$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/221344f5-0732-322a-b8d3-6162bf14ba56.roa File: 221344f5-0732-322a-b8d3-6162bf14ba56.roa (raw, json) Hash identifier: wM1Y0qbs8myDVyDeCFv3h8q9oIUeMNzGoEgxKwT77xc= Subject key identifier: D3:0A:43:CD:DF:9E:6E:02:93:18:D3:18:08:CC:0E:96:E5:21:8B:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C534CA7060AECAA1D0B2FE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/221344f5-0732-322a-b8d3-6162bf14ba56.roa Signing time: Tue 04 Feb 2025 11:27:30 +0000 ROA not before: Tue 04 Feb 2025 11:27:30 +0000 ROA not after: Mon 05 May 2025 10:27:30 +0000 asID: 30036 IP address blocks: 2604:2d80:8e80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:ca:70:60:ae:ca:a1:d0:b2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:27:30 2025 GMT Not After : May 5 10:27:30 2025 GMT Subject: CN=82fb58b4-a2b1-4c67-ac27-069322f847ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:b1:56:50:3a:f6:bc:1a:74:b3:8b:ee:8d: 6b:76:55:c1:2b:df:d9:ea:74:a8:ba:7f:58:6d:68: 26:fd:cf:77:a0:05:90:97:45:2d:03:a2:08:5a:b0: 48:60:c8:5f:56:a2:d1:4a:60:7c:9a:a3:53:fe:27: 8d:84:12:1e:34:94:3b:47:40:93:bc:58:64:f9:9a: 8b:4f:e9:db:6e:15:c7:0f:b4:2f:e2:26:75:3d:4b: 7f:02:06:3d:25:89:33:83:33:2d:65:e0:cc:e7:56: 3d:aa:a1:5b:21:19:9d:d0:1e:12:55:56:0c:69:f4: f9:ab:be:8e:c8:55:f5:76:6f:6b:b7:7b:03:d9:85: 0d:94:8d:70:ce:29:3e:ff:27:9d:0f:a8:78:f3:8d: f8:01:11:eb:b3:89:21:4e:5a:3b:e2:33:61:da:c4: 83:66:dd:9c:34:aa:a7:1e:9a:59:c1:45:3b:78:3e: 00:e1:75:68:3b:13:05:6d:92:a0:e8:a2:b1:c5:e4: 75:7b:84:56:3e:9f:96:62:e6:a4:84:9d:02:85:90: 9a:9f:be:fc:72:a8:ca:78:76:b6:ce:79:0a:d5:f1: a8:3b:a2:83:b8:83:2c:86:0a:51:1e:79:ad:ea:29: aa:f3:b6:fe:49:57:7e:d1:8e:ae:9d:fe:58:c5:8e: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:43:CD:DF:9E:6E:02:93:18:D3:18:08:CC:0E:96:E5:21:8B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/221344f5-0732-322a-b8d3-6162bf14ba56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8e80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:04:f7:33:ae:f4:48:04:61:e9:43:26:04:29:99:50:5b:63: 23:38:58:a3:f1:1e:cd:70:c0:3b:d9:5c:dc:49:3e:d3:b5:87: 17:3f:df:dc:d5:2a:27:15:fb:6a:82:71:ef:70:10:8a:41:7f: a8:d1:61:db:4b:47:99:8e:2f:c3:c7:e4:f3:6f:06:2a:70:7d: b8:45:23:9e:f0:a0:d9:e7:fd:ae:77:39:11:cc:4e:39:6f:ad: 84:4f:24:cb:8e:0d:25:91:66:ed:fa:9f:e2:b1:f2:cc:70:c5: f5:1e:7d:cf:8c:a3:ae:1a:da:1d:cf:d5:c9:de:8c:ca:f8:96: 58:9d:0e:b4:1f:f9:d9:b4:14:e9:6d:89:8d:42:96:dc:c7:85: be:55:75:6b:be:a3:9c:68:fd:ef:2d:51:75:fb:26:d6:b4:c9: 00:7a:e5:ba:12:ea:ae:0e:2e:fc:08:44:a0:b9:47:1d:a4:6e: f5:8f:79:1b:a1:f8:f9:72:c2:41:63:a6:c0:f0:32:01:1e:b5: cb:ae:01:2a:fc:4d:64:45:a2:3b:79:4c:d5:21:40:60:bc:ae: 3f:92:f1:9c:b6:95:6b:27:80:c1:cb:1d:4e:24:b2:68:e0:6b: d3:f7:12:85:32:fc:d4:21:46:37:00:d0:57:23:fa:bf:22:f7: 2e:ca:4d:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFNMpwYK7KodCy/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjczMFoXDTI1MDUwNTEwMjczMFowLzEtMCsGA1UEAxMk ODJmYjU4YjQtYTJiMS00YzY3LWFjMjctMDY5MzIyZjg0N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrSxVlA69rwadLOL7o1rdlXBK9/Z6nSoun9Y bWgm/c93oAWQl0UtA6IIWrBIYMhfVqLRSmB8mqNT/ieNhBIeNJQ7R0CTvFhk+ZqL T+nbbhXHD7Qv4iZ1PUt/AgY9JYkzgzMtZeDM51Y9qqFbIRmd0B4SVVYMafT5q76O yFX1dm9rt3sD2YUNlI1wzik+/yedD6h48434ARHrs4khTlo74jNh2sSDZt2cNKqn HppZwUU7eD4A4XVoOxMFbZKg6KKxxeR1e4RWPp+WYuakhJ0ChZCan778cqjKeHa2 znkK1fGoO6KDuIMshgpRHnmt6imq87b+SVd+0Y6unf5YxY6NKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNMKQ83fnm4CkxjTGAjMDpblIYusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIxMzQ0ZjUtMDczMi0z MjJhLWI4ZDMtNjE2MmJmMTRiYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGAE9zOu9EgEYelDJgQpmVBbYyM4WKPxHs1wwDvZXNxJPtO1hxc/ 39zVKicV+2qCce9wEIpBf6jRYdtLR5mOL8PH5PNvBipwfbhFI57woNnn/a53ORHM TjlvrYRPJMuODSWRZu36n+Kx8sxwxfUefc+Mo64a2h3P1cnejMr4llidDrQf+dm0 FOltiY1CltzHhb5VdWu+o5xo/e8tUXX7Jta0yQB65boS6q4OLvwIRKC5Rx2kbvWP eRuh+PlywkFjpsDwMgEetcuuASr8TWRFojt5TNUhQGC8rj+S8Zy2lWsngMHLHU4k smjga9P3EoUy/NQhRjcA0Fcj+r8i9y7KTbI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:09 2025 by rpki-client