$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/34c61910-c3c1-3f39-98ff-b8d893b5ff0b.roa File: 34c61910-c3c1-3f39-98ff-b8d893b5ff0b.roa (raw, json) Hash identifier: gSYhVTM6Cp3UetLS1EifV1W7yMR5KECJNdN4ilUJ/q8= Subject key identifier: D0:E7:5D:15:F4:08:DF:EE:8B:6F:AB:82:67:22:D2:BA:DC:2D:80:B2 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285849912F2FA02F336B50CC907400 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/34c61910-c3c1-3f39-98ff-b8d893b5ff0b.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 399804 IP address blocks: 2604:5040:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:a0:2f:33:6b:50:cc:90:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=4ae38705-c214-4ea3-85c1-595e085647ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:3a:14:e1:24:4b:67:b8:cb:23:8f:8a:80: af:14:c2:16:6f:26:e0:15:14:12:a6:74:9a:a4:bb: 74:db:e3:91:49:8d:91:84:f0:c0:33:79:6c:f1:80: a1:bc:c3:89:4f:57:fd:7b:a6:d0:ac:78:a6:ac:5e: 4b:f0:53:8e:26:f9:4e:d9:e1:2b:71:a4:50:02:86: dd:32:0e:cb:da:49:ba:bd:65:9f:62:d3:a8:2f:2c: dc:f0:ce:9a:73:81:3c:f9:bb:04:c4:11:af:08:66: a9:a8:02:e8:0b:62:72:9a:c1:cd:48:37:9d:c1:bf: c9:0c:ba:b1:9a:af:9b:99:64:23:8a:53:63:26:a6: 41:5d:89:33:f1:2c:41:54:65:f3:51:c6:0f:24:cd: f7:26:56:cb:b0:2b:98:dd:77:5b:cf:43:57:76:ac: b2:4b:c0:79:1a:ce:e8:95:f9:2c:64:a2:d6:b8:22: 12:15:64:29:94:78:39:1e:7a:04:7e:26:f1:3d:f6: 7a:76:96:a1:ed:91:fc:a3:12:e2:e4:a2:ab:3d:6d: 3b:d6:76:a8:ec:93:96:14:c1:49:cd:63:14:f1:73: 0a:a1:0d:2d:ae:e2:c6:ae:69:2e:d3:53:4c:d4:b0: ca:e3:5b:b5:97:c2:32:f6:1f:d6:00:6a:e5:c3:36: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:5D:15:F4:08:DF:EE:8B:6F:AB:82:67:22:D2:BA:DC:2D:80:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/34c61910-c3c1-3f39-98ff-b8d893b5ff0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv6: 2604:5040:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d1:3d:18:23:19:7f:03:f4:26:d0:1f:11:c3:22:51:3e:f8: 2d:da:70:97:ad:9a:6d:c3:5a:b6:b6:60:39:51:1b:31:e9:1e: 3c:10:0a:b4:8b:47:25:4c:54:7a:18:55:fe:7b:7e:45:3d:37: cc:1a:8e:ca:88:89:58:4c:b0:58:14:6e:61:d5:56:69:9e:61: 88:a2:52:4d:9f:b1:2d:da:2d:a8:fb:67:a9:d5:47:62:ab:c9: 6a:31:95:b3:26:37:5f:b7:46:d4:33:79:e1:d8:ea:87:ae:f9: 21:5a:a7:1d:13:f1:da:e5:19:59:d9:3b:7b:d6:30:75:e9:9a: dc:c3:4f:a9:5e:9f:a3:3a:30:1c:f5:83:e9:40:0e:50:0e:73: 26:e9:8d:84:2d:aa:87:b0:92:3e:91:36:85:85:d4:42:c6:49: 17:3d:12:bb:c0:8c:71:33:97:50:ed:37:8e:b1:75:1a:dd:ff: 49:00:f8:2a:85:0b:cd:37:62:4c:54:40:82:1c:14:fa:10:63: b6:88:39:e5:6e:da:f7:9b:ef:44:9d:04:43:12:05:e1:7c:98: b8:5d:14:86:04:bf:17:e8:b8:96:11:0b:2b:e3:bb:02:83:84: ea:24:52:38:d2:7b:98:2a:30:23:a0:31:81:d6:c2:d8:99:1d: 2e:cc:ac:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRLy+gLzNrUMyQdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NGFlMzg3MDUtYzIxNC00ZWEzLTg1YzEtNTk1ZTA4NTY0N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8c6FOEkS2e4yyOPioCvFMIWbybgFRQSpnSa pLt02+ORSY2RhPDAM3ls8YChvMOJT1f9e6bQrHimrF5L8FOOJvlO2eErcaRQAobd Mg7L2km6vWWfYtOoLyzc8M6ac4E8+bsExBGvCGapqALoC2JymsHNSDedwb/JDLqx mq+bmWQjilNjJqZBXYkz8SxBVGXzUcYPJM33JlbLsCuY3Xdbz0NXdqyyS8B5Gs7o lfksZKLWuCISFWQplHg5HnoEfibxPfZ6dpah7ZH8oxLi5KKrPW071nao7JOWFMFJ zWMU8XMKoQ0truLGrmku01NM1LDK41u1l8Iy9h/WAGrlwzbYSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDnXRX0CN/ui2+rgmci0rrcLYCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMzRjNjE5MTAtYzNjMS0z ZjM5LTk4ZmYtYjhkODkzYjVmZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRQQAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJjRPRgjGX8D9CbQHxHDIlE++C3acJetmm3DWra2YDlRGzHpHjwQ CrSLRyVMVHoYVf57fkU9N8wajsqIiVhMsFgUbmHVVmmeYYiiUk2fsS3aLaj7Z6nV R2KryWoxlbMmN1+3RtQzeeHY6oeu+SFapx0T8drlGVnZO3vWMHXpmtzDT6len6M6 MBz1g+lADlAOcybpjYQtqoewkj6RNoWF1ELGSRc9ErvAjHEzl1DtN46xdRrd/0kA +CqFC803YkxUQIIcFPoQY7aIOeVu2veb70SdBEMSBeF8mLhdFIYEvxfouJYRCyvj uwKDhOokUjjSe5gqMCOgMYHWwtiZHS7MrOA= -----END CERTIFICATE-----Generated at Mon Apr 28 18:27:56 2025 by rpki-client