$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa File: 3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa (raw, json) Hash identifier: I+RjT1do51SW5hcnFQGhrzBqTvW1uAaD/l4wgcrSsaA= Subject key identifier: 9D:1D:5B:86:88:9A:F2:3C:A1:B0:15:FB:75:8B:A9:A4:95:05:7E:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5591EC0226CEAFC5CE2C500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa Signing time: Tue 04 Feb 2025 12:40:42 +0000 ROA not before: Tue 04 Feb 2025 12:40:42 +0000 ROA not after: Mon 05 May 2025 11:40:42 +0000 asID: 30036 IP address blocks: 2604:2d80:f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:59:1e:c0:22:6c:ea:fc:5c:e2:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:40:42 2025 GMT Not After : May 5 11:40:42 2025 GMT Subject: CN=c11c6f87-950d-4b2b-92ff-6a5a7d941e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:3d:95:ce:92:ce:d2:f5:4c:ed:50:72:c8: 1b:59:e8:a9:8d:0d:41:66:87:91:84:a6:86:91:a8: 2d:1f:8d:c1:18:22:29:3c:12:b7:21:fc:4e:9b:19: fc:64:af:42:d4:9a:83:e4:41:cf:40:b6:54:9d:d8: 3c:fd:69:73:e2:5b:95:ac:80:a2:78:e9:aa:6f:ca: b4:f7:c7:6e:fa:a1:d7:ae:97:9f:89:87:af:2b:c8: 79:3c:37:72:e4:ef:03:16:d8:b8:44:be:6c:4a:19: 16:28:14:de:03:04:e2:11:a5:f6:54:b4:58:e4:77: ad:57:5c:36:16:ca:cc:35:e1:25:da:50:79:3b:eb: f1:09:96:96:85:eb:7f:06:b7:6c:a1:90:2a:12:77: 07:cb:3e:f2:4e:09:d1:26:54:f8:95:dd:55:7c:ef: fb:52:33:f9:ba:19:de:aa:ff:30:95:a2:2b:5b:b5: 19:08:d0:ce:b2:a5:df:d0:b4:7f:e6:cb:99:b7:fa: 50:25:f7:b8:a4:44:73:c4:ee:68:83:87:3c:9b:4b: ac:29:34:13:de:3a:1f:80:ea:5c:9c:e1:82:92:d2: 92:9f:e4:0c:c0:4e:9b:bd:b8:91:48:5b:22:ef:2f: 63:82:e9:fa:4c:ca:3c:59:fd:d4:99:9e:1f:19:c5: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1D:5B:86:88:9A:F2:3C:A1:B0:15:FB:75:8B:A9:A4:95:05:7E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bd:21:83:12:83:4b:bc:d3:4a:bc:7f:3f:28:db:22:53:fc: 4e:69:33:1a:19:b4:02:6b:06:bf:a4:bf:a7:23:24:1c:b3:b4: 5f:78:a1:86:46:2f:6c:d8:c8:f5:4d:f0:de:ab:03:4d:06:ba: df:01:d1:21:b5:b6:f1:d3:d5:02:0b:2d:7c:0e:d6:ea:aa:56: d6:c1:5f:7b:1d:70:fd:97:e5:e5:e2:01:4e:46:04:16:c2:19: f4:9b:01:2a:ef:68:c6:aa:7f:d9:a7:6b:13:8d:03:6d:20:b7: 24:ff:4c:01:3b:b7:24:57:d8:b3:89:d2:2f:4e:63:52:25:6d: 93:74:e2:4c:dc:fb:24:4b:44:28:47:0f:3f:57:1f:33:11:d6: a8:4c:b1:f2:01:7e:91:0e:41:fe:7c:f4:41:b4:93:8a:56:a6: 0c:65:16:46:58:b4:74:12:28:46:a7:62:3c:32:a9:1a:b2:46: d3:88:48:64:62:86:e8:18:8f:e7:4a:b3:73:72:77:3d:29:c6: 76:04:e4:ed:0c:8b:fe:93:6d:5d:d0:f3:ed:91:4e:61:d6:54: c5:87:a0:0e:37:17:07:0a:ef:66:b1:3b:ba:ee:80:e1:21:9a: d5:03:1b:2d:4d:c2:a9:37:e4:bb:3d:e1:46:da:26:98:41:c4: ca:a4:79:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFWR7AImzq/FzixQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNDA0MloXDTI1MDUwNTExNDA0MlowLzEtMCsGA1UEAxMk YzExYzZmODctOTUwZC00YjJiLTkyZmYtNmE1YTdkOTQxZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoo9lc6SztL1TO1QcsgbWeipjQ1BZoeRhKaG kagtH43BGCIpPBK3IfxOmxn8ZK9C1JqD5EHPQLZUndg8/Wlz4luVrICieOmqb8q0 98du+qHXrpefiYevK8h5PDdy5O8DFti4RL5sShkWKBTeAwTiEaX2VLRY5HetV1w2 FsrMNeEl2lB5O+vxCZaWhet/BrdsoZAqEncHyz7yTgnRJlT4ld1VfO/7UjP5uhne qv8wlaIrW7UZCNDOsqXf0LR/5suZt/pQJfe4pERzxO5og4c8m0usKTQT3jofgOpc nOGCktKSn+QMwE6bvbiRSFsi7y9jgun6TMo8Wf3UmZ4fGcU/dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0dW4aImvI8obAV+3WLqaSVBX5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I4ZTI2MTgtYWYyYy0z N2E4LTgzMTktN2ZlMmNjNzMzMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgA8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA29IYMSg0u800q8fz8o2yJT/E5pMxoZtAJrBr+kv6cjJByztF94 oYZGL2zYyPVN8N6rA00Gut8B0SG1tvHT1QILLXwO1uqqVtbBX3sdcP2X5eXiAU5G BBbCGfSbASrvaMaqf9mnaxONA20gtyT/TAE7tyRX2LOJ0i9OY1IlbZN04kzc+yRL RChHDz9XHzMR1qhMsfIBfpEOQf589EG0k4pWpgxlFkZYtHQSKEanYjwyqRqyRtOI SGRihugYj+dKs3Nydz0pxnYE5O0Mi/6TbV3Q8+2RTmHWVMWHoA43FwcK72axO7ru gOEhmtUDGy1Nwqk35Ls94UbaJphBxMqkeeY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:41 2025 by rpki-client