$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593dbac4-e34e-3b8f-95ef-e544da3edced.roa File: 593dbac4-e34e-3b8f-95ef-e544da3edced.roa (raw, json) Hash identifier: ifvdr+o2C2m+7jJyQWMSIuwQZSyKPoXzSEYs6LaAk1U= Subject key identifier: B9:50:3A:B5:BF:77:77:CF:1D:62:78:31:07:F9:7B:D8:D9:EF:21:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C534CF15C07CB35704A23100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593dbac4-e34e-3b8f-95ef-e544da3edced.roa Signing time: Tue 04 Feb 2025 11:27:32 +0000 ROA not before: Tue 04 Feb 2025 11:27:32 +0000 ROA not after: Mon 05 May 2025 10:27:32 +0000 asID: 30036 IP address blocks: 2604:2d80:8f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:cf:15:c0:7c:b3:57:04:a2:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:27:32 2025 GMT Not After : May 5 10:27:32 2025 GMT Subject: CN=3945538a-52b1-4eed-81e0-441d04a76406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:28:82:82:72:ab:5a:f3:37:8c:1e:53:03: d8:00:64:90:11:ae:47:02:7c:bb:9a:43:d8:43:cf: ca:55:12:41:81:fb:d8:d0:be:01:b4:92:3f:c1:c6: 76:f2:b3:23:46:78:f9:cc:f9:35:1b:80:9e:c0:ec: 5d:1e:a0:d1:d1:62:5f:d2:ed:0a:ca:c5:57:4f:84: b2:f7:46:86:96:20:78:7e:03:17:df:eb:b4:f4:ae: cc:be:32:72:10:d3:5f:36:2b:6a:c2:40:61:33:2f: 53:12:8b:36:76:d7:3c:1a:e9:40:9f:84:ce:8f:5a: a9:ec:ac:6b:56:82:24:10:0c:8c:2b:48:d6:24:25: d3:04:c2:c4:a1:e7:57:3a:03:33:ab:ac:ad:0a:83: 3d:09:b5:94:e2:13:44:cd:ed:d3:68:33:f4:0e:ed: 16:34:82:fe:8a:a1:d0:1d:f7:af:49:48:6a:97:0f: 3d:f3:19:13:c4:ba:52:cb:aa:a9:df:04:ae:21:66: f4:cf:c7:17:f8:8b:bf:77:e5:78:bf:7f:4d:62:fd: 85:0a:0a:84:fa:8e:81:4e:71:b9:85:25:96:40:be: 3b:26:d3:8f:4f:bf:ed:c1:1d:1b:aa:f4:7f:9a:c8: 9a:37:e5:40:7d:0f:3e:b0:84:2a:10:8b:80:d0:3a: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:50:3A:B5:BF:77:77:CF:1D:62:78:31:07:F9:7B:D8:D9:EF:21:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593dbac4-e34e-3b8f-95ef-e544da3edced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:32:66:89:4b:ac:6f:81:60:b5:e2:a0:96:1a:ec:92:d5:e6: 0f:a7:ac:6f:d7:dd:71:96:57:99:25:01:16:6e:72:7d:63:0f: 1e:59:39:c9:b3:9d:ef:3a:7a:44:08:43:54:d7:32:2a:10:62: 19:67:bf:f9:2b:0c:e1:ff:65:0f:cc:be:22:32:b7:e5:23:c3: d0:72:ae:ce:31:d2:7d:bd:ab:ed:7e:d6:c0:69:70:d4:12:3a: 78:e1:e4:18:85:7b:21:2d:d8:9e:32:3f:f7:e6:4e:13:55:f1: 42:a1:3f:3d:fe:e0:dc:05:8e:4a:f2:06:a6:88:14:c8:11:eb: 72:64:f6:b9:d6:5d:5d:4d:bf:41:fb:9a:07:58:b4:15:e2:dd: 0e:12:6a:ec:32:7d:0c:35:8d:86:b5:c0:10:50:95:33:f9:64: 34:86:76:f2:e8:eb:16:33:44:8d:38:01:15:1d:ee:5a:48:49: 6c:52:4a:c6:65:23:99:6f:b6:0d:29:49:a4:c6:e4:3b:bc:bc: 6e:98:7d:ec:40:c2:d7:73:21:b5:66:b8:61:48:1a:61:0a:14: c3:28:3c:e6:7b:13:de:f1:b7:8f:9c:ca:87:e6:26:99:06:71: ef:1e:8d:14:30:41:11:df:88:f9:7b:c6:bb:82:bc:d9:86:93: c0:db:c1:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFNM8VwHyzVwSiMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjczMloXDTI1MDUwNTEwMjczMlowLzEtMCsGA1UEAxMk Mzk0NTUzOGEtNTJiMS00ZWVkLTgxZTAtNDQxZDA0YTc2NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwsogoJyq1rzN4weUwPYAGSQEa5HAny7mkPY Q8/KVRJBgfvY0L4BtJI/wcZ28rMjRnj5zPk1G4CewOxdHqDR0WJf0u0KysVXT4Sy 90aGliB4fgMX3+u09K7MvjJyENNfNitqwkBhMy9TEos2dtc8GulAn4TOj1qp7Kxr VoIkEAyMK0jWJCXTBMLEoedXOgMzq6ytCoM9CbWU4hNEze3TaDP0Du0WNIL+iqHQ HfevSUhqlw898xkTxLpSy6qp3wSuIWb0z8cX+Iu/d+V4v39NYv2FCgqE+o6BTnG5 hSWWQL47JtOPT7/twR0bqvR/msiaN+VAfQ8+sIQqEIuA0DpnoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLlQOrW/d3fPHWJ4MQf5e9jZ7yFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkzZGJhYzQtZTM0ZS0z YjhmLTk1ZWYtZTU0NGRhM2VkY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4yZolLrG+BYLXioJYa7JLV5g+nrG/X3XGWV5klARZucn1jDx5Z Ocmzne86ekQIQ1TXMioQYhlnv/krDOH/ZQ/MviIyt+Ujw9Byrs4x0n29q+1+1sBp cNQSOnjh5BiFeyEt2J4yP/fmThNV8UKhPz3+4NwFjkryBqaIFMgR63Jk9rnWXV1N v0H7mgdYtBXi3Q4SauwyfQw1jYa1wBBQlTP5ZDSGdvLo6xYzRI04ARUd7lpISWxS SsZlI5lvtg0pSaTG5Du8vG6YfexAwtdzIbVmuGFIGmEKFMMoPOZ7E97xt4+cyofm JpkGce8ejRQwQRHfiPl7xruCvNmGk8DbwWY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:01 2025 by rpki-client