$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa File: 42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa (raw, json) Hash identifier: hXF+KsKD4PAqyQbd00M9Rl6G1la58EpmgaZDBXEvBA0= Subject key identifier: 48:04:59:79:8B:6D:C0:40:9B:49:81:EE:95:80:BF:BD:CE:33:AF:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55941B5269C9A907AF48180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa Signing time: Tue 04 Feb 2025 12:40:58 +0000 ROA not before: Tue 04 Feb 2025 12:40:58 +0000 ROA not after: Mon 05 May 2025 11:40:58 +0000 asID: 30036 IP address blocks: 2604:2d80:b480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:59:41:b5:26:9c:9a:90:7a:f4:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:40:58 2025 GMT Not After : May 5 11:40:58 2025 GMT Subject: CN=2a95177b-68e2-4370-96b7-f8d9de8c12d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:f9:1e:63:70:02:e7:a4:d9:4f:c8:97:79: 70:37:19:48:bc:db:03:57:94:b9:55:b8:21:95:12: 35:2f:93:4b:e8:54:b2:f2:14:05:54:03:44:87:61: c2:a7:d2:5b:f2:f8:09:b3:e7:4f:fd:3d:fc:7c:a4: a7:ad:d6:d9:39:01:18:24:09:2c:d8:80:1f:59:6b: 2d:97:5a:2b:13:78:39:58:ea:96:d2:4f:be:8a:0e: 4d:3c:e1:68:a1:cc:bc:46:e8:4f:9b:89:3b:4d:2e: 63:a9:28:fb:07:94:10:7f:e9:9f:b2:8a:de:41:17: 6d:41:02:92:45:72:bd:f7:b0:16:a8:21:d8:52:31: db:fd:82:e2:12:c0:6d:43:c8:af:0a:e8:4c:66:0a: c6:42:c1:ef:8f:55:18:9e:03:a0:02:21:27:93:ec: 27:89:61:cc:49:5e:fa:ce:07:bf:fa:2a:a6:94:48: 01:a3:02:09:42:29:ee:94:68:77:cf:7c:dd:f1:7d: 13:73:7b:8f:ff:37:45:82:e6:c5:9c:6d:4f:cc:a8: ca:d1:06:b9:64:c3:05:bc:ec:26:77:ec:c4:f6:0e: 34:8a:a8:20:50:4e:9f:8e:18:2f:08:83:4b:f8:bc: 61:7b:bb:9a:06:2e:09:5d:a3:2a:d5:da:f9:88:ed: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:59:79:8B:6D:C0:40:9B:49:81:EE:95:80:BF:BD:CE:33:AF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c4bdda-1cbf-3f00-8614-54314ceeb87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b480::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f9:03:29:d4:b0:1f:76:dc:12:f0:40:8f:57:b1:d2:5f:9e: 86:ad:f5:ed:33:b8:4b:26:ac:8b:d2:85:25:3b:54:71:d0:71: 89:4c:2b:77:9f:86:3c:95:6a:60:68:d3:61:bf:a7:d3:e2:b0: db:a9:3c:58:c7:54:2d:dc:08:e8:bb:af:f7:37:5f:af:e0:c4: e6:bd:b0:40:0c:07:00:00:88:e5:a9:76:24:20:3b:fa:33:06: c2:0d:25:30:2b:da:8f:15:c1:87:e4:c1:1c:9a:eb:1c:d2:a2: 0c:56:4c:77:cb:b4:5e:66:fe:be:e8:58:67:a6:6d:59:8b:76: d3:f9:dd:a0:1d:b9:d0:0d:02:4a:e7:59:70:78:26:99:a5:17: 80:5a:20:e8:d9:4e:93:91:17:7d:52:32:6b:83:b3:33:dd:53: ac:29:9b:76:93:1f:b5:ae:01:25:69:8a:22:a2:72:8c:d3:f4: a1:b7:22:c4:23:b3:a6:54:36:05:70:2e:62:ec:36:51:36:ba: 45:d9:df:76:27:0e:9a:23:9a:65:88:2c:33:91:f5:06:fa:9d: 24:7f:d6:cc:2a:ad:01:48:33:16:91:df:fc:b7:11:00:86:c0: 96:aa:69:c8:1d:ad:a1:2f:96:a3:b7:ca:8c:23:ef:cf:1b:ac: 73:55:77:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFWUG1JpyakHr0gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNDA1OFoXDTI1MDUwNTExNDA1OFowLzEtMCsGA1UEAxMk MmE5NTE3N2ItNjhlMi00MzcwLTk2YjctZjhkOWRlOGMxMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ35HmNwAuek2U/Il3lwNxlIvNsDV5S5Vbgh lRI1L5NL6FSy8hQFVANEh2HCp9Jb8vgJs+dP/T38fKSnrdbZOQEYJAks2IAfWWst l1orE3g5WOqW0k++ig5NPOFoocy8RuhPm4k7TS5jqSj7B5QQf+mfsoreQRdtQQKS RXK997AWqCHYUjHb/YLiEsBtQ8ivCuhMZgrGQsHvj1UYngOgAiEnk+wniWHMSV76 zge/+iqmlEgBowIJQinulGh3z3zd8X0Tc3uP/zdFgubFnG1PzKjK0Qa5ZMMFvOwm d+zE9g40iqggUE6fjhgvCINL+Lxhe7uaBi4JXaMq1dr5iO14WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgEWXmLbcBAm0mB7pWAv73OM68VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDJjNGJkZGEtMWNiZi0z ZjAwLTg2MTQtNTQzMTRjZWViODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFP5AynUsB923BLwQI9XsdJfnoat9e0zuEsmrIvShSU7VHHQcYlM K3efhjyVamBo02G/p9PisNupPFjHVC3cCOi7r/c3X6/gxOa9sEAMBwAAiOWpdiQg O/ozBsINJTAr2o8VwYfkwRya6xzSogxWTHfLtF5m/r7oWGembVmLdtP53aAdudAN AkrnWXB4JpmlF4BaIOjZTpORF31SMmuDszPdU6wpm3aTH7WuASVpiiKicozT9KG3 IsQjs6ZUNgVwLmLsNlE2ukXZ33YnDpojmmWILDOR9Qb6nSR/1swqrQFIMxaR3/y3 EQCGwJaqacgdraEvlqO3yowj788brHNVd3g= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:54 2025 by rpki-client