$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef6e92a9-4e0f-3297-8963-b5e0f7278700.roa File: ef6e92a9-4e0f-3297-8963-b5e0f7278700.roa (raw, json) Hash identifier: qICbKwcyWLqmvwHpDIbNXTxREyqIscFP1S4yf2gCzZI= Subject key identifier: 43:A0:20:DB:06:0B:32:DC:44:EB:20:7E:2F:FD:E2:67:6A:E0:D2:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49CF3777DDF08B0EE8000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef6e92a9-4e0f-3297-8963-b5e0f7278700.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:3400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9c:f3:77:7d:df:08:b0:ee:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=dd650683-8400-4ac5-962a-d7bb84e10f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:e2:93:e7:85:a1:3b:89:c3:80:01:90:cc: 00:ef:67:6c:1d:ad:cd:b5:19:dd:87:60:5d:d6:48: 89:2c:b7:7b:17:02:52:41:c9:2e:d4:35:4b:42:76: 16:1f:95:48:55:68:5b:77:65:11:f8:72:ba:3e:74: 7f:af:39:ef:85:7d:35:a0:15:80:eb:69:4c:80:3c: 49:ac:81:68:55:4c:13:2b:b2:9f:44:fe:0a:b0:f5: 20:93:85:ef:87:5f:f5:78:5e:e4:21:8f:2c:c1:32: 25:48:5a:21:00:92:8a:08:34:ec:3b:d9:c4:28:ec: ff:0e:40:e2:ac:85:5c:f2:22:38:f8:3a:7b:4f:be: d5:77:80:82:92:ac:5a:8e:53:63:6c:50:90:e3:48: 43:34:25:d5:10:b4:16:a3:6d:61:b1:b8:8d:c9:f0: e0:f5:ee:49:0e:a4:ab:d9:22:f8:25:e4:14:32:a0: 3b:c4:e6:34:f1:a1:f3:ca:a8:e8:49:38:7b:a7:03: 59:55:12:85:5d:37:0c:f8:7d:24:aa:24:01:5a:ae: a2:52:9b:ad:20:6d:b7:9a:76:6b:7e:ca:d4:13:dd: 88:d1:2b:bb:e0:a6:3d:fc:26:44:19:e7:16:01:51: 6c:9f:ce:88:20:f5:96:61:0a:30:3e:30:a0:d5:f6: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:20:DB:06:0B:32:DC:44:EB:20:7E:2F:FD:E2:67:6A:E0:D2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef6e92a9-4e0f-3297-8963-b5e0f7278700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ea:b5:54:db:ca:33:72:f3:55:af:a1:3e:1e:d6:5d:51:ac: d5:40:58:1f:5d:50:24:dd:f5:cd:8e:8a:9a:ea:c6:ce:48:71: 14:67:f4:ab:fa:79:a5:16:81:39:e3:38:b9:f0:43:20:f4:73: e5:ff:75:71:7e:28:5a:e7:5d:92:e4:74:2e:db:ef:6e:83:18: 37:ab:06:db:70:9f:a8:3d:9b:03:ea:9d:6f:ba:1f:65:c5:3a: dd:a3:52:a1:b7:bc:5e:0d:e8:7e:9f:95:91:5f:d3:f9:8d:70: e9:03:fa:04:05:f1:a7:35:fa:cb:63:6c:64:e5:67:b4:70:21: f6:80:e2:81:88:2a:1c:6c:50:7c:4a:ad:d3:f2:dc:a0:e0:b3: 16:91:75:40:ce:ec:4e:a7:8d:f4:2f:6d:db:ea:47:d6:f7:f1: bb:0d:55:d3:57:dc:df:a2:95:3e:ae:d0:df:86:18:3b:35:4b: b3:e8:af:b1:10:0f:ca:16:b5:db:2f:2b:1c:32:e0:04:b8:d7: 34:d4:9f:80:95:2a:69:a3:a0:14:58:45:60:9d:66:e8:22:ac: 13:fa:c4:a6:7b:4d:f7:33:4f:4d:3d:8f:b5:41:a0:b7:1c:48: 85:fd:74:16:dd:a4:32:03:3d:34:82:be:a7:b0:c1:75:2a:fd: 46:bc:ad:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJzzd33fCLDugAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGQ2NTA2ODMtODQwMC00YWM1LTk2MmEtZDdiYjg0ZTEwZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P3ik+eFoTuJw4ABkMwA72dsHa3NtRndh2Bd 1kiJLLd7FwJSQcku1DVLQnYWH5VIVWhbd2UR+HK6PnR/rznvhX01oBWA62lMgDxJ rIFoVUwTK7KfRP4KsPUgk4Xvh1/1eF7kIY8swTIlSFohAJKKCDTsO9nEKOz/DkDi rIVc8iI4+Dp7T77Vd4CCkqxajlNjbFCQ40hDNCXVELQWo21hsbiNyfDg9e5JDqSr 2SL4JeQUMqA7xOY08aHzyqjoSTh7pwNZVRKFXTcM+H0kqiQBWq6iUputIG23mnZr fsrUE92I0Su74KY9/CZEGecWAVFsn86IIPWWYQowPjCg1fbGkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOgINsGCzLcROsgfi/94mdq4NKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWY2ZTkyYTktNGUwZi0z Mjk3LTg5NjMtYjVlMGY3Mjc4NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFvqtVTbyjNy81WvoT4e1l1RrNVAWB9dUCTd9c2Oiprqxs5IcRRn 9Kv6eaUWgTnjOLnwQyD0c+X/dXF+KFrnXZLkdC7b726DGDerBttwn6g9mwPqnW+6 H2XFOt2jUqG3vF4N6H6flZFf0/mNcOkD+gQF8ac1+stjbGTlZ7RwIfaA4oGIKhxs UHxKrdPy3KDgsxaRdUDO7E6njfQvbdvqR9b38bsNVdNX3N+ilT6u0N+GGDs1S7Po r7EQD8oWtdsvKxwy4AS41zTUn4CVKmmjoBRYRWCdZugirBP6xKZ7TfczT009j7VB oLccSIX9dBbdpDIDPTSCvqewwXUq/Ua8rSE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:24:04 2025 by rpki-client