$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/368c1e72-b70f-3368-9a2f-b3d7dd71b6e7.roa File: 368c1e72-b70f-3368-9a2f-b3d7dd71b6e7.roa (raw, json) Hash identifier: 3HtAa5J41OnULHLzwbqaxpKio8r3n8j5M6Be54Zo0QY= Subject key identifier: A7:08:2B:04:E4:03:73:92:7B:54:A0:20:6B:71:24:25:3B:22:D4:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848BE125FDA9B17FAE7DA550900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/368c1e72-b70f-3368-9a2f-b3d7dd71b6e7.roa Signing time: Sat 01 Feb 2025 22:07:30 +0000 ROA not before: Sat 01 Feb 2025 22:07:30 +0000 ROA not after: Fri 02 May 2025 21:07:30 +0000 asID: 30036 IP address blocks: 2604:2d80:f200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:12:5f:da:9b:17:fa:e7:da:55:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 1 22:07:30 2025 GMT Not After : May 2 21:07:30 2025 GMT Subject: CN=3f9e5c40-a1a9-4588-83f2-32b590a0b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:b9:d4:f7:67:91:08:ec:5c:fc:7b:2b:02: 43:a3:ff:54:56:ec:b4:41:ad:7e:c1:ae:4a:06:95: 43:ea:f0:16:59:a3:b8:b8:da:1b:dd:c2:82:87:cb: 63:a5:84:e5:ec:6c:82:92:e1:e3:7b:ad:7d:03:c6: bd:9c:ef:c5:05:ac:5a:19:dc:bd:db:02:61:43:dd: 7e:75:8c:28:93:9a:f8:07:98:27:55:62:62:5c:97: 52:e0:c3:e3:8f:d7:87:19:19:6a:f0:c7:69:bc:83: 6b:94:88:4e:9b:dd:af:1a:c3:5f:80:d9:eb:c2:bd: d8:c9:6c:44:b2:2e:86:85:10:63:c2:59:93:11:18: 0a:89:3f:62:94:53:31:da:10:e4:d7:8d:b5:a4:02: f5:a4:6c:25:88:06:93:15:d4:11:45:19:68:7c:a3: 66:37:34:8a:fb:41:05:35:61:c6:bf:53:ba:60:62: 7d:e7:ae:a9:6a:74:66:4b:85:fb:51:4e:c8:e3:8e: 6f:17:7f:c6:4c:22:51:76:75:43:c0:64:e2:6c:5f: 2e:d7:e3:39:4b:62:2c:2d:c0:ad:ed:7b:14:c8:3f: e3:ad:e3:27:a3:4f:f5:97:a9:09:8f:0e:5c:0c:d1: 7b:ef:62:f4:03:a0:9e:0a:1a:a8:80:d8:55:4a:d4: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:08:2B:04:E4:03:73:92:7B:54:A0:20:6B:71:24:25:3B:22:D4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/368c1e72-b70f-3368-9a2f-b3d7dd71b6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a1:f8:50:59:9b:65:89:67:da:72:f9:4f:dc:c2:52:07:d1: a2:50:39:b9:96:56:37:c4:e4:65:2e:70:f8:a0:3a:4b:d9:ea: 9e:cd:32:64:a8:be:aa:94:e6:33:df:12:92:43:b1:09:51:31: da:3d:a4:c6:e2:72:8d:02:16:c0:62:ce:2a:6a:24:63:b1:20: 18:57:84:52:48:78:8b:3b:eb:d3:a1:87:aa:b3:ee:4a:dd:08: 78:be:b1:47:99:65:d2:05:0b:c9:f2:09:90:a0:86:c8:46:cb: e2:88:b7:52:66:c9:05:c1:d0:b6:6c:a9:13:71:4c:1e:e1:ee: 87:cd:5a:10:21:fd:a1:d6:87:d1:fe:82:c9:3a:ee:e5:f1:94: cc:78:49:17:53:4a:bb:b3:71:e8:4e:c9:78:82:68:ac:75:01: 8e:54:dc:2d:b2:25:bc:87:5f:be:f9:94:98:f4:d6:0e:7e:6f: 98:0b:70:52:57:22:a3:0d:7d:af:df:b2:f4:3e:e9:89:f3:bd: 59:89:ed:81:f6:26:d7:96:39:98:e0:e1:9a:2b:5a:97:bf:d4: 9b:47:5d:ed:29:5c:9d:1b:41:76:94:2a:2f:2c:c7:c7:75:30: e7:d7:50:e7:e9:c7:a2:f0:1d:37:70:76:1e:74:4a:70:88:cb: 24:34:06:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi+El/amxf659pVCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMTIyMDczMFoXDTI1MDUwMjIxMDczMFowLzEtMCsGA1UEAxMk M2Y5ZTVjNDAtYTFhOS00NTg4LTgzZjItMzJiNTkwYTBiM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8q51PdnkQjsXPx7KwJDo/9UVuy0Qa1+wa5K BpVD6vAWWaO4uNob3cKCh8tjpYTl7GyCkuHje619A8a9nO/FBaxaGdy92wJhQ91+ dYwok5r4B5gnVWJiXJdS4MPjj9eHGRlq8MdpvINrlIhOm92vGsNfgNnrwr3YyWxE si6GhRBjwlmTERgKiT9ilFMx2hDk1421pAL1pGwliAaTFdQRRRlofKNmNzSK+0EF NWHGv1O6YGJ9566panRmS4X7UU7I445vF3/GTCJRdnVDwGTibF8u1+M5S2IsLcCt 7XsUyD/jreMno0/1l6kJjw5cDNF772L0A6CeChqogNhVStRP+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKcIKwTkA3OSe1SgIGtxJCU7ItS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzY4YzFlNzItYjcwZi0z MzY4LTlhMmYtYjNkN2RkNzFiNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6h+FBZm2WJZ9py+U/cwlIH0aJQObmWVjfE5GUucPigOkvZ6p7N MmSovqqU5jPfEpJDsQlRMdo9pMbico0CFsBizipqJGOxIBhXhFJIeIs769Ohh6qz 7krdCHi+sUeZZdIFC8nyCZCghshGy+KIt1JmyQXB0LZsqRNxTB7h7ofNWhAh/aHW h9H+gsk67uXxlMx4SRdTSruzcehOyXiCaKx1AY5U3C2yJbyHX775lJj01g5+b5gL cFJXIqMNfa/fsvQ+6YnzvVmJ7YH2JteWOZjg4ZorWpe/1JtHXe0pXJ0bQXaUKi8s x8d1MOfXUOfpx6LwHTdwdh50SnCIyyQ0Boc= -----END CERTIFICATE-----Generated at Tue Apr 8 23:43:59 2025 by rpki-client