$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa File: de85971a-87a1-3b07-b544-678dfca73daf.roa (raw, json) Hash identifier: GbglXRnS/Os/wvM1GpSypHGYTsR2n0W5dCM4Dg6Xv1o= Subject key identifier: 22:0D:84:32:09:A8:E4:F3:9C:E7:D9:21:34:30:16:24:12:38:74:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3AEBFE7847413B234700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:af80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3a:eb:fe:78:47:41:3b:23:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cdccd2d2-f1da-412b-b1d3-072444756ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:59:38:a7:33:7e:0d:81:21:56:9b:a6:57: d7:05:1d:e3:fd:9a:70:53:24:8e:55:ce:db:00:ec: 14:41:26:f0:7d:80:fb:53:c4:7a:60:05:7e:c1:ce: 1f:0c:9a:ff:71:da:ce:04:00:47:27:f9:42:1e:86: 6e:b5:49:33:95:35:e6:b8:67:1b:13:1f:c9:ae:5f: 36:48:70:ce:2c:af:d6:7f:82:e2:f9:50:9b:a6:96: 00:55:77:44:89:6f:cd:d9:6e:39:2d:17:93:bc:72: 53:57:2e:1c:b5:af:d1:70:8f:74:cf:6d:89:aa:68: 4b:f7:ad:33:25:66:cf:bb:93:fa:4c:a0:54:b8:13: f6:85:3d:91:85:8a:fa:91:5f:65:0a:23:70:79:c0: 39:e5:6f:1e:01:b9:23:25:5e:b1:a8:ea:7e:04:08: 93:6d:64:e7:38:f0:48:80:df:da:1a:7d:5c:b2:e6: ca:6a:fc:9d:f4:5e:a4:1f:f2:2f:d8:85:7c:11:d5: d4:60:86:48:24:50:de:89:64:64:39:2d:2f:3f:72: 06:d6:47:0b:9a:1d:2f:43:fb:f5:0c:21:b7:22:26: 80:bd:8f:57:74:4b:90:0b:1c:73:51:b9:a0:f2:df: f7:fd:68:43:2c:a5:9a:d3:37:85:c6:4e:2d:3b:4f: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0D:84:32:09:A8:E4:F3:9C:E7:D9:21:34:30:16:24:12:38:74:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:af80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b2:b5:0b:fc:e1:df:84:28:ca:c3:72:1e:36:f7:dd:47:96: 87:71:88:e1:04:6d:bd:54:88:de:cd:a0:45:02:f9:c3:be:81: c8:1f:d8:14:9c:11:a0:c9:d3:26:10:57:50:ea:f0:2e:37:ae: 7a:56:b5:6f:1d:1a:1c:c8:e5:e6:43:12:50:f5:3b:54:34:57: 79:f6:46:fc:64:62:41:cd:fd:05:98:d4:5d:57:b3:2e:a0:07: 9a:7c:23:28:2a:1a:19:96:c1:66:4f:10:c7:15:b7:62:41:7f: 9e:22:03:cf:1f:7e:34:9e:41:1f:f1:e2:ed:cc:ef:e3:9e:6e: 65:13:40:b7:e1:a6:c2:9d:47:88:9d:6a:c6:56:f2:c6:f7:a5: d0:95:d8:79:df:1e:42:52:e8:3b:38:97:ba:50:1e:e9:fb:2d: a6:3c:04:9b:97:4d:ec:a8:13:ed:ef:9a:1b:1c:3c:aa:47:27: 1c:88:03:da:76:b5:2e:e6:e9:b4:d4:d3:00:5b:6a:13:bf:1c: ea:20:13:4c:e1:4d:07:4f:a8:e8:86:4e:e9:92:a5:86:7c:92: bb:b0:49:be:45:f4:f0:95:33:c6:83:02:66:0f:54:59:24:0a: 54:d8:88:c1:ed:0e:2e:38:90:9c:16:2a:3e:0b:dd:36:61:00: 85:ff:4e:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujrr/nhHQTsjRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2RjY2QyZDItZjFkYS00MTJiLWIxZDMtMDcyNDQ0NzU2YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+tZOKczfg2BIVabplfXBR3j/ZpwUySOVc7b AOwUQSbwfYD7U8R6YAV+wc4fDJr/cdrOBABHJ/lCHoZutUkzlTXmuGcbEx/Jrl82 SHDOLK/Wf4Li+VCbppYAVXdEiW/N2W45LReTvHJTVy4cta/RcI90z22JqmhL960z JWbPu5P6TKBUuBP2hT2RhYr6kV9lCiNwecA55W8eAbkjJV6xqOp+BAiTbWTnOPBI gN/aGn1csubKavyd9F6kH/Iv2IV8EdXUYIZIJFDeiWRkOS0vP3IG1kcLmh0vQ/v1 DCG3IiaAvY9XdEuQCxxzUbmg8t/3/WhDLKWa0zeFxk4tO0/2GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCINhDIJqOTznOfZITQwFiQSOHRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGU4NTk3MWEtODdhMS0z YjA3LWI1NDQtNjc4ZGZjYTczZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgK+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOytQv84d+EKMrDch42991HlodxiOEEbb1UiN7NoEUC+cO+gcgf 2BScEaDJ0yYQV1Dq8C43rnpWtW8dGhzI5eZDElD1O1Q0V3n2RvxkYkHN/QWY1F1X sy6gB5p8IygqGhmWwWZPEMcVt2JBf54iA88ffjSeQR/x4u3M7+OebmUTQLfhpsKd R4idasZW8sb3pdCV2HnfHkJS6Ds4l7pQHun7LaY8BJuXTeyoE+3vmhscPKpHJxyI A9p2tS7m6bTU0wBbahO/HOogE0zhTQdPqOiGTumSpYZ8kruwSb5F9PCVM8aDAmYP VFkkClTYiMHtDi44kJwWKj4L3TZhAIX/Tvs= -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:04 2025 by rpki-client