$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cb3f815-d626-3867-9f91-03281d9315f2.roa File: 3cb3f815-d626-3867-9f91-03281d9315f2.roa (raw, json) Hash identifier: pweexj4jo+uKkx4IRY6IYqDo6wX0FkdA/qkgLu5jh6k= Subject key identifier: 23:1A:CC:30:66:CE:32:58:87:36:E3:EC:FD:0F:2F:FD:49:90:2C:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FE6B6C8FA832C02969D280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cb3f815-d626-3867-9f91-03281d9315f2.roa Signing time: Wed 05 Feb 2025 11:25:22 +0000 ROA not before: Wed 05 Feb 2025 11:25:22 +0000 ROA not after: Tue 06 May 2025 10:25:22 +0000 asID: 30036 IP address blocks: 2604:2d80:d180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fe:6b:6c:8f:a8:32:c0:29:69:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:25:22 2025 GMT Not After : May 6 10:25:22 2025 GMT Subject: CN=70ecd56a-6da7-47f6-938e-73ac8d36c563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:4f:ba:73:48:42:ca:1f:64:e5:ff:c3:89: 46:c1:c3:2f:0c:9d:18:0e:44:96:46:ab:43:2e:f6: d2:7b:93:69:9a:b0:db:00:3c:2e:2b:75:c4:fb:47: 97:62:03:e5:1c:52:99:51:bd:5e:9b:60:12:87:a1: 09:85:de:01:d5:4c:e3:51:a1:4e:6e:f0:d4:17:79: 3b:14:ef:a0:62:9a:53:fe:a2:95:63:7a:f1:fd:95: a6:d1:ea:22:70:68:85:d2:9b:4a:b0:58:06:88:af: 9a:45:1f:e0:4c:a9:f3:0e:32:8f:ad:57:f9:e3:49: 9a:29:db:c0:b2:63:cb:52:61:14:b5:b2:2e:f0:e5: 59:4c:aa:28:61:f8:5f:e9:15:c2:37:2a:4a:a2:4d: 45:2c:80:ca:f2:be:1b:65:27:3d:57:bb:94:1b:ad: a3:be:60:44:68:55:c8:77:7a:29:41:77:23:32:16: 2b:7f:b1:31:84:12:8d:e6:6c:0a:a1:5f:81:d1:ec: 52:dc:6f:cf:2b:f2:97:e9:2b:7f:a1:8c:92:95:e8: c1:79:c1:c1:6d:13:c1:98:7a:01:99:7c:cb:65:9f: c0:f4:6b:67:65:d4:8b:4d:ad:90:79:f0:f7:fd:90: 08:f1:00:46:e5:60:b9:0d:0a:43:53:dd:77:fa:57: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1A:CC:30:66:CE:32:58:87:36:E3:EC:FD:0F:2F:FD:49:90:2C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cb3f815-d626-3867-9f91-03281d9315f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ae:20:3a:97:6f:0a:c3:4d:a6:38:87:e0:1e:ae:db:fc:f3: 4b:b6:59:9c:03:89:1d:25:63:e3:9d:0a:e0:c7:f2:ab:62:a1: bc:44:1d:d9:96:c7:96:67:1e:58:3d:65:d7:38:fe:0a:4d:7e: bd:0f:51:aa:e7:34:5a:c4:69:e7:14:db:55:39:61:dc:d1:39: c3:c8:1a:f3:9f:1d:4d:cd:30:10:c6:75:76:73:9f:0e:c4:82: 52:0f:fe:f8:9f:d8:de:e4:1e:26:97:41:31:dc:a5:55:54:98: 33:a7:5d:5a:80:43:49:36:a1:ea:a8:16:2e:64:73:81:e2:34: 98:0a:02:09:ea:a7:b9:24:f0:83:f2:8d:86:63:49:74:10:e8: 23:88:43:7e:29:99:66:99:99:8e:3d:74:8c:1a:55:56:38:47: 13:16:17:b5:06:e6:e9:09:f4:0e:76:bc:f4:e8:7d:10:1d:4e: 72:a4:68:7b:4a:c1:28:f9:f8:c7:86:31:68:f0:87:69:39:a3: 74:ce:33:ba:d3:62:db:2a:ca:e3:68:73:c8:c6:81:5d:9e:64: 15:17:4f:4c:28:97:a5:5e:a1:46:1d:f2:27:83:c9:c0:c0:9b: e8:3f:e0:f7:ef:0d:11:ee:19:db:9f:23:73:e8:98:99:4e:31: 3f:0c:ce:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjH/mtsj6gywClp0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjUyMloXDTI1MDUwNjEwMjUyMlowLzEtMCsGA1UEAxMk NzBlY2Q1NmEtNmRhNy00N2Y2LTkzOGUtNzNhYzhkMzZjNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSJPunNIQsofZOX/w4lGwcMvDJ0YDkSWRqtD LvbSe5NpmrDbADwuK3XE+0eXYgPlHFKZUb1em2ASh6EJhd4B1UzjUaFObvDUF3k7 FO+gYppT/qKVY3rx/ZWm0eoicGiF0ptKsFgGiK+aRR/gTKnzDjKPrVf540maKdvA smPLUmEUtbIu8OVZTKooYfhf6RXCNypKok1FLIDK8r4bZSc9V7uUG62jvmBEaFXI d3opQXcjMhYrf7ExhBKN5mwKoV+B0exS3G/PK/KX6St/oYySlejBecHBbRPBmHoB mXzLZZ/A9GtnZdSLTa2QefD3/ZAI8QBG5WC5DQpDU913+lcl+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMazDBmzjJYhzbj7P0PL/1JkCyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NiM2Y4MTUtZDYyNi0z ODY3LTlmOTEtMDMyODFkOTMxNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmuIDqXbwrDTaY4h+Aertv880u2WZwDiR0lY+OdCuDH8qtiobxE HdmWx5ZnHlg9Zdc4/gpNfr0PUarnNFrEaecU21U5YdzROcPIGvOfHU3NMBDGdXZz nw7EglIP/vif2N7kHiaXQTHcpVVUmDOnXVqAQ0k2oeqoFi5kc4HiNJgKAgnqp7kk 8IPyjYZjSXQQ6COIQ34pmWaZmY49dIwaVVY4RxMWF7UG5ukJ9A52vPTofRAdTnKk aHtKwSj5+MeGMWjwh2k5o3TOM7rTYtsqyuNoc8jGgV2eZBUXT0wol6VeoUYd8ieD ycDAm+g/4PfvDRHuGdufI3PomJlOMT8Mzos= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:59 2025 by rpki-client