$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1804a7ce-2bb5-3b79-b95d-7821a452377b.roa File: 1804a7ce-2bb5-3b79-b95d-7821a452377b.roa (raw, json) Hash identifier: sNFkc4BtEHDFk1ffAzipgsR1rHEsoW+Cq7DA4doPSxY= Subject key identifier: A5:05:EB:92:07:A3:5E:15:7A:20:F7:32:7A:91:11:DB:98:7C:E3:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FE5D3CFC59B6CA5B6284B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1804a7ce-2bb5-3b79-b95d-7821a452377b.roa Signing time: Wed 05 Feb 2025 11:25:16 +0000 ROA not before: Wed 05 Feb 2025 11:25:16 +0000 ROA not after: Tue 06 May 2025 10:25:16 +0000 asID: 30036 IP address blocks: 2604:2d80:1980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fe:5d:3c:fc:59:b6:ca:5b:62:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:25:16 2025 GMT Not After : May 6 10:25:16 2025 GMT Subject: CN=7a29e8e4-b700-416f-8cb0-cdb4628bdc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:37:1e:1c:85:1b:c0:05:33:3b:cb:55:95: 0a:a9:93:f4:ea:9d:25:1b:cd:70:f5:67:db:03:7c: 14:dc:d9:8c:62:e4:1e:db:b5:40:b4:23:ec:7c:5e: 54:35:e0:c8:55:91:5b:2a:f5:3e:1e:6c:88:46:67: a5:6e:b0:eb:c0:d3:13:bb:da:30:72:9e:3d:8d:43: 89:86:f1:d6:06:b3:07:4c:eb:94:8f:8a:27:60:fd: f7:0d:83:20:78:f3:cf:1c:56:60:8e:ce:14:69:0a: 7b:e2:f2:70:a7:12:50:c6:86:ac:06:e8:ab:b0:2c: c9:dd:a0:c7:a8:9f:ff:6d:99:e1:72:bf:42:46:b9: 1b:13:3d:10:5d:70:1d:15:54:ab:80:6c:1a:52:64: df:79:e8:3b:83:6c:03:c0:77:eb:4d:57:63:fd:7f: 92:3b:92:e6:e1:f6:c2:9b:b2:5f:76:6e:f3:ab:91: 69:b1:67:13:ec:f3:13:76:53:d8:22:27:50:00:2b: be:96:6f:db:d1:2a:12:cb:f7:03:78:28:b7:a8:76: 07:c2:ed:7e:24:67:4c:99:97:4a:9d:37:1a:f7:c1: fe:50:58:6f:03:e7:0e:ed:99:9f:06:60:d1:aa:f9: 74:f0:7e:e6:44:36:fa:73:22:e8:a6:d6:27:ee:8d: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:05:EB:92:07:A3:5E:15:7A:20:F7:32:7A:91:11:DB:98:7C:E3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1804a7ce-2bb5-3b79-b95d-7821a452377b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ab:c9:bb:e0:d7:6e:45:82:db:e9:dc:2f:0d:86:38:22:a5: 4f:a8:70:5b:1b:67:2b:45:25:64:a4:68:b0:28:65:41:3a:0b: 6e:b7:cd:13:39:0b:db:6e:a1:01:b2:e7:14:81:12:a4:80:0c: b0:46:2a:57:82:66:1b:7f:37:17:8f:5d:14:de:3c:ef:b5:53: db:cb:e2:b9:3a:a6:46:ef:9d:61:41:65:12:47:1e:ed:56:a3: 3b:eb:36:30:9f:21:c9:cc:2b:cc:1e:e3:ae:34:92:ef:bb:13: 56:09:0e:32:2f:4a:0f:e0:27:41:9d:23:3e:48:d2:6c:55:08: 1a:d9:5d:de:7b:32:df:b2:68:db:43:49:27:0a:b4:dc:a0:03: 8f:eb:d4:66:9d:fb:11:ff:47:3f:32:9a:0f:47:79:13:d9:9e: a9:de:46:5f:dc:3f:87:92:b2:9b:2e:b1:d2:38:b5:c8:bb:23: fe:a3:7f:e0:62:bf:5b:2e:73:f1:28:a3:70:60:17:f0:f5:37: d2:a1:0d:67:c3:89:f9:70:96:4d:7a:8e:dd:93:89:d4:9d:b2: 59:0c:83:b7:d6:0e:91:5d:3a:44:59:48:36:84:ee:65:b1:08: 03:74:62:57:24:0e:80:0c:15:d1:da:47:41:94:64:3c:25:e0: 4c:fc:15:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjH/l08/Fm2yltihLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjUxNloXDTI1MDUwNjEwMjUxNlowLzEtMCsGA1UEAxMk N2EyOWU4ZTQtYjcwMC00MTZmLThjYjAtY2RiNDYyOGJkYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqY3HhyFG8AFMzvLVZUKqZP06p0lG81w9Wfb A3wU3NmMYuQe27VAtCPsfF5UNeDIVZFbKvU+HmyIRmelbrDrwNMTu9owcp49jUOJ hvHWBrMHTOuUj4onYP33DYMgePPPHFZgjs4UaQp74vJwpxJQxoasBuirsCzJ3aDH qJ//bZnhcr9CRrkbEz0QXXAdFVSrgGwaUmTfeeg7g2wDwHfrTVdj/X+SO5Lm4fbC m7Jfdm7zq5FpsWcT7PMTdlPYIidQACu+lm/b0SoSy/cDeCi3qHYHwu1+JGdMmZdK nTca98H+UFhvA+cO7ZmfBmDRqvl08H7mRDb6cyLoptYn7o2TwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUF65IHo14VeiD3MnqREduYfON5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTgwNGE3Y2UtMmJiNS0z Yjc5LWI5NWQtNzgyMWE0NTIzNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKrybvg125Fgtvp3C8NhjgipU+ocFsbZytFJWSkaLAoZUE6C263 zRM5C9tuoQGy5xSBEqSADLBGKleCZht/NxePXRTePO+1U9vL4rk6pkbvnWFBZRJH Hu1WozvrNjCfIcnMK8we4640ku+7E1YJDjIvSg/gJ0GdIz5I0mxVCBrZXd57Mt+y aNtDSScKtNygA4/r1Gad+xH/Rz8ymg9HeRPZnqneRl/cP4eSspsusdI4tci7I/6j f+Biv1suc/Eoo3BgF/D1N9KhDWfDiflwlk16jt2TidSdslkMg7fWDpFdOkRZSDaE 7mWxCAN0YlckDoAMFdHaR0GUZDwl4Ez8FUM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:21 2025 by rpki-client