$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa File: 108d38b5-d516-319e-93f7-5d3c6a4ba434.roa (raw, json) Hash identifier: kFum+3M6l/tG0lRPddkG5t+hDQJ37p3fm1cWtIYVXm4= Subject key identifier: B5:49:FF:90:0E:68:0F:8F:5A:A1:55:A0:71:DC:B8:51:8A:28:7C:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C265B395B3F66EFE3051AB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa Signing time: Mon 03 Feb 2025 11:18:37 +0000 ROA not before: Mon 03 Feb 2025 11:18:37 +0000 ROA not after: Sun 04 May 2025 10:18:37 +0000 asID: 30036 IP address blocks: 2604:2d80:b400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:65:b3:95:b3:f6:6e:fe:30:51:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:18:37 2025 GMT Not After : May 4 10:18:37 2025 GMT Subject: CN=f5c159ad-b9c6-40d4-ae9e-6a214bdf2ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:fc:53:32:7f:fd:82:bf:c0:19:51:13:26: b5:3c:e7:c4:32:bc:6d:5d:5d:4a:73:22:7d:00:e5: 25:28:59:98:4b:d8:1c:93:03:77:e3:49:3e:f9:e4: a3:20:e1:2f:93:a1:17:6b:2a:3d:51:8e:ec:6e:95: 03:78:a6:86:d6:0d:c7:24:f2:4f:ac:fe:2d:8a:c7: f7:eb:da:ae:ae:40:74:71:e7:4d:6c:ad:d4:a5:f1: 70:0e:35:e2:f6:6d:c5:45:8a:b2:ea:44:e8:d1:38: e5:95:15:94:a0:c0:43:25:bc:cd:ba:9f:de:e7:b7: 67:41:80:ab:32:1a:1c:3a:3f:4e:57:d8:52:36:25: e8:6e:78:0c:1b:5e:ce:b3:ea:fb:29:8f:a5:ee:57: df:ef:cd:bd:4c:a7:80:ec:59:e0:31:c1:e1:0e:54: cc:af:30:66:3d:b7:6e:ac:3b:14:61:4a:6d:82:06: 34:10:6a:cc:b7:10:0b:e0:6e:1b:59:1c:6d:44:83: b8:f7:a2:f7:a7:8e:63:36:78:f1:13:ab:5b:e4:93: 75:d1:af:c7:9b:7b:25:02:36:f3:f0:2e:c2:26:f3: c3:47:8a:47:0f:92:e5:a2:63:bc:09:64:78:14:52: fe:7c:59:20:f6:9c:f6:7d:a5:bf:7d:ad:9e:60:ce: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:FF:90:0E:68:0F:8F:5A:A1:55:A0:71:DC:B8:51:8A:28:7C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/108d38b5-d516-319e-93f7-5d3c6a4ba434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cc:a4:08:c6:b0:b1:df:ab:ec:25:3b:a4:62:ae:e6:b5:55: 78:3b:b3:42:bd:3d:cc:03:69:00:95:7c:4d:59:e6:46:25:9d: e2:f6:24:3b:b5:92:56:8b:30:ed:4c:4a:e3:f5:71:d3:b2:4f: 0a:e0:65:2f:00:17:4d:30:26:29:73:08:86:02:67:ac:33:08: f0:12:51:02:44:d5:e3:6c:cc:bb:49:4b:ce:bc:cf:90:dc:aa: e4:41:6f:81:fd:33:10:36:8a:0f:ac:53:13:09:fd:6a:a9:78: ef:3a:95:76:aa:3d:66:40:45:eb:88:5a:f7:0a:62:30:83:6e: ff:15:cc:df:30:95:25:6c:6b:e9:fa:99:62:42:3c:d8:0d:86: 0c:af:fc:39:c8:15:d1:90:6a:0d:1a:35:83:80:7a:27:33:db: 79:a1:4e:c8:c5:5b:48:de:80:c0:fc:5b:e6:43:c3:06:e8:b5: 12:b7:3b:31:40:e4:c7:33:05:e1:90:e8:2a:1b:43:66:1d:96: 14:a1:42:91:d7:16:3b:89:7f:58:8d:b8:e8:25:e7:40:96:7f: 5e:38:8e:c8:24:eb:24:ba:68:d4:a8:60:00:84:35:75:b7:99: 36:44:6c:93:f3:8f:1a:d1:84:9a:37:f8:fa:db:12:0e:b3:73: f5:ff:a8:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCZbOVs/Zu/jBRqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTgzN1oXDTI1MDUwNDEwMTgzN1owLzEtMCsGA1UEAxMk ZjVjMTU5YWQtYjljNi00MGQ0LWFlOWUtNmEyMTRiZGYyY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph/8UzJ//YK/wBlREya1POfEMrxtXV1KcyJ9 AOUlKFmYS9gckwN340k++eSjIOEvk6EXayo9UY7sbpUDeKaG1g3HJPJPrP4tisf3 69qurkB0cedNbK3UpfFwDjXi9m3FRYqy6kTo0TjllRWUoMBDJbzNup/e57dnQYCr MhocOj9OV9hSNiXobngMG17Os+r7KY+l7lff7829TKeA7FngMcHhDlTMrzBmPbdu rDsUYUptggY0EGrMtxAL4G4bWRxtRIO496L3p45jNnjxE6tb5JN10a/Hm3slAjbz 8C7CJvPDR4pHD5LlomO8CWR4FFL+fFkg9pz2faW/fa2eYM4FYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVJ/5AOaA+PWqFVoHHcuFGKKHx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTA4ZDM4YjUtZDUxNi0z MTllLTkzZjctNWQzYzZhNGJhNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPMpAjGsLHfq+wlO6Rirua1VXg7s0K9PcwDaQCVfE1Z5kYlneL2 JDu1klaLMO1MSuP1cdOyTwrgZS8AF00wJilzCIYCZ6wzCPASUQJE1eNszLtJS868 z5DcquRBb4H9MxA2ig+sUxMJ/WqpeO86lXaqPWZAReuIWvcKYjCDbv8VzN8wlSVs a+n6mWJCPNgNhgyv/DnIFdGQag0aNYOAeicz23mhTsjFW0jegMD8W+ZDwwbotRK3 OzFA5MczBeGQ6CobQ2YdlhShQpHXFjuJf1iNuOgl50CWf144jsgk6yS6aNSoYACE NXW3mTZEbJPzjxrRhJo3+PrbEg6zc/X/qPs= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:16 2025 by rpki-client