$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa File: ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa (raw, json) Hash identifier: gEWzidYsJieHMC6FTuYB/PkW+QkFS0ZFow1PmFRPksU= Subject key identifier: AE:A9:0F:9A:0D:6D:36:C6:82:E8:E6:37:70:FF:65:C8:75:49:D7:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858496DD9BDAEB3AE782A05F9D788 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa Signing time: Sat 05 Apr 2025 21:15:39 +0000 ROA not before: Sat 05 Apr 2025 21:15:39 +0000 ROA not after: Fri 04 Jul 2025 21:15:39 +0000 asID: 30036 IP address blocks: 2604:2d81:1400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:d9:bd:ae:b3:ae:78:2a:05:f9:d7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 5 21:15:39 2025 GMT Not After : Jul 4 21:15:39 2025 GMT Subject: CN=14b8fc61-a401-4f7c-9bbc-cc3ff095d8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:d3:71:bb:0c:22:98:73:3f:57:bb:e0:0d: cd:ae:23:c0:0b:0c:bb:1f:00:2f:e6:d1:1c:f1:b6: 21:18:35:d0:9f:5f:5a:f4:f6:5a:97:34:37:38:95: 47:19:01:bf:e4:40:5c:e5:75:88:76:37:a5:77:54: d4:15:34:a3:b1:f7:96:6a:32:8b:51:e9:13:3c:e0: d2:4e:ca:91:66:24:e8:03:1a:c3:28:b9:52:26:f2: 72:d4:fc:48:15:36:40:02:39:8e:4d:62:5a:51:9e: 94:c6:e6:78:6e:2c:a3:43:c7:bd:b7:39:8d:17:e9: d5:8f:d4:8a:81:56:7c:80:91:56:94:74:02:49:ca: aa:1d:af:71:b7:e3:a8:85:34:f0:38:87:92:d0:8f: 4f:4a:ae:51:46:19:c8:1b:8c:e8:cd:01:63:26:f4: 8d:4e:3c:19:95:c8:9c:09:20:49:52:94:62:68:17: b7:70:49:b1:87:ba:f0:29:b1:30:6e:fe:cf:b1:14: 22:56:48:43:af:31:97:86:8c:17:5b:e9:02:2a:6f: a3:25:cb:07:f1:b4:a2:5f:5e:a1:30:04:20:51:1d: f1:b3:1e:06:c2:c5:3e:a3:1c:c2:39:1f:d7:c8:b5: 37:92:f6:95:5c:ff:5c:04:bd:4b:1d:e2:5b:78:e6: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A9:0F:9A:0D:6D:36:C6:82:E8:E6:37:70:FF:65:C8:75:49:D7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:58:4d:df:1c:3f:76:a1:67:21:bf:16:ee:6c:43:de:9e:f9: 40:00:02:45:9c:41:b9:2a:9d:89:94:c0:e0:f3:7c:af:aa:a1: 97:a8:8a:da:f2:48:78:06:1d:6b:af:c7:25:41:0c:26:54:81: f7:85:1f:7a:04:a9:c3:9a:6c:9c:09:7c:04:70:46:06:1b:8c: 89:d2:f0:f4:b6:6d:e6:4d:0d:93:06:b8:05:10:2a:bf:31:31: c4:1a:1a:67:a0:f0:fe:d1:60:2c:57:94:e6:f9:ab:71:b3:9e: b2:c7:53:81:6b:19:9f:17:1a:34:6c:a2:ce:d6:6e:47:d5:be: d2:c1:c4:10:76:d4:c7:08:91:05:c5:37:ba:31:66:4f:12:25: 0c:86:43:90:fd:07:9a:c8:cb:e6:77:f0:cb:2e:58:4d:fb:cf: 1d:f9:e7:76:f1:29:4e:f7:c5:4f:33:89:a0:d5:f7:27:be:e7: d8:d8:cf:e5:fc:f4:31:a6:c0:ff:9d:d0:ea:fc:a9:b2:d2:eb: a8:ff:cf:73:52:cd:3d:88:bd:8a:92:98:dd:d0:d1:aa:8f:43: 41:40:9d:c4:07:4e:9e:55:de:61:58:6e:35:b4:ad:53:fa:23: 7f:89:00:07:51:44:4c:3a:bc:d2:48:54:cc:03:58:d7:6b:b2: cb:68:ff:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElt2b2us654KgX514gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQwNTIxMTUzOVoXDTI1MDcwNDIxMTUzOVowLzEtMCsGA1UEAxMk MTRiOGZjNjEtYTQwMS00ZjdjLTliYmMtY2MzZmYwOTVkOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTrTcbsMIphzP1e74A3NriPACwy7HwAv5tEc 8bYhGDXQn19a9PZalzQ3OJVHGQG/5EBc5XWIdjeld1TUFTSjsfeWajKLUekTPODS TsqRZiToAxrDKLlSJvJy1PxIFTZAAjmOTWJaUZ6UxuZ4biyjQ8e9tzmNF+nVj9SK gVZ8gJFWlHQCScqqHa9xt+OohTTwOIeS0I9PSq5RRhnIG4zozQFjJvSNTjwZlcic CSBJUpRiaBe3cEmxh7rwKbEwbv7PsRQiVkhDrzGXhowXW+kCKm+jJcsH8bSiX16h MAQgUR3xsx4GwsU+oxzCOR/XyLU3kvaVXP9cBL1LHeJbeOaUwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6pD5oNbTbGgujmN3D/Zch1Sdd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmY4NDAzYTctYzAwYS0z ZTY3LTg3YjItYjk4YWJkMDQ0ZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxYTd8cP3ahZyG/Fu5sQ96e+UAAAkWcQbkqnYmUwODzfK+qoZeo itrySHgGHWuvxyVBDCZUgfeFH3oEqcOabJwJfARwRgYbjInS8PS2beZNDZMGuAUQ Kr8xMcQaGmeg8P7RYCxXlOb5q3GznrLHU4FrGZ8XGjRsos7WbkfVvtLBxBB21McI kQXFN7oxZk8SJQyGQ5D9B5rIy+Z38MsuWE37zx3553bxKU73xU8ziaDV9ye+59jY z+X89DGmwP+d0Or8qbLS66j/z3NSzT2IvYqSmN3Q0aqPQ0FAncQHTp5V3mFYbjW0 rVP6I3+JAAdRREw6vNJIVMwDWNdrssto/3I= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:12 2025 by rpki-client