$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa File: 5876539f-5b68-3fa4-b595-0e67f68b72d2.roa (raw, json) Hash identifier: wyx42kkYocJ8v9S5JnaapMc93oUgWzsDGEOQbwudKJM= Subject key identifier: 62:2B:44:C2:F5:45:B8:65:BE:30:EC:3E:37:6F:20:07:42:F4:A1:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C53507C4B6FB586E172C7180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa Signing time: Tue 04 Feb 2025 11:27:59 +0000 ROA not before: Tue 04 Feb 2025 11:27:59 +0000 ROA not after: Mon 05 May 2025 10:27:59 +0000 asID: 30036 IP address blocks: 2604:2d80:ae00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:35:07:c4:b6:fb:58:6e:17:2c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:27:59 2025 GMT Not After : May 5 10:27:59 2025 GMT Subject: CN=16e5e5ba-ecfa-4f73-8025-7bde1fb7c916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:2c:7e:31:12:06:c1:c9:ec:90:0d:d4:b6: 05:65:e2:a5:6d:c1:1c:d1:62:db:f8:30:0a:7a:8f: a6:63:70:97:33:dd:14:fb:08:26:98:71:df:a8:56: d1:d4:92:98:5b:87:ed:78:82:78:e7:09:e8:8c:7e: 0b:99:31:2e:8c:dd:3d:5e:08:d3:d4:b2:09:12:13: 95:90:04:b1:cc:bc:6a:67:89:95:d5:da:78:d5:09: 74:08:74:2d:19:eb:ec:40:1b:b8:cd:bc:48:23:a0: 30:80:72:95:05:d6:8e:59:8f:77:b0:91:41:30:9c: 2f:a5:43:32:69:0d:e1:d9:2f:57:b0:9c:fa:5c:ea: 44:b7:47:17:78:05:60:75:ee:38:86:d9:8c:36:79: a6:73:71:85:17:8a:4f:54:e2:49:d9:ec:d0:19:f1: 88:d5:67:c0:67:6d:c0:56:af:b9:ec:74:6d:8d:23: a2:e2:db:bb:b3:f9:c3:33:31:ad:27:d9:74:7c:41: b6:c2:59:e9:bc:bb:f7:af:08:39:66:8d:ed:62:44: da:1f:b0:d1:2f:56:90:28:50:ed:b1:62:bd:8e:89: 25:36:0d:ab:2f:0f:75:e2:f9:78:a0:85:93:ad:d5: 13:8d:83:e3:42:3e:7d:38:a8:ae:d7:85:66:c9:20: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2B:44:C2:F5:45:B8:65:BE:30:EC:3E:37:6F:20:07:42:F4:A1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5876539f-5b68-3fa4-b595-0e67f68b72d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ae00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ba:a2:6f:88:b3:b1:14:0a:0d:89:88:73:cb:c8:53:7e:f9: 9e:c0:b9:ce:2e:bb:70:b0:28:dd:46:44:37:43:ab:20:63:c8: 09:cf:31:27:9b:74:74:a2:b6:db:a2:9f:98:eb:ef:04:a4:23: d7:17:30:d1:ac:a0:a7:a9:f4:90:23:0f:96:b5:fa:7e:ef:f7: 1f:8b:8a:44:a8:78:25:1c:1a:bd:c7:09:27:d1:37:8c:12:06: dc:80:b8:6a:58:01:4c:3d:2a:d5:97:ae:72:3e:6d:46:a9:c3: 42:e8:ef:1a:3e:e7:28:bd:cc:53:07:e3:e5:b6:b7:00:df:a1: b7:1b:1b:f5:40:60:b7:34:57:7a:67:47:97:16:85:38:29:0f: 03:04:3f:5e:3e:e3:01:94:cf:9c:aa:26:14:b7:75:73:63:7c: b6:68:f3:26:22:be:0b:7f:12:46:be:12:54:b6:d3:76:b6:a0: b3:4f:9c:5a:3a:b4:d7:10:da:e4:f7:63:4d:e8:55:66:c9:67: 8e:36:37:8a:fb:3c:39:fc:ea:42:8d:05:55:3e:7a:1b:14:f0: ef:2c:d6:68:b6:f1:76:72:a9:6d:9f:7f:b5:92:f0:18:d8:02: 02:81:f1:99:b3:18:e6:e5:eb:d6:80:e5:f5:30:8f:6b:ca:17: 53:62:58:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFNQfEtvtYbhcscYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjc1OVoXDTI1MDUwNTEwMjc1OVowLzEtMCsGA1UEAxMk MTZlNWU1YmEtZWNmYS00ZjczLTgwMjUtN2JkZTFmYjdjOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqwsfjESBsHJ7JAN1LYFZeKlbcEc0WLb+DAK eo+mY3CXM90U+wgmmHHfqFbR1JKYW4fteIJ45wnojH4LmTEujN09XgjT1LIJEhOV kASxzLxqZ4mV1dp41Ql0CHQtGevsQBu4zbxII6AwgHKVBdaOWY93sJFBMJwvpUMy aQ3h2S9XsJz6XOpEt0cXeAVgde44htmMNnmmc3GFF4pPVOJJ2ezQGfGI1WfAZ23A Vq+57HRtjSOi4tu7s/nDMzGtJ9l0fEG2wlnpvLv3rwg5Zo3tYkTaH7DRL1aQKFDt sWK9joklNg2rLw914vl4oIWTrdUTjYPjQj59OKiu14VmySD+pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGIrRML1RbhlvjDsPjdvIAdC9KFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg3NjUzOWYtNWI2OC0z ZmE0LWI1OTUtMGU2N2Y2OGI3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgK4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG26om+Is7EUCg2JiHPLyFN++Z7Auc4uu3CwKN1GRDdDqyBjyAnP MSebdHSittuin5jr7wSkI9cXMNGsoKep9JAjD5a1+n7v9x+LikSoeCUcGr3HCSfR N4wSBtyAuGpYAUw9KtWXrnI+bUapw0Lo7xo+5yi9zFMH4+W2twDfobcbG/VAYLc0 V3pnR5cWhTgpDwMEP14+4wGUz5yqJhS3dXNjfLZo8yYivgt/Eka+ElS203a2oLNP nFo6tNcQ2uT3Y03oVWbJZ442N4r7PDn86kKNBVU+ehsU8O8s1mi28XZyqW2ff7WS 8BjYAgKB8ZmzGObl69aA5fUwj2vKF1NiWCQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:29 2025 by rpki-client