$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa File: f9d6b1f8-79dc-3348-b036-ece241de04af.roa (raw, json) Hash identifier: 87+MerKbYrNmpA3WyGwDTpjWctfTMpuu52vSRD8w5k0= Subject key identifier: A8:FF:AC:A8:FE:A3:0C:D6:35:4D:B0:D6:ED:BA:2A:FE:DB:9E:8E:E8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF684862307297797C0420 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:da80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:68:48:62:30:72:97:79:7c:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=393bfcb0-5ead-4cb0-a242-0daa3d5d288f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:94:be:81:ee:d1:84:c7:2f:5d:18:02:61: aa:7f:a7:77:e4:0b:64:ba:59:76:ae:b6:72:0a:25: e8:16:06:16:f0:84:0d:f9:7c:91:3f:29:20:88:bb: 6f:96:54:23:38:81:4c:74:c3:30:c6:bf:7f:be:c3: 76:a3:49:48:56:7c:82:8e:e7:3f:e1:60:36:d4:cd: b7:a8:df:d8:52:35:68:54:be:55:2e:fe:b2:2a:3f: a9:7a:ce:ab:13:10:cd:07:e2:61:96:f5:eb:7e:e7: 06:9e:4a:00:41:10:89:57:82:68:79:71:fb:34:87: c2:17:13:4c:73:3f:f8:1e:8a:37:75:d8:2b:c5:52: ad:be:ed:d9:9a:f2:c4:ac:84:c1:c2:45:bb:b7:5d: 4a:0a:fd:8a:5c:3a:37:23:93:81:c1:38:19:8f:82: 40:87:3c:bf:44:e2:ef:2e:fa:89:84:9d:99:eb:d2: 14:ce:45:07:40:93:e8:d0:bf:d5:27:94:b3:67:2b: 41:4c:1a:f0:7c:6e:3d:ae:74:2e:41:8c:41:9f:3e: 19:ed:80:09:a7:ed:54:e5:1b:a0:b8:42:2f:d4:89: 08:3d:59:d6:5b:a2:cc:18:53:b4:be:1b:cd:bf:09: 7d:e5:5e:3d:f7:b1:f3:3a:df:cf:be:95:d5:5a:0f: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FF:AC:A8:FE:A3:0C:D6:35:4D:B0:D6:ED:BA:2A:FE:DB:9E:8E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:da80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:96:cd:c8:af:8e:16:90:3b:9c:31:77:29:e4:ca:a4:4a:e1: 4a:23:b1:f0:1a:eb:07:f4:92:99:e9:f5:b3:ca:8b:e8:e1:74: 75:bd:fb:bd:f9:1e:04:57:46:a5:e9:ff:06:e7:15:a4:a5:0f: ab:88:d3:42:f3:7c:05:d0:ae:a0:86:a6:1f:12:07:7b:8f:25: d9:d0:66:54:df:b5:a6:03:2b:c1:17:44:4a:4e:15:d8:e8:9d: fe:04:63:72:5d:20:01:03:b3:4d:dc:46:a6:18:f1:7f:92:97: fe:ea:a8:5d:37:63:d2:a1:3a:1a:1b:34:1b:b1:44:1d:98:95: b7:a1:df:08:d5:90:db:7a:6c:ee:1a:41:00:9b:47:7d:a9:78: 5d:a1:8d:b2:f3:cd:9b:97:76:8b:53:b4:41:01:86:41:11:0c: 44:4b:55:03:f1:7b:67:35:84:cc:fb:c3:9b:54:79:15:a3:11: 0a:04:17:23:0e:d6:c2:44:a6:77:18:34:cb:6b:26:37:06:96: 32:3c:ec:c3:d7:8f:1a:ff:88:76:89:ce:50:70:25:f3:da:3d: d1:ce:08:78:74:92:fa:d2:0d:0f:28:a2:91:12:cd:44:6e:af: 36:f3:48:63:f8:a4:5c:3b:cc:d0:dc:8c:5f:8e:41:1a:d1:9b: a0:52:ae:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72hIYjByl3l8BCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MzkzYmZjYjAtNWVhZC00Y2IwLWEyNDItMGRhYTNkNWQyODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzWUvoHu0YTHL10YAmGqf6d35Atkull2rrZy CiXoFgYW8IQN+XyRPykgiLtvllQjOIFMdMMwxr9/vsN2o0lIVnyCjuc/4WA21M23 qN/YUjVoVL5VLv6yKj+pes6rExDNB+JhlvXrfucGnkoAQRCJV4JoeXH7NIfCFxNM cz/4Hoo3ddgrxVKtvu3ZmvLErITBwkW7t11KCv2KXDo3I5OBwTgZj4JAhzy/ROLv LvqJhJ2Z69IUzkUHQJPo0L/VJ5SzZytBTBrwfG49rnQuQYxBnz4Z7YAJp+1U5Rug uEIv1IkIPVnWW6LMGFO0vhvNvwl95V4997HzOt/PvpXVWg8EoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKj/rKj+owzWNU2w1u26Kv7bno7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjlkNmIxZjgtNzlkYy0z MzQ4LWIwMzYtZWNlMjQxZGUwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiWzcivjhaQO5wxdynkyqRK4UojsfAa6wf0kpnp9bPKi+jhdHW9 +735HgRXRqXp/wbnFaSlD6uI00LzfAXQrqCGph8SB3uPJdnQZlTftaYDK8EXREpO Fdjonf4EY3JdIAEDs03cRqYY8X+Sl/7qqF03Y9KhOhobNBuxRB2Ylbeh3wjVkNt6 bO4aQQCbR32peF2hjbLzzZuXdotTtEEBhkERDERLVQPxe2c1hMz7w5tUeRWjEQoE FyMO1sJEpncYNMtrJjcGljI87MPXjxr/iHaJzlBwJfPaPdHOCHh0kvrSDQ8oopES zURurzbzSGP4pFw7zNDcjF+OQRrRm6BSrhM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:13 2025 by rpki-client