$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: Bm3v7X4GBddqaZ8Xa5ypkdadv+lvXM+yYG33E58OCiU= Subject key identifier: 42:9E:B1:B1:A9:4D:5C:CF:E9:5D:AC:65:D0:D9:1D:4B:E3:BB:D4:52 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F43285849F5C5DEBF24527DC92E4F8200 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Fri 09 May 2025 01:00:47 +0000 ROA not before: Fri 09 May 2025 01:00:47 +0000 ROA not after: Thu 07 Aug 2025 01:00:47 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:c5:de:bf:24:52:7d:c9:2e:4f:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: May 9 01:00:47 2025 GMT Not After : Aug 7 01:00:47 2025 GMT Subject: CN=77b0379c-ac28-4681-836b-bcdb84c6bee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:32:e9:3a:90:12:83:fa:28:72:10:83:5b: 17:ad:b9:45:28:8d:fc:b3:80:5a:d4:ba:17:cc:bc: 4d:c6:e0:8f:9a:99:27:07:e3:6b:72:fc:27:33:21: 23:03:eb:f8:07:61:ad:a6:49:45:ff:66:5f:17:a2: 44:94:d5:c4:aa:c8:c9:ed:23:4f:d2:69:3f:3e:16: f3:e0:c0:45:d0:3d:ba:0b:ac:51:e9:38:35:d4:b5: 41:a3:4d:e6:30:fb:5e:8b:ee:42:56:dd:1b:9f:1f: 4d:d8:2b:af:4d:5a:84:ef:7f:c8:82:52:75:2c:77: ec:06:8b:b2:cc:f0:b2:95:99:9f:5c:c3:e5:be:5d: d8:e6:55:28:7b:59:44:3b:3f:2a:a1:ac:65:06:2e: bd:cf:b4:9e:0e:ce:03:99:8c:0d:6a:f0:74:d2:b3: 79:16:db:45:2f:27:85:3b:3e:b5:f1:53:d3:0e:e8: 41:b8:69:a4:45:48:cb:15:83:fa:b8:db:44:3d:31: b6:99:0c:ea:95:a5:35:41:c9:06:b8:3c:d2:e8:6b: cb:a0:f4:70:0f:e5:7b:25:e3:db:32:61:84:40:23: 8d:a6:0f:8b:c2:55:6d:11:b5:3d:34:75:c3:ab:f9: e2:47:db:3c:1b:d0:99:50:16:4d:09:62:e7:43:45: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9E:B1:B1:A9:4D:5C:CF:E9:5D:AC:65:D0:D9:1D:4B:E3:BB:D4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:44:62:a2:d4:8e:d3:ad:14:b9:54:79:77:8c:36:5f:27:9f: ed:31:0a:7e:3c:76:8f:dd:5c:f8:af:2e:ae:02:93:9f:96:b8: 3e:b1:a6:15:41:42:4d:8a:64:6a:b9:41:4b:e1:70:d0:3a:f9: 74:ac:15:28:62:1a:e0:74:48:ab:1b:ac:6b:74:3c:4b:b8:36: e0:96:b2:d8:83:d7:a1:bf:5c:fe:33:be:10:e1:56:f1:81:07: 8c:39:44:35:03:15:02:c0:9d:9f:92:c5:e8:da:54:89:c3:cf: 5f:17:69:1c:84:95:5b:f4:2d:76:a0:b4:e0:cb:3c:45:96:64: a1:29:94:6a:33:0b:21:27:af:be:ba:e9:eb:e6:29:72:9a:b1: 2d:d2:0d:70:63:e6:1e:70:60:a2:e4:dc:9e:60:d6:c9:f4:70: e1:ec:99:a1:c2:57:d4:a4:12:c8:4a:c6:3b:aa:d1:f2:eb:eb: 30:22:15:19:2f:d0:b0:d1:51:8b:41:b6:67:cc:c8:9d:4b:89: 3a:86:3b:d6:ee:97:dd:07:68:39:25:92:1d:c9:a5:0d:60:6a: 39:e1:da:8f:74:17:71:4a:52:87:8b:1b:1c:16:f3:0e:81:cd: ba:e3:43:7d:ac:ba:ab:f1:09:90:90:4d:df:92:ab:3b:fd:c3: 99:91:eb:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn1xd6/JFJ9yS5PggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MDUwOTAxMDA0N1oXDTI1MDgwNzAxMDA0N1owLzEtMCsGA1UEAxMk NzdiMDM3OWMtYWMyOC00NjgxLTgzNmItYmNkYjg0YzZiZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVIy6TqQEoP6KHIQg1sXrblFKI38s4Ba1LoX zLxNxuCPmpknB+NrcvwnMyEjA+v4B2GtpklF/2ZfF6JElNXEqsjJ7SNP0mk/Phbz 4MBF0D26C6xR6Tg11LVBo03mMPtei+5CVt0bnx9N2CuvTVqE73/IglJ1LHfsBouy zPCylZmfXMPlvl3Y5lUoe1lEOz8qoaxlBi69z7SeDs4DmYwNavB00rN5FttFLyeF Oz618VPTDuhBuGmkRUjLFYP6uNtEPTG2mQzqlaU1QckGuDzS6GvLoPRwD+V7JePb MmGEQCONpg+LwlVtEbU9NHXDq/niR9s8G9CZUBZNCWLnQ0WdfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKesbGpTVzP6V2sZdDZHUvju9RSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJRGKi1I7TrRS5VHl3jDZfJ5/tMQp+PHaP3Vz4ry6uApOflrg+saYV QUJNimRquUFL4XDQOvl0rBUoYhrgdEirG6xrdDxLuDbglrLYg9ehv1z+M74Q4Vbx gQeMOUQ1AxUCwJ2fksXo2lSJw89fF2kchJVb9C12oLTgyzxFlmShKZRqMwshJ6++ uunr5ilymrEt0g1wY+YecGCi5NyeYNbJ9HDh7JmhwlfUpBLISsY7qtHy6+swIhUZ L9Cw0VGLQbZnzMidS4k6hjvW7pfdB2g5JZIdyaUNYGo54dqPdBdxSlKHixscFvMO gc2640N9rLqr8QmQkE3fkqs7/cOZketR -----END CERTIFICATE-----Generated at Mon Jun 16 19:26:28 2025 by rpki-client