$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: 5fkp2EPGra3vYBeRx2Sx1nOKfj3gLg4UFO/YslAT0Lc= Subject key identifier: 41:9C:DE:78:8E:B1:73:40:FF:E9:56:62:65:6C:97:A3:D6:23:B5:67 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F43285848EA6F38A115759B55997D8000 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Mon 17 Feb 2025 19:30:08 +0000 ROA not before: Mon 17 Feb 2025 19:30:08 +0000 ROA not after: Sun 18 May 2025 18:30:08 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:6f:38:a1:15:75:9b:55:99:7d:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Feb 17 19:30:08 2025 GMT Not After : May 18 18:30:08 2025 GMT Subject: CN=1daffaca-ce47-4b0c-b266-c0d18f6e41a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:13:e9:6a:66:e1:02:e3:cd:dd:e5:0b:fc: 6a:f8:30:4c:c8:27:ad:7b:9a:b2:16:ac:4a:ef:b3: 95:cc:e4:ff:f6:2b:05:11:83:40:ef:87:85:ea:2b: 50:fb:53:37:51:23:a6:f4:b8:4f:5b:f5:ef:e9:83: 85:22:11:8e:f7:69:5d:26:b0:6b:5b:f9:80:aa:0f: 9e:f7:b5:50:0a:91:fb:a8:e0:bc:4f:a2:13:22:5b: 97:05:e4:1c:05:3e:30:0b:c9:f8:a6:2a:54:a5:d6: 5a:04:1c:2e:16:d7:a8:c9:64:04:e1:08:b0:ad:88: e6:ba:1a:01:36:94:76:1b:f4:a6:dc:12:14:55:8c: e9:11:c1:eb:1d:bc:b1:ce:1b:f5:f3:3f:c9:b1:80: 4f:46:74:7a:c0:8f:f1:52:16:c3:29:5f:d8:7a:e7: 31:11:cc:3b:c3:af:64:f2:e8:97:16:be:e3:11:e3: 56:be:66:b8:9c:8a:f0:df:c5:4d:bd:42:6e:33:4c: c3:f8:fa:b6:75:cc:7a:1c:e1:71:03:8a:9b:32:a6: 84:cc:74:78:13:cc:d1:4c:0b:8e:c8:d9:f0:3c:51: 7e:00:dd:ba:6c:cc:62:7a:27:70:24:31:da:ba:6e: b6:b2:b8:69:48:d3:fd:8e:03:ce:47:b1:73:b9:eb: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9C:DE:78:8E:B1:73:40:FF:E9:56:62:65:6C:97:A3:D6:23:B5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ff:3a:e8:29:cd:3f:5e:6d:5b:f9:65:61:8d:c5:61:c1:06: 31:29:ee:d3:73:94:e7:32:16:df:5c:6f:e4:9e:a2:5d:88:df: 96:2a:07:3f:d4:a4:7e:10:e0:e7:af:0b:9d:a7:02:28:bb:2d: ce:12:e5:a9:1e:b8:2b:25:64:cd:f7:8e:36:85:63:95:71:d5: 76:e9:01:72:53:37:83:e0:ae:39:3b:d1:be:0e:06:49:db:4f: f1:3c:39:1a:9b:24:af:90:7c:73:56:6b:a1:8a:b7:72:e8:ed: a7:51:5f:cc:62:16:25:d3:50:f4:5c:54:49:bf:36:dd:1a:a0: 25:d9:1c:e7:f0:7f:9b:02:b2:43:a9:0b:2d:b0:ab:1f:a2:e4: 69:f1:37:a4:36:f6:8d:c3:fb:04:52:d3:78:ad:24:b2:cd:46: b1:c5:67:39:e0:5d:4b:0d:b7:a4:cf:2d:37:2c:ec:22:d6:90: a5:f4:7b:ad:87:72:52:29:8c:0a:b4:d0:01:2b:75:f7:4d:23: 24:8b:9f:86:a1:a7:8f:59:f9:02:e9:98:e9:3b:b1:ea:c6:1d: 97:a6:16:d3:f8:15:23:2c:b4:0b:61:86:9c:6d:a4:88:f2:2d: 29:39:34:5f:84:a9:60:a3:4c:8e:50:a0:7a:70:a7:46:ad:b2: fa:5d:72:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjqbzihFXWbVZl9gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MDIxNzE5MzAwOFoXDTI1MDUxODE4MzAwOFowLzEtMCsGA1UEAxMk MWRhZmZhY2EtY2U0Ny00YjBjLWIyNjYtYzBkMThmNmU0MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlIT6Wpm4QLjzd3lC/xq+DBMyCete5qyFqxK 77OVzOT/9isFEYNA74eF6itQ+1M3USOm9LhPW/Xv6YOFIhGO92ldJrBrW/mAqg+e 97VQCpH7qOC8T6ITIluXBeQcBT4wC8n4pipUpdZaBBwuFteoyWQE4QiwrYjmuhoB NpR2G/Sm3BIUVYzpEcHrHbyxzhv18z/JsYBPRnR6wI/xUhbDKV/YeucxEcw7w69k 8uiXFr7jEeNWvma4nIrw38VNvUJuM0zD+Pq2dcx6HOFxA4qbMqaEzHR4E8zRTAuO yNnwPFF+AN26bMxieidwJDHaum62srhpSNP9jgPOR7FzuevXIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEGc3niOsXNA/+lWYmVsl6PWI7VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBW/zroKc0/Xm1b+WVhjcVhwQYxKe7Tc5TnMhbfXG/knqJdiN+WKgc/ 1KR+EODnrwudpwIouy3OEuWpHrgrJWTN9442hWOVcdV26QFyUzeD4K45O9G+DgZJ 20/xPDkamySvkHxzVmuhirdy6O2nUV/MYhYl01D0XFRJvzbdGqAl2Rzn8H+bArJD qQstsKsfouRp8TekNvaNw/sEUtN4rSSyzUaxxWc54F1LDbekzy03LOwi1pCl9Hut h3JSKYwKtNABK3X3TSMki5+GoaePWfkC6ZjpO7Hqxh2XphbT+BUjLLQLYYacbaSI 8i0pOTRfhKlgo0yOUKB6cKdGrbL6XXK8 -----END CERTIFICATE-----Generated at Mon Apr 28 17:30:06 2025 by rpki-client