$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa File: f96f681e-dc41-3979-b763-e08b8c1570dd.roa (raw, json) Hash identifier: VAZrM6Z/1fIQxB095AQmk8qsz87lSOO+Kqkh1u3RxOQ= Subject key identifier: 98:36:D2:2B:6B:22:5B:22:73:45:1B:F3:C3:FF:49:13:D2:D0:43:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584986C5C69DE2557068AC091620 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa Signing time: Mon 14 Apr 2025 19:30:38 +0000 ROA not before: Mon 14 Apr 2025 19:30:38 +0000 ROA not after: Sun 13 Jul 2025 19:30:38 +0000 asID: 30036 IP address blocks: 2604:2d81:700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:c5:c6:9d:e2:55:70:68:ac:09:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 14 19:30:38 2025 GMT Not After : Jul 13 19:30:38 2025 GMT Subject: CN=fc89adcf-c091-4deb-ab33-a5cd994784e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:75:d0:32:e7:48:54:9f:07:df:77:ae:54: 48:e3:ac:55:92:15:92:54:48:ba:f1:91:f8:c5:05: 31:28:c5:ac:64:98:ee:9b:3a:91:25:40:bf:4d:ca: c2:0d:ef:57:df:1c:6c:a5:ff:d9:03:00:43:6f:e3: a2:2c:dd:c4:77:65:15:00:14:b1:db:d1:e4:54:4b: 47:9f:23:d5:57:15:0d:7b:b3:37:7a:41:4b:d7:b2: ca:18:e0:f6:6f:e6:ef:70:d2:91:fa:1a:2f:5f:0a: eb:80:df:24:b5:ac:f3:64:8b:f6:d5:c0:e8:65:ba: ad:9a:50:01:ec:f6:df:3e:d2:d5:a2:ff:36:b0:8a: a7:5d:2f:58:fa:60:d3:71:07:c7:1b:1d:2d:a3:2d: 5b:ed:cc:fb:e0:f7:b3:97:0f:cd:b2:62:0f:1b:b8: 12:ff:4e:9c:b5:8d:a3:8d:93:06:c0:0a:9b:f6:01: ed:20:39:34:19:49:c2:1b:19:46:20:9e:ee:98:62: 19:82:a4:77:58:1c:a2:40:80:71:b9:b0:ca:b5:29: 04:81:d4:ce:4d:64:88:fb:6d:c9:a1:ff:c6:32:6b: 5d:e0:0d:39:2a:76:f5:95:4e:ab:92:c0:a0:60:ef: 84:aa:76:f2:07:a3:61:53:d6:7c:24:79:cc:f1:68: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:36:D2:2B:6B:22:5B:22:73:45:1B:F3:C3:FF:49:13:D2:D0:43:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ec:33:f0:02:22:ed:5d:7e:d0:b9:82:24:10:db:d2:d5:23: b4:cc:f7:5d:5f:87:b0:fb:02:a1:0b:42:00:36:01:49:46:b5: 30:de:68:17:fc:82:46:4b:be:7e:e1:26:f1:0c:0b:1d:41:e9: bb:a9:1e:dc:83:f3:be:e9:f4:c8:22:3d:e5:60:61:63:12:2e: 2e:0b:5f:a2:ec:12:f0:d4:59:85:03:83:8d:80:8e:65:b0:d4: 54:df:9d:58:d4:26:bd:67:f3:db:9b:57:4c:61:7a:12:03:bc: d8:d5:ca:51:0e:30:24:71:53:ab:83:57:69:47:09:64:d2:af: 5d:cb:3e:d6:66:0a:aa:3d:64:6a:7f:c7:dd:9d:4a:06:24:af: 95:d5:33:b2:26:ef:6b:b5:89:56:1e:6e:ae:99:02:b8:c4:a7: 2a:a4:4d:17:3e:ea:36:23:fd:92:84:0d:cf:36:01:62:bf:cd: 21:f6:b2:bf:6c:27:bc:59:55:96:4a:23:e5:d4:d8:20:b8:5b: 1c:58:45:fb:82:74:60:2e:23:41:0f:e2:a9:08:b8:59:ed:94: 3c:6a:e7:4c:12:fe:c7:84:c0:a6:ea:d9:2a:93:34:58:7f:9d: 94:b8:aa:3f:ed:da:40:79:71:9b:1c:fb:97:d7:e0:b5:58:57: e3:95:84:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmGxcad4lVwaKwJFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxNDE5MzAzOFoXDTI1MDcxMzE5MzAzOFowLzEtMCsGA1UEAxMk ZmM4OWFkY2YtYzA5MS00ZGViLWFiMzMtYTVjZDk5NDc4NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKx10DLnSFSfB993rlRI46xVkhWSVEi68ZH4 xQUxKMWsZJjumzqRJUC/TcrCDe9X3xxspf/ZAwBDb+OiLN3Ed2UVABSx29HkVEtH nyPVVxUNe7M3ekFL17LKGOD2b+bvcNKR+hovXwrrgN8ktazzZIv21cDoZbqtmlAB 7PbfPtLVov82sIqnXS9Y+mDTcQfHGx0toy1b7cz74Pezlw/NsmIPG7gS/06ctY2j jZMGwAqb9gHtIDk0GUnCGxlGIJ7umGIZgqR3WByiQIBxubDKtSkEgdTOTWSI+23J of/GMmtd4A05Knb1lU6rksCgYO+EqnbyB6NhU9Z8JHnM8WhePwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJg20itrIlsic0Ub88P/SRPS0EP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk2ZjY4MWUtZGM0MS0z OTc5LWI3NjMtZTA4YjhjMTU3MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjsM/ACIu1dftC5giQQ29LVI7TM911fh7D7AqELQgA2AUlGtTDe aBf8gkZLvn7hJvEMCx1B6bupHtyD877p9MgiPeVgYWMSLi4LX6LsEvDUWYUDg42A jmWw1FTfnVjUJr1n89ubV0xhehIDvNjVylEOMCRxU6uDV2lHCWTSr13LPtZmCqo9 ZGp/x92dSgYkr5XVM7Im72u1iVYebq6ZArjEpyqkTRc+6jYj/ZKEDc82AWK/zSH2 sr9sJ7xZVZZKI+XU2CC4WxxYRfuCdGAuI0EP4qkIuFntlDxq50wS/seEwKbq2SqT NFh/nZS4qj/t2kB5cZsc+5fX4LVYV+OVhPE= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:37 2025 by rpki-client