$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa File: cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json) Hash identifier: Nmn7x6U8xVPkVuCZaYHt+95pU4yNiQiojk7Lxa5UhlY= Subject key identifier: 4B:3A:64:94:82:27:40:6A:69:58:6E:37:5B:87:6F:DE:82:28:46:C7 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F432858498E6488C8E190F8A214686B80 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 30144 IP address blocks: 2604:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:88:c8:e1:90:f8:a2:14:68:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=30d0fa6b-4325-4853-880f-45a19ca019bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:c5:1f:91:c5:fa:a9:7c:4d:a3:17:67:18: 37:d5:d2:2f:ea:4b:3c:20:00:98:20:f2:4e:31:e5: 6f:0b:fd:16:c1:30:3d:ab:af:0a:cd:8d:6a:9e:98: 16:cf:e2:f6:a2:32:be:98:57:81:63:f4:be:b4:0c: bf:ca:86:f8:31:96:3b:38:80:c8:e6:06:53:55:2c: 68:89:98:ad:35:a8:cc:02:d1:7e:65:39:be:98:db: 07:b0:21:d0:e1:06:1e:b2:fc:6e:eb:49:94:7b:a3: cc:14:7c:f3:6f:30:59:5b:57:61:d2:b4:d9:94:86: 53:0a:91:61:59:1a:45:c7:4e:4e:02:43:13:05:10: e3:42:96:d1:99:2e:74:24:59:2f:19:6c:66:4a:b5: ef:03:60:81:67:74:b1:d9:0a:a8:a6:5e:9b:2c:17: a4:28:e6:7b:77:6e:65:03:22:79:53:00:59:fd:0e: 3e:35:68:f4:ae:28:03:a3:27:c3:30:6c:7c:8d:5a: 46:33:25:07:04:b3:a6:be:6d:68:d3:5f:03:29:cf: 43:d2:6c:93:0c:13:69:01:c8:91:18:c1:00:6d:ba: a9:af:46:26:1f:d6:fc:95:de:2b:5b:f8:00:24:52: 4c:df:d4:e5:06:2d:cd:f6:54:4b:b7:cf:39:25:76: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:64:94:82:27:40:6A:69:58:6E:37:5B:87:6F:DE:82:28:46:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4a:fa:7a:c0:41:b5:86:57:0a:29:5a:82:c6:09:c8:6b:e5: b0:30:49:d7:03:15:9f:bf:93:9e:e4:f2:b9:b7:bf:56:f7:d9: a4:d3:93:ac:da:eb:8e:2f:97:f1:d5:19:80:4c:ee:0c:98:9b: cf:c6:ad:a4:78:b3:3a:28:d9:aa:80:b7:56:46:1f:ad:40:d1: 0b:f1:2f:8d:48:73:a0:cc:d2:e2:73:f2:88:5b:38:48:c9:f6: c9:1e:a7:ea:66:bc:b8:61:4d:e1:30:cc:3e:24:e0:ca:c2:20: 64:a1:4d:dc:22:12:f6:b6:02:0f:3b:57:9b:48:ab:47:b6:0e: 1f:16:f4:3b:55:17:6a:27:cc:78:18:64:93:60:3c:0f:6f:e0: 8c:7d:f9:ae:10:a6:3d:b2:78:eb:3c:92:ef:5e:19:2d:4d:9e: 1b:1d:39:fd:fe:17:8d:36:50:c1:46:fe:3c:e2:9a:9e:b7:5f: c0:54:06:2b:4b:60:a6:2d:50:7a:65:51:8e:cc:08:47:13:7c: 95:c0:f5:d5:d5:a6:a6:38:24:13:c2:a1:cb:49:11:f5:b8:6d: 79:9c:15:07:37:8f:aa:82:69:2e:dc:3d:8d:70:25:e2:e4:19: e7:37:38:63:3a:c1:b2:41:ae:c2:f3:be:c9:d9:d4:0b:63:c9: 49:ce:a9:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmOZIjI4ZD4ohRoa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzBkMGZhNmItNDMyNS00ODUzLTg4MGYtNDVhMTljYTAxOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1LFH5HF+ql8TaMXZxg31dIv6ks8IACYIPJO MeVvC/0WwTA9q68KzY1qnpgWz+L2ojK+mFeBY/S+tAy/yob4MZY7OIDI5gZTVSxo iZitNajMAtF+ZTm+mNsHsCHQ4QYesvxu60mUe6PMFHzzbzBZW1dh0rTZlIZTCpFh WRpFx05OAkMTBRDjQpbRmS50JFkvGWxmSrXvA2CBZ3Sx2Qqopl6bLBekKOZ7d25l AyJ5UwBZ/Q4+NWj0rigDoyfDMGx8jVpGMyUHBLOmvm1o018DKc9D0myTDBNpAciR GMEAbbqpr0YmH9b8ld4rW/gAJFJM39TlBi3N9lRLt885JXbDYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEs6ZJSCJ0BqaVhuN1uHb96CKEbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvY2Q2M2E0NWUtMjc1MS0z MDc0LTgzNmEtY2I2ZjA1YzAwZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqSvp6wEG1hlcKKVqCxgnIa+WwMEnXAxWfv5Oe5PK5t79W99mk05Os 2uuOL5fx1RmATO4MmJvPxq2keLM6KNmqgLdWRh+tQNEL8S+NSHOgzNLic/KIWzhI yfbJHqfqZry4YU3hMMw+JODKwiBkoU3cIhL2tgIPO1ebSKtHtg4fFvQ7VRdqJ8x4 GGSTYDwPb+CMffmuEKY9snjrPJLvXhktTZ4bHTn9/heNNlDBRv484pqet1/AVAYr S2CmLVB6ZVGOzAhHE3yVwPXV1aamOCQTwqHLSRH1uG15nBUHN4+qgmku3D2NcCXi 5BnnNzhjOsGyQa7C877J2dQLY8lJzqlA -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:16 2025 by rpki-client