$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa File: ffa67dac-9013-3d2d-a4f6-1d307d212778.roa (raw, json) Hash identifier: 582wL2AqZVTN4BFihoV4tOLEIUVustIT32AmkUY0j9E= Subject key identifier: B1:D5:E1:DC:9D:4A:A4:35:32:15:B8:79:C2:0E:DB:D3:7C:7C:DD:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1B06E3A389B4999E2E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:06:e3:a3:89:b4:99:9e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=15fd6dcf-b024-4f62-bef7-e1436902d791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:b7:7e:f1:64:33:1c:56:74:af:b6:49:b7: 55:ec:aa:9e:73:de:04:86:e0:e4:44:8a:e8:5e:e0: d9:e0:d7:10:d3:94:5a:1a:b3:19:54:f0:d1:bc:39: 9a:fb:75:aa:a0:d8:4d:18:32:d6:68:d7:46:73:8d: 4f:e1:34:e3:8a:02:72:79:b4:86:74:28:a7:bd:7b: 4f:1f:ac:4d:33:18:9a:d2:48:09:2e:19:d4:2d:c7: 0e:ff:bc:e2:1d:db:c4:9b:6c:da:b5:94:29:19:2b: 67:bb:24:1f:e5:01:ca:46:94:9d:62:e0:68:22:a4: 3b:90:73:7e:94:a3:5b:56:59:7a:11:d6:22:fd:9a: ef:3d:d2:2c:e8:6e:2e:f7:86:79:28:c1:8f:31:48: 76:5c:63:ad:ce:50:86:55:d9:73:44:9c:42:b0:66: 05:71:f7:a9:1d:34:9f:16:89:f2:5d:92:83:49:cf: f2:71:07:94:75:b0:f6:34:4f:89:d9:4f:7c:fe:24: 82:8f:75:64:96:81:ff:ba:6a:5d:f3:96:9b:17:38: 5c:ac:42:cb:de:e0:c2:5a:31:2b:e2:b2:b4:ca:1f: be:76:4c:8c:f9:78:a3:78:13:e9:1b:83:c3:65:a3: 42:33:15:b0:72:d4:d4:80:e6:3d:ed:88:fc:c0:3f: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D5:E1:DC:9D:4A:A4:35:32:15:B8:79:C2:0E:DB:D3:7C:7C:DD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5a:3e:df:7c:40:6d:fb:ce:43:03:3b:9d:f3:73:60:11:f3: aa:4c:32:83:a9:f8:be:49:ec:20:76:5d:f3:22:0e:30:56:54: 77:bb:2b:0b:35:fc:ec:89:f2:c4:9f:e5:d6:b9:81:f1:03:7a: df:5a:18:76:19:96:b3:24:1e:0d:6b:51:2f:ae:72:48:2b:ff: 1e:a5:6f:44:1d:b2:12:32:f3:a4:3e:70:53:a8:da:41:01:d0: 23:dc:e6:ea:af:7f:3a:80:b3:23:ff:8a:e2:f1:5f:c0:ec:ad: f3:49:f7:37:4d:0c:db:bc:3e:85:d9:d1:d3:1f:04:e3:0e:d3: e0:d9:9e:2c:e3:ab:ee:45:18:cc:c0:8c:22:b7:6f:a9:45:13: 8c:5b:3c:94:d4:8d:ba:1a:ae:6e:3f:ec:8f:7b:18:1f:fc:e9: c0:87:a3:87:7a:43:6b:be:a9:d1:1f:9a:49:ce:9c:d0:10:42: e8:6b:44:28:d9:ed:38:35:fb:68:4a:a0:0f:1d:9d:99:94:0d: 37:10:bb:34:ca:a8:45:05:02:ff:70:25:cc:b2:97:d8:d1:2b: 8a:be:0b:53:4a:8f:07:12:b9:56:e3:28:b3:cc:bf:66:82:5a: 17:a3:33:03:06:af:93:8c:77:76:c9:94:5f:bc:e1:cf:4a:3c: 5c:47:8a:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhsG46OJtJmeLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTVmZDZkY2YtYjAyNC00ZjYyLWJlZjctZTE0MzY5MDJkNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWC3fvFkMxxWdK+2SbdV7Kqec94EhuDkRIro XuDZ4NcQ05RaGrMZVPDRvDma+3WqoNhNGDLWaNdGc41P4TTjigJyebSGdCinvXtP H6xNMxia0kgJLhnULccO/7ziHdvEm2zatZQpGStnuyQf5QHKRpSdYuBoIqQ7kHN+ lKNbVll6EdYi/ZrvPdIs6G4u94Z5KMGPMUh2XGOtzlCGVdlzRJxCsGYFcfepHTSf FonyXZKDSc/ycQeUdbD2NE+J2U98/iSCj3VkloH/umpd85abFzhcrELL3uDCWjEr 4rK0yh++dkyM+XijeBPpG4PDZaNCMxWwctTUgOY97Yj8wD8cfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHV4dydSqQ1MhW4ecIO29N8fN1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZhNjdkYWMtOTAxMy0z ZDJkLWE0ZjYtMWQzMDdkMjEyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9aPt98QG37zkMDO53zc2AR86pMMoOp+L5J7CB2XfMiDjBWVHe7 Kws1/OyJ8sSf5da5gfEDet9aGHYZlrMkHg1rUS+uckgr/x6lb0QdshIy86Q+cFOo 2kEB0CPc5uqvfzqAsyP/iuLxX8DsrfNJ9zdNDNu8PoXZ0dMfBOMO0+DZnizjq+5F GMzAjCK3b6lFE4xbPJTUjboarm4/7I97GB/86cCHo4d6Q2u+qdEfmknOnNAQQuhr RCjZ7Tg1+2hKoA8dnZmUDTcQuzTKqEUFAv9wJcyyl9jRK4q+C1NKjwcSuVbjKLPM v2aCWhejMwMGr5OMd3bJlF+84c9KPFxHim0= -----END CERTIFICATE-----Generated at Sun Apr 27 03:07:28 2025 by rpki-client