$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa File: 3600c549-d9b7-3cd0-9d86-882b65257a73.roa (raw, json) Hash identifier: eKN3OYQAy13AP6uetR0zt4a8BzhsOkO5a8qx2CJrMfI= Subject key identifier: C6:55:6D:71:9A:50:45:58:A1:EC:DC:A6:D9:8D:62:3C:E7:ED:54:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C58113B71DE4E2C7F2CC7D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa Signing time: Tue 04 Feb 2025 14:01:12 +0000 ROA not before: Tue 04 Feb 2025 14:01:12 +0000 ROA not after: Mon 05 May 2025 13:01:12 +0000 asID: 30036 IP address blocks: 2604:2d80:f000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:13:b7:1d:e4:e2:c7:f2:cc:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:01:12 2025 GMT Not After : May 5 13:01:12 2025 GMT Subject: CN=23a2844c-16c3-428e-a44a-66ff0bda0c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:bf:a1:f7:5f:6b:56:a5:9e:5b:78:ff:5c: 9d:ef:3c:99:70:70:ec:14:27:9c:12:01:94:0a:68: 83:63:e7:9e:1b:14:44:c7:56:01:37:b3:7a:96:1e: ad:bf:41:98:2e:30:73:b1:fa:b3:b9:61:8e:a0:4c: 45:5a:c2:64:bd:7b:f3:5a:5d:9a:d9:fc:f0:bb:9d: ce:03:78:0f:30:57:d4:f4:f9:70:f4:16:da:32:97: b7:e1:d8:c2:66:3a:32:19:e9:1f:cd:33:9c:0e:03: 70:c9:b7:d0:71:0f:d5:1b:dc:37:fc:8e:91:ce:e7: 0e:e6:72:5d:76:b8:ef:cc:8e:02:80:dd:31:e1:fe: ed:68:8f:43:a3:07:eb:31:71:54:4f:d6:3c:d8:b4: cb:74:61:7e:ab:6a:e2:ac:3e:90:72:66:2c:73:ab: df:cd:de:1f:e5:1e:5f:89:0f:35:a5:71:1e:e4:dc: 46:44:66:25:af:73:5b:f0:27:b3:80:11:23:f6:74: cd:5d:a0:53:89:ab:b7:48:bd:24:95:a1:ef:56:d3: 38:0a:09:bd:bf:bc:8b:24:69:d1:33:56:88:09:24: e1:e1:f6:70:35:01:d9:1f:94:bb:c8:df:45:44:ab: c0:56:4f:3d:80:34:62:0a:08:36:8b:1d:58:10:85: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:6D:71:9A:50:45:58:A1:EC:DC:A6:D9:8D:62:3C:E7:ED:54:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7e:e6:b3:65:76:3f:02:ee:5e:b5:8e:60:42:96:8a:e3:29: 21:44:c3:41:97:03:b4:ab:34:82:ab:ba:a6:c7:2f:f0:53:f3: a8:73:05:22:09:df:14:aa:8d:cd:f0:99:b0:6b:a1:4a:2f:98: 79:34:f2:94:63:1e:ac:82:b8:34:73:3c:ee:90:29:67:b1:6d: 63:93:02:92:8b:42:59:f9:3c:3b:59:2d:9f:9d:be:81:db:60: e3:2a:cd:50:4a:b8:8b:32:4b:24:d0:75:e1:f1:d5:0f:0c:9c: c0:a9:24:37:38:ad:de:7e:40:bc:1e:1e:6d:ca:e5:52:d3:c6: 6a:31:1d:b9:9f:5e:19:41:ac:d4:0b:b4:fc:d9:c3:96:b9:ef: ca:b3:7d:7a:3a:c7:b7:e6:fb:fa:49:75:32:78:66:b3:cd:4f: 79:4b:fa:62:02:8d:e5:0e:3c:1a:10:eb:eb:33:f9:5a:1b:64: 93:6f:96:c9:aa:06:bb:ac:b0:4a:01:f9:6e:3f:14:70:48:82: 39:00:5b:bc:4d:98:71:4c:df:ec:77:e2:67:b4:fe:b1:56:ad: dc:ec:64:e9:64:b3:24:6c:c3:af:0b:82:60:fc:5f:70:80:0d: 53:ef:93:26:22:02:e0:8a:02:7a:8c:33:19:e7:11:64:2f:53: f9:84:54:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgRO3HeTix/LMfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDExMloXDTI1MDUwNTEzMDExMlowLzEtMCsGA1UEAxMk MjNhMjg0NGMtMTZjMy00MjhlLWE0NGEtNjZmZjBiZGEwYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPa/ofdfa1alnlt4/1yd7zyZcHDsFCecEgGU CmiDY+eeGxREx1YBN7N6lh6tv0GYLjBzsfqzuWGOoExFWsJkvXvzWl2a2fzwu53O A3gPMFfU9Plw9BbaMpe34djCZjoyGekfzTOcDgNwybfQcQ/VG9w3/I6RzucO5nJd drjvzI4CgN0x4f7taI9DowfrMXFUT9Y82LTLdGF+q2rirD6QcmYsc6vfzd4f5R5f iQ81pXEe5NxGRGYlr3Nb8CezgBEj9nTNXaBTiau3SL0klaHvVtM4Cgm9v7yLJGnR M1aICSTh4fZwNQHZH5S7yN9FRKvAVk89gDRiCgg2ix1YEIVb1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZVbXGaUEVYoezcptmNYjzn7VTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzYwMGM1NDktZDliNy0z Y2QwLTlkODYtODgyYjY1MjU3YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEB+5rNldj8C7l61jmBClorjKSFEw0GXA7SrNIKruqbHL/BT86hz BSIJ3xSqjc3wmbBroUovmHk08pRjHqyCuDRzPO6QKWexbWOTApKLQln5PDtZLZ+d voHbYOMqzVBKuIsySyTQdeHx1Q8MnMCpJDc4rd5+QLweHm3K5VLTxmoxHbmfXhlB rNQLtPzZw5a578qzfXo6x7fm+/pJdTJ4ZrPNT3lL+mICjeUOPBoQ6+sz+VobZJNv lsmqBrussEoB+W4/FHBIgjkAW7xNmHFM3+x34me0/rFWrdzsZOlksyRsw68LgmD8 X3CADVPvkyYiAuCKAnqMMxnnEWQvU/mEVFk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:57 2025 by rpki-client