$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa File: 0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa (raw, json) Hash identifier: PnBg/kn0tv/0DuQ3VBXZkbeGzPybAFl9RaSchsSwl1U= Subject key identifier: 69:53:E3:28:50:E6:0E:1D:40:9D:F2:08:2B:C9:A2:52:1E:B9:31:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57813EC5D630F10E346A480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa Signing time: Tue 04 Feb 2025 13:43:04 +0000 ROA not before: Tue 04 Feb 2025 13:43:04 +0000 ROA not after: Mon 05 May 2025 12:43:04 +0000 asID: 30036 IP address blocks: 2604:2d80:6000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:78:13:ec:5d:63:0f:10:e3:46:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:43:04 2025 GMT Not After : May 5 12:43:04 2025 GMT Subject: CN=01101d5b-1b4b-450b-b25b-a1b8193a512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:90:fa:3d:cd:57:36:34:aa:0c:97:4a:bc: 44:b8:6c:0d:37:74:12:dc:57:8f:e1:34:3a:5c:97: 36:89:0c:c8:65:84:90:87:09:83:63:2c:fc:af:71: b9:39:1b:16:f1:07:14:8a:8a:c8:07:61:4e:c7:36: 05:5a:85:f1:00:b5:f9:43:78:2a:50:06:09:01:f0: 6a:e0:64:22:ca:5c:8a:f2:16:38:9e:1e:3f:f8:9e: f2:e2:84:cd:2b:e0:43:dc:13:93:e8:7d:69:3c:b1: f8:93:52:94:55:7d:69:0a:6e:dc:4f:1b:ce:26:ea: 07:25:2b:27:8f:92:92:2e:76:b2:0d:7d:5d:4c:81: 9b:0e:e5:47:21:32:82:6c:e9:27:f9:5f:83:9b:e1: c5:d4:e5:3d:eb:0c:f3:ef:8c:9b:63:fb:1a:6c:6a: 58:d7:55:9d:bb:c0:f9:79:43:8f:69:df:40:8f:cb: 5b:24:03:e4:cb:24:47:09:ed:22:76:ae:38:ce:62: 67:4b:e7:28:94:f1:f8:90:f6:fc:1e:b1:bc:70:7f: ed:48:a9:a3:e8:09:1b:2a:e6:c2:f0:eb:5a:42:57: d2:91:f1:29:94:ba:c3:4a:76:1e:32:e3:54:f5:b1: b7:4d:e3:b3:ca:67:78:b7:d5:8b:d4:80:b3:55:b1: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:E3:28:50:E6:0E:1D:40:9D:F2:08:2B:C9:A2:52:1E:B9:31:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffea4c4-02cc-323e-9afc-a534bd4918f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:54:11:3d:ea:c5:7e:fd:17:74:8a:58:84:0c:63:89:8f:3b: 77:6f:f5:45:3b:5e:fa:df:5e:51:0d:2b:c8:2e:2e:b0:1c:89: d9:7a:f1:13:2f:88:d8:95:2e:3a:fd:ff:db:70:72:68:bb:22: 0d:b2:ef:88:5c:c3:cf:da:8d:3e:62:1c:57:7a:77:17:12:88: bd:dc:b0:e9:12:ee:ae:93:bc:d3:e2:0e:fc:b5:55:42:40:e2: 6b:c3:5c:9e:d6:08:95:90:ed:ce:af:c2:0e:7a:1f:be:e5:eb: d9:b5:1a:46:bf:c6:96:8c:93:f9:18:07:0d:1c:03:86:87:97: c7:d4:95:e8:91:0d:11:26:79:be:8c:e9:c8:3c:d4:13:87:05: 89:a8:7c:51:37:81:c4:5a:de:e3:7a:13:8c:e2:db:7a:72:9f: 63:13:c7:78:b3:0e:4c:c1:bf:cc:c3:d8:d7:ca:d4:fb:76:1c: 36:0c:8f:9f:d0:89:75:d3:bf:0f:a6:62:ad:bb:ab:59:7b:8a: 17:a9:a3:e3:c5:72:ff:9a:64:80:20:b8:8b:e4:8f:41:b6:ea: 84:b4:aa:ca:1e:be:d7:07:fc:26:ad:c1:ad:02:09:68:03:8c: 28:7a:bf:dd:4a:54:02:74:8f:34:79:35:a6:a1:27:ea:28:be: 2b:2b:d7:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFeBPsXWMPEONGpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDMwNFoXDTI1MDUwNTEyNDMwNFowLzEtMCsGA1UEAxMk MDExMDFkNWItMWI0Yi00NTBiLWIyNWItYTFiODE5M2E1MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniKQ+j3NVzY0qgyXSrxEuGwNN3QS3FeP4TQ6 XJc2iQzIZYSQhwmDYyz8r3G5ORsW8QcUiorIB2FOxzYFWoXxALX5Q3gqUAYJAfBq 4GQiylyK8hY4nh4/+J7y4oTNK+BD3BOT6H1pPLH4k1KUVX1pCm7cTxvOJuoHJSsn j5KSLnayDX1dTIGbDuVHITKCbOkn+V+Dm+HF1OU96wzz74ybY/sabGpY11Wdu8D5 eUOPad9Aj8tbJAPkyyRHCe0idq44zmJnS+colPH4kPb8HrG8cH/tSKmj6AkbKubC 8OtaQlfSkfEplLrDSnYeMuNU9bG3TeOzymd4t9WL1ICzVbGGEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlT4yhQ5g4dQJ3yCCvJolIeuTFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZWE0YzQtMDJjYy0z MjNlLTlhZmMtYTUzNGJkNDkxOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChUET3qxX79F3SKWIQMY4mPO3dv9UU7XvrfXlENK8guLrAcidl6 8RMviNiVLjr9/9twcmi7Ig2y74hcw8/ajT5iHFd6dxcSiL3csOkS7q6TvNPiDvy1 VUJA4mvDXJ7WCJWQ7c6vwg56H77l69m1Gka/xpaMk/kYBw0cA4aHl8fUleiRDREm eb6M6cg81BOHBYmofFE3gcRa3uN6E4zi23pyn2MTx3izDkzBv8zD2NfK1Pt2HDYM j5/QiXXTvw+mYq27q1l7ihepo+PFcv+aZIAguIvkj0G26oS0qsoevtcH/Catwa0C CWgDjCh6v91KVAJ0jzR5NaahJ+oovisr1/E= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:14 2025 by rpki-client