$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa File: 587a5b51-3a67-3149-8d6d-818570364a1c.roa (raw, json) Hash identifier: vgMvrlS6jpZdFcjZGgKt4aU4Q0Ry7GpsjgJ4gs9vUBU= Subject key identifier: 15:90:A8:FF:3D:3D:43:13:E9:F5:93:57:97:D1:D8:5A:D4:C3:75:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B058831A6D0A15B6ACAD2000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa Signing time: Tue 28 Jan 2025 00:07:30 +0000 ROA not before: Tue 28 Jan 2025 00:07:30 +0000 ROA not after: Sun 27 Apr 2025 23:07:30 +0000 asID: 30036 IP address blocks: 2604:2d80:3d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:58:83:1a:6d:0a:15:b6:ac:ad:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 28 00:07:30 2025 GMT Not After : Apr 27 23:07:30 2025 GMT Subject: CN=ce8ae46c-9867-4fae-b916-b3b4021bb218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:28:2e:4c:20:ad:35:4e:5e:45:3a:8a:7c: 70:8c:89:ad:38:3a:f5:a1:7c:e0:f4:97:2e:50:f2: de:d8:87:45:97:a8:e6:65:ed:d3:cb:6b:b5:7c:f1: f0:ff:82:ea:8c:ed:89:b2:34:3a:91:07:79:5f:e2: 26:85:ac:4b:ee:a6:ac:f6:98:ae:eb:c2:b0:6b:b3: 97:45:46:ca:4a:29:28:ab:e7:43:f5:75:4f:f4:a3: 5d:de:61:75:73:ea:fd:bf:b5:48:f5:12:db:3f:85: 97:50:1c:eb:f3:92:58:56:6f:8c:8e:6b:e6:91:2c: 5f:88:a2:10:ce:36:2c:23:cf:bd:dc:c9:ad:28:d4: 95:06:ad:f3:5a:b7:5f:ea:ae:05:91:1b:44:f4:a6: 97:66:01:68:4c:da:47:3f:ea:f9:26:61:d5:45:8a: 2f:ee:c2:85:eb:d5:38:bc:90:6f:78:6c:ce:6c:c6: b3:f7:78:a6:2e:7c:37:0d:05:67:0b:55:2b:64:1a: 10:3d:2c:5b:0f:af:d7:30:10:5d:e2:7c:d0:a0:2c: fd:dd:5a:da:08:54:e6:b8:24:da:b9:de:e3:39:61: 81:8d:00:ba:29:71:2e:e0:7f:90:2a:33:e0:d1:ad: 72:2a:55:b1:62:2b:89:3b:c8:e8:8d:90:89:e1:a0: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:90:A8:FF:3D:3D:43:13:E9:F5:93:57:97:D1:D8:5A:D4:C3:75:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f8:0d:9a:c0:cf:ba:fa:80:21:88:ba:68:43:35:33:e0:64: 60:4a:a2:35:7e:ae:1a:a3:65:8e:ae:1a:95:c8:f2:60:bc:42: eb:bb:40:f9:be:3d:53:15:40:53:b8:a7:1e:80:92:57:2d:57: a9:d6:b0:ab:a4:9b:7f:8f:09:12:e5:ad:cb:76:f2:76:7b:da: 5b:93:a1:b8:fe:34:fa:35:72:d6:4c:2b:7e:77:92:ad:a3:93: 28:6f:ff:52:9e:9e:1b:ae:b8:4f:c9:62:ac:c8:95:6c:c6:37: a8:d6:14:83:1f:78:04:d8:aa:bc:f1:08:f3:3b:7f:21:1b:39: d1:b0:fe:f3:e0:39:e9:ba:3d:60:68:6c:3e:b5:d5:a1:0d:31: 62:f1:09:23:06:fe:7d:47:fb:9b:f1:6f:3b:0d:8c:b3:50:3e: 90:2f:37:91:a2:7a:75:74:e9:b3:97:61:a6:b5:09:3a:ef:ae: d5:4c:6b:ad:f1:65:20:86:84:79:7d:f1:68:73:08:b2:cb:1f: b0:24:6e:c1:42:2d:2d:c7:87:f7:47:28:4a:97:2c:34:2f:c3: cd:6c:31:da:e8:83:85:38:a6:25:fb:ed:13:66:70:9c:35:07: 53:ed:8c:0c:bb:0f:08:42:d1:fa:49:a7:c9:62:40:ec:6e:52: 21:52:87:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiwWIMabQoVtqytIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEyODAwMDczMFoXDTI1MDQyNzIzMDczMFowLzEtMCsGA1UEAxMk Y2U4YWU0NmMtOTg2Ny00ZmFlLWI5MTYtYjNiNDAyMWJiMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb4oLkwgrTVOXkU6inxwjImtODr1oXzg9Jcu UPLe2IdFl6jmZe3Ty2u1fPHw/4LqjO2JsjQ6kQd5X+ImhaxL7qas9piu68Kwa7OX RUbKSikoq+dD9XVP9KNd3mF1c+r9v7VI9RLbP4WXUBzr85JYVm+MjmvmkSxfiKIQ zjYsI8+93MmtKNSVBq3zWrdf6q4FkRtE9KaXZgFoTNpHP+r5JmHVRYov7sKF69U4 vJBveGzObMaz93imLnw3DQVnC1UrZBoQPSxbD6/XMBBd4nzQoCz93VraCFTmuCTa ud7jOWGBjQC6KXEu4H+QKjPg0a1yKlWxYiuJO8jojZCJ4aD2XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWQqP89PUMT6fWTV5fR2FrUw3WoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg3YTViNTEtM2E2Ny0z MTQ5LThkNmQtODE4NTcwMzY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEv4DZrAz7r6gCGIumhDNTPgZGBKojV+rhqjZY6uGpXI8mC8Quu7 QPm+PVMVQFO4px6AklctV6nWsKukm3+PCRLlrct28nZ72luTobj+NPo1ctZMK353 kq2jkyhv/1KenhuuuE/JYqzIlWzGN6jWFIMfeATYqrzxCPM7fyEbOdGw/vPgOem6 PWBobD611aENMWLxCSMG/n1H+5vxbzsNjLNQPpAvN5GienV06bOXYaa1CTrvrtVM a63xZSCGhHl98WhzCLLLH7AkbsFCLS3Hh/dHKEqXLDQvw81sMdrog4U4piX77RNm cJw1B1PtjAy7DwhC0fpJp8liQOxuUiFSh4Q= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:31 2025 by rpki-client