$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa File: dcb72002-8047-3edf-a936-3dee6f950e1f.roa (raw, json) Hash identifier: zkyPyuGp0dC9VVv+V65FaAptTKbKcsNY3xCcQ59ZaCQ= Subject key identifier: 72:23:32:C0:5A:D8:6A:C3:A7:CB:24:8F:52:53:89:A7:29:C0:32:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA22BFE5B1BF9F1563E9E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:1f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:22:bf:e5:b1:bf:9f:15:63:e9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=655836ce-0828-4966-a3f8-b080395a147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:e0:7e:d1:dc:bb:3e:28:5a:f4:d3:d5:59: 90:58:20:9b:3b:68:1c:17:c5:40:4b:66:e4:84:3c: c5:a5:fb:e1:71:76:de:04:2a:40:79:4f:e3:9c:03: 71:9b:69:0e:0a:30:54:31:35:62:fa:a4:b8:49:c0: 3a:70:24:9a:77:a9:b2:81:4d:cb:2c:ae:46:94:9b: 3e:ea:72:74:b0:cd:47:72:78:14:1c:f1:a5:07:f1: bf:b6:42:6a:9a:3e:df:9c:d7:65:92:cf:53:d6:53: 3b:fc:7f:48:f7:47:a7:16:ac:f2:f8:97:93:34:41: 55:94:5d:7e:fc:20:b8:20:05:1b:29:91:3b:c1:4b: 55:f2:8b:5a:60:6c:ac:01:33:26:80:b9:51:e0:09: 89:d8:3b:49:3c:4f:58:db:6f:86:53:65:53:ef:b0: e1:c2:69:6c:b5:4c:ef:e8:71:7c:a5:25:77:7c:04: ea:ca:00:6d:ad:d5:d6:75:02:92:42:af:80:c7:4b: 7d:e1:50:24:7f:0d:0b:9c:df:89:a4:5a:75:75:4e: eb:8a:7e:ca:29:af:85:62:a4:64:8a:8c:74:de:dd: f4:67:47:2b:da:5a:07:10:ec:bc:35:6a:37:b1:ea: a9:51:48:5d:9c:97:d4:d9:0b:04:86:e7:99:cd:ea: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:32:C0:5A:D8:6A:C3:A7:CB:24:8F:52:53:89:A7:29:C0:32:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:96:16:f8:4f:36:4b:98:67:dd:82:25:d5:51:c7:8a:96:78: 18:12:ff:86:7b:72:7c:3e:b5:64:3a:eb:ba:bf:65:fd:65:0f: 1d:3f:db:40:0a:1b:45:35:b1:7a:3b:93:1c:88:25:f8:89:09: 8c:b6:91:17:3e:e7:19:06:90:d2:48:95:fa:cb:30:a0:09:2f: f5:66:4a:2b:eb:1c:b8:41:5b:7b:5e:ff:4a:43:4c:c0:43:ce: 32:04:f6:95:7a:11:75:aa:0a:fe:44:17:64:d7:80:64:e9:50: 0e:69:08:d5:f5:01:7e:ac:81:eb:e4:e1:eb:03:76:5b:65:ba: 00:79:90:41:2e:60:39:a9:ba:7e:c0:f7:2b:16:f3:d7:f1:46: ca:95:28:eb:47:8e:aa:7c:c5:65:d9:92:5a:26:86:d1:71:50: 8f:96:7c:94:1a:49:86:60:42:2b:11:ff:04:7d:56:5b:e5:21: 9a:8f:8e:84:3f:11:f0:e4:bf:04:a0:52:cd:a3:11:b4:39:ca: 54:52:31:e8:81:f7:f2:bc:c2:4e:2e:df:8c:45:fa:e5:03:0a: 0f:38:93:f2:34:7a:3c:a7:ce:fe:8a:d7:8d:0a:2d:10:41:25: 89:77:44:4e:1d:9a:37:50:24:3f:02:28:03:90:ee:35:db:ec: 89:54:a3:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuiK/5bG/nxVj6eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjU1ODM2Y2UtMDgyOC00OTY2LWEzZjgtYjA4MDM5NWExNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h7gftHcuz4oWvTT1VmQWCCbO2gcF8VAS2bk hDzFpfvhcXbeBCpAeU/jnANxm2kOCjBUMTVi+qS4ScA6cCSad6mygU3LLK5GlJs+ 6nJ0sM1HcngUHPGlB/G/tkJqmj7fnNdlks9T1lM7/H9I90enFqzy+JeTNEFVlF1+ /CC4IAUbKZE7wUtV8otaYGysATMmgLlR4AmJ2DtJPE9Y22+GU2VT77DhwmlstUzv 6HF8pSV3fATqygBtrdXWdQKSQq+Ax0t94VAkfw0LnN+JpFp1dU7rin7KKa+FYqRk iox03t30Z0cr2loHEOy8NWo3seqpUUhdnJfU2QsEhueZzepQHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHIjMsBa2GrDp8skj1JTiacpwDIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNiNzIwMDItODA0Ny0z ZWRmLWE5MzYtM2RlZTZmOTUwZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgB8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqWFvhPNkuYZ92CJdVRx4qWeBgS/4Z7cnw+tWQ667q/Zf1lDx0/ 20AKG0U1sXo7kxyIJfiJCYy2kRc+5xkGkNJIlfrLMKAJL/VmSivrHLhBW3te/0pD TMBDzjIE9pV6EXWqCv5EF2TXgGTpUA5pCNX1AX6sgevk4esDdltlugB5kEEuYDmp un7A9ysW89fxRsqVKOtHjqp8xWXZklomhtFxUI+WfJQaSYZgQisR/wR9VlvlIZqP joQ/EfDkvwSgUs2jEbQ5ylRSMeiB9/K8wk4u34xF+uUDCg84k/I0ejynzv6K140K LRBBJYl3RE4dmjdQJD8CKAOQ7jXb7IlUoz0= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:44 2025 by rpki-client