$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa File: 223e52b0-13c4-348e-85a8-6b0ee28e3102.roa (raw, json) Hash identifier: 0LzMVI0PGqM+ialLpeusI5iwTuzjL2EN2Z43bF/vYKY= Subject key identifier: 35:08:B5:80:03:11:D2:16:37:84:D3:B1:98:2A:85:F1:E6:C6:4F:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C265C1FC017C2FA45F181D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa Signing time: Mon 03 Feb 2025 11:18:44 +0000 ROA not before: Mon 03 Feb 2025 11:18:44 +0000 ROA not after: Sun 04 May 2025 10:18:44 +0000 asID: 30036 IP address blocks: 2604:2d80:d680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:65:c1:fc:01:7c:2f:a4:5f:18:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:18:44 2025 GMT Not After : May 4 10:18:44 2025 GMT Subject: CN=9fb3856a-c48d-46e3-a327-774a89f95381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:4e:93:1c:8b:b7:9a:db:f1:e9:c7:de:44: 2b:2b:98:09:a1:9f:d8:54:f6:cb:71:ea:16:eb:96: 8c:25:79:32:ee:9e:e1:01:c5:eb:09:66:61:b7:4a: 9a:55:7d:2a:61:1a:9f:56:70:ea:a5:81:be:9c:7f: 3f:bd:8d:3a:96:1a:5b:bc:9f:5a:bf:f6:42:9a:f8: 54:fa:51:07:0d:cd:65:35:8c:8a:4d:f9:bb:54:a2: 70:8b:3d:b4:22:83:6b:9c:34:95:1d:33:a4:ae:41: 3c:22:4b:75:db:db:fa:9e:c7:a3:ec:74:bc:3b:5b: 74:16:53:03:13:37:8c:e4:bb:b1:0e:54:ed:77:36: 1f:4e:58:99:13:67:f1:df:cc:d9:eb:1a:1b:ed:14: 5f:b2:0a:8b:f3:eb:3a:49:ce:9b:4f:9e:3f:a4:6b: 83:2e:63:9c:52:35:80:c8:20:ee:3d:56:fe:01:e7: 9e:61:46:8d:49:ee:a9:e7:44:d4:38:81:52:cc:2f: 3b:0d:0c:e1:7b:b5:a6:5a:eb:8e:bc:5c:bc:94:21: a0:57:4e:67:fa:99:ae:03:16:04:89:a6:db:c0:81: cb:b0:f6:85:4d:d3:a5:a0:48:88:fb:53:47:e2:e1: 50:3f:cf:f7:d2:4f:b0:79:b5:90:fd:53:48:30:83: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:08:B5:80:03:11:D2:16:37:84:D3:B1:98:2A:85:F1:E6:C6:4F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3d:5f:ee:81:14:79:62:b8:db:03:3e:38:5e:5f:3b:b8:3e: fe:42:8e:fc:b0:4a:84:4a:61:26:61:49:36:2d:6e:b5:93:75: 01:d9:a1:4b:a5:72:af:10:f7:6e:cb:7e:85:17:a7:83:0f:e1: 3b:d1:3a:79:54:a2:90:64:99:4d:e1:a3:2e:6a:22:b8:55:45: 62:bc:14:e3:a3:6c:f9:3a:47:d2:9c:a9:6e:0c:b4:d3:b4:b2: fc:ec:12:26:43:8d:ef:c4:d0:e0:b1:be:a0:be:8e:bc:16:bb: df:65:ac:fa:87:1b:cc:11:ce:1c:2d:6a:47:c7:8f:a2:90:79: dd:a1:52:37:8a:4b:ac:3e:b7:8f:b2:11:27:8a:f7:42:da:9a: 05:49:57:d6:7d:45:fc:48:70:3d:a5:c2:eb:1c:db:41:7d:5a: 61:e9:30:4a:8a:69:35:42:8c:39:ce:34:81:a6:f4:70:55:43: b3:e6:4e:74:06:0b:8a:3e:d6:aa:01:1b:59:3e:1e:38:6c:a3: cf:b5:3e:0a:18:53:29:26:46:42:f8:a0:3c:53:f5:b7:2d:80: 6c:e8:c1:ee:f6:c2:1d:6d:88:eb:c5:c5:f0:38:d0:d9:c7:07: bb:7d:ee:be:b1:11:e0:01:8a:30:64:ae:05:7f:50:1d:d1:a7: c5:98:0a:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCZcH8AXwvpF8YHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTg0NFoXDTI1MDUwNDEwMTg0NFowLzEtMCsGA1UEAxMk OWZiMzg1NmEtYzQ4ZC00NmUzLWEzMjctNzc0YTg5Zjk1MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPZOkxyLt5rb8enH3kQrK5gJoZ/YVPbLceoW 65aMJXky7p7hAcXrCWZht0qaVX0qYRqfVnDqpYG+nH8/vY06lhpbvJ9av/ZCmvhU +lEHDc1lNYyKTfm7VKJwiz20IoNrnDSVHTOkrkE8Ikt129v6nsej7HS8O1t0FlMD EzeM5LuxDlTtdzYfTliZE2fx38zZ6xob7RRfsgqL8+s6Sc6bT54/pGuDLmOcUjWA yCDuPVb+AeeeYUaNSe6p50TUOIFSzC87DQzhe7WmWuuOvFy8lCGgV05n+pmuAxYE iabbwIHLsPaFTdOloEiI+1NH4uFQP8/30k+webWQ/VNIMINkKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUItYADEdIWN4TTsZgqhfHmxk+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIzZTUyYjAtMTNjNC0z NDhlLTg1YTgtNmIwZWUyOGUzMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHs9X+6BFHliuNsDPjheXzu4Pv5CjvywSoRKYSZhSTYtbrWTdQHZ oUulcq8Q927LfoUXp4MP4TvROnlUopBkmU3hoy5qIrhVRWK8FOOjbPk6R9KcqW4M tNO0svzsEiZDje/E0OCxvqC+jrwWu99lrPqHG8wRzhwtakfHj6KQed2hUjeKS6w+ t4+yESeK90LamgVJV9Z9RfxIcD2lwusc20F9WmHpMEqKaTVCjDnONIGm9HBVQ7Pm TnQGC4o+1qoBG1k+Hjhso8+1PgoYUykmRkL4oDxT9bctgGzowe72wh1tiOvFxfA4 0NnHB7t97r6xEeABijBkrgV/UB3Rp8WYCmE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:10 2025 by rpki-client