$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa File: f8b53973-dd8b-35e2-81f3-e0b86af82204.roa (raw, json) Hash identifier: 3gDbPL7DOkEmsL4fAQqqunYKMJhBDWYZliVRsTTSZAc= Subject key identifier: 1F:85:28:D4:26:49:0E:EA:4F:2B:BD:B6:37:F5:8A:80:3A:83:5D:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49D05E3B9F3202D823780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:3500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9d:05:e3:b9:f3:20:2d:82:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f77556ba-de3c-4c72-a986-27dfd516e9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:6d:49:eb:e3:20:34:37:1a:59:26:b1:c8: 16:c6:6f:59:0a:83:ad:a6:82:5d:b4:50:37:1f:2f: 90:97:14:bc:d6:a1:93:9d:3b:a2:88:9e:a6:9d:82: f3:00:2e:42:56:73:4a:70:be:40:0a:8b:d8:cb:de: 78:27:79:51:72:26:77:64:88:0e:b1:c9:61:75:92: 12:d2:31:4b:03:6e:c3:52:e4:5a:0b:f1:ee:80:4e: 54:11:8d:29:3b:39:19:25:a8:2d:68:47:ca:7a:14: 4b:14:92:fa:5c:11:fb:81:db:74:94:47:1c:f3:85: f2:e7:7c:a1:5a:98:ee:02:e0:b7:db:cd:48:88:0c: 52:ea:29:d2:d7:be:8c:ce:39:5e:57:24:e4:03:51: 83:68:02:0a:7b:63:c7:9a:9a:84:30:29:2f:d2:13: ff:7b:1b:36:da:02:f0:4c:b5:bb:53:7b:5f:6d:86: fa:15:4e:02:4f:ae:05:67:c8:8b:a3:19:11:0c:cb: f7:58:de:e2:af:ae:18:76:d3:e8:ae:b1:ca:d6:ae: d5:7c:5e:d3:ad:ad:e7:28:ea:0d:e8:ac:d5:65:f9: a5:4e:5a:c2:d6:b8:d9:06:d7:3b:3b:e3:ac:6c:5e: 15:19:05:5c:f4:99:21:5d:62:d6:c7:b9:ff:8b:39: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:28:D4:26:49:0E:EA:4F:2B:BD:B6:37:F5:8A:80:3A:83:5D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3a:f9:7b:24:8b:44:c8:20:09:01:0c:4a:d4:00:05:91:91: 4b:b4:f9:27:8a:25:7d:80:aa:e5:9b:8b:b9:cd:6a:13:83:87: d8:b4:25:e6:de:24:e5:a1:a5:16:11:e1:0a:3d:46:a5:0a:5a: a8:3b:df:c3:cc:dc:1b:d0:a2:73:06:db:bf:75:62:1d:25:b9: 03:87:79:72:2b:e2:47:68:a9:fc:7e:ba:d1:f7:8f:5d:14:c0: 3f:35:5f:ee:e8:52:d0:f7:36:4a:4f:f8:67:a6:03:08:8d:80: 38:d1:04:7a:84:f3:cd:8f:bf:ce:3f:86:3a:e9:4e:3c:ab:86: d2:27:01:67:75:1f:26:7b:e1:ab:d1:86:94:7d:08:db:f9:08: 7c:1a:ba:b1:9c:e3:42:fc:73:16:03:39:a5:e4:a0:90:fb:02: 1b:01:b4:94:1e:3d:83:15:32:36:91:a1:5f:69:1a:b5:e1:e8: b7:3c:f7:03:ea:46:12:cf:a0:17:0a:be:07:42:68:44:d5:2b: cc:97:f4:bc:47:db:ca:32:ba:44:bf:36:d3:b0:f3:aa:23:fb: bc:8f:14:a9:52:3b:f5:5c:34:d8:aa:21:ec:86:58:42:82:7e: 3a:a8:78:08:99:5c:e7:16:f5:34:bf:0b:2a:11:74:ff:18:f4: ad:95:b2:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJ0F47nzIC2CN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Zjc3NTU2YmEtZGUzYy00YzcyLWE5ODYtMjdkZmQ1MTZlOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZdtSevjIDQ3GlkmscgWxm9ZCoOtpoJdtFA3 Hy+QlxS81qGTnTuiiJ6mnYLzAC5CVnNKcL5ACovYy954J3lRciZ3ZIgOsclhdZIS 0jFLA27DUuRaC/HugE5UEY0pOzkZJagtaEfKehRLFJL6XBH7gdt0lEcc84Xy53yh WpjuAuC3281IiAxS6inS176MzjleVyTkA1GDaAIKe2PHmpqEMCkv0hP/exs22gLw TLW7U3tfbYb6FU4CT64FZ8iLoxkRDMv3WN7ir64YdtPorrHK1q7VfF7Tra3nKOoN 6KzVZfmlTlrC1rjZBtc7O+OsbF4VGQVc9JkhXWLWx7n/izk0ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+FKNQmSQ7qTyu9tjf1ioA6g11vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjhiNTM5NzMtZGQ4Yi0z NWUyLTgxZjMtZTBiODZhZjgyMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo6+Xski0TIIAkBDErUAAWRkUu0+SeKJX2AquWbi7nNahODh9i0 JebeJOWhpRYR4Qo9RqUKWqg738PM3BvQonMG2791Yh0luQOHeXIr4kdoqfx+utH3 j10UwD81X+7oUtD3NkpP+GemAwiNgDjRBHqE882Pv84/hjrpTjyrhtInAWd1HyZ7 4avRhpR9CNv5CHwaurGc40L8cxYDOaXkoJD7AhsBtJQePYMVMjaRoV9pGrXh6Lc8 9wPqRhLPoBcKvgdCaETVK8yX9LxH28oyukS/NtOw86oj+7yPFKlSO/VcNNiqIeyG WEKCfjqoeAiZXOcW9TS/CyoRdP8Y9K2VslM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:40 2025 by rpki-client