F8PFFU5 OeVjWv9DTuRhz4i4+01qowp7dRmYFxJIYGRAbpbJCc6JGEfNhnnyVDfYFY7E2axV BW/oofhqaZ5b+Knz65HT3qCgy2U1bwhj+rEShl/ronAMOSkLjOFEKnnWBgZSTrN0 VImSPvjMNMPWRvVULa27CDavY2B2yQuMVWRhKgniAomihLDgUi9z4KOuedak81u6 a075e62Glf6P2g4+OTKlxGl52FfsJDkwHcxcBekClGe1u6BAyP0DK6NcxXvE46KY 8UO69MWHEWL/my+5a3laIJi9x5djj3pdF0caxr2Km6d3IYNHUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLuXzlhOlAooCV8YNiYsN1JPxiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2QyOTBmNWEtNTczZC0z Y2IyLWExYmMtNmYzNWExM2UyNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpjg5eDzt0Z6h1cvcEuFbZe3/LbNK0csPIvF8h7x7d8ao96rn/f yKSiKpOKAim9ZDp1W2bLM7/Bym/rUQAuezF57yWe3IEKpl+5oBuQHYClL0T0hIgl 6xHR2ygZQw4kd+ShjGdAMrVUDpPo+zhrOUfPWV5Jl0lS6fmeGg/MxzmEuBdSXfcj QuH/JLQk6Z/onXyj6sWt65x3RRQufRukbXDcTrhOfitjQf5EdgakW2tRvoX6HG/G AX9gP4Bi8UQGASf9qzE3Fa7rSYrbTGHyNzMd7pSPvbHK/24bmCoaFeNvH3GDypbP lrTQNoDpXENYni9fCU1ZeqgRArjc3Td0Y9c= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:33 2025 by rpki-client