$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59cb9d4c-c294-3e80-8065-f0314aeeb359.roa File: 59cb9d4c-c294-3e80-8065-f0314aeeb359.roa (raw, json) Hash identifier: 5uiYlVO1so/6zJ4kOFrRbnv2Tn0KMy4YaBcabIxPNr4= Subject key identifier: 4F:40:60:8E:A9:42:3A:92:FB:E9:25:2F:31:EE:E3:0A:4E:63:05:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F84F6CA0E1E807575B9E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59cb9d4c-c294-3e80-8065-f0314aeeb359.roa Signing time: Wed 05 Feb 2025 11:13:04 +0000 ROA not before: Wed 05 Feb 2025 11:13:04 +0000 ROA not after: Tue 06 May 2025 10:13:04 +0000 asID: 30036 IP address blocks: 2604:2d80:1a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f8:4f:6c:a0:e1:e8:07:57:5b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:13:04 2025 GMT Not After : May 6 10:13:04 2025 GMT Subject: CN=03f78af3-c80c-465a-ba53-e1e1a0b6d1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:29:ba:22:bb:20:37:27:77:1f:33:98:d6: e1:c6:00:e2:71:a0:5a:53:6a:43:49:57:6e:96:df: 3f:4d:dc:51:7d:a3:f0:f4:12:4f:78:68:e5:17:68: 5e:fb:92:85:42:4e:c4:6e:5e:b1:28:15:49:2f:cd: fe:e3:95:3e:63:0b:67:1e:d3:76:4b:50:69:b8:08: 35:1a:14:11:82:26:08:0c:d7:a8:43:91:33:68:d2: cf:ca:ef:fa:30:b8:59:7b:1a:c0:96:68:44:1c:36: 42:16:23:ef:a7:b7:4e:c2:b0:35:19:ce:8a:35:3e: e9:4e:a2:4b:f7:49:87:56:df:e3:bd:d4:f2:ae:c6: 22:80:1c:b5:6c:0a:27:4e:a7:b5:44:e5:41:82:7c: 67:0a:57:c9:30:b1:db:bc:c6:7d:21:1b:45:4d:81: f0:55:60:a9:de:de:92:3b:2b:19:3f:3d:d8:80:22: 57:36:0e:ed:84:02:cc:39:a8:6a:8e:8c:ba:7f:91: 8b:81:60:3b:9c:f4:78:00:63:87:30:bc:11:aa:af: 12:c0:a5:c7:38:64:84:18:76:2a:9c:a4:83:f1:3a: cb:0f:7d:74:46:e3:eb:03:03:73:2e:3b:3a:93:57: f9:47:ed:8c:7e:8d:5d:db:17:2e:79:73:44:f4:95: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:40:60:8E:A9:42:3A:92:FB:E9:25:2F:31:EE:E3:0A:4E:63:05:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59cb9d4c-c294-3e80-8065-f0314aeeb359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ff:e4:bf:43:fc:37:ea:59:c2:ca:0c:04:40:d3:be:25:bb: 1d:d3:0c:3d:16:ec:38:19:09:2d:d3:a3:0d:45:ff:87:bf:ab: 00:a0:d9:6d:b2:77:f1:75:04:e1:ae:e8:33:7d:f3:9a:7d:c7: 8b:84:be:f0:dd:49:bc:63:f2:2d:bd:35:42:e1:d7:81:16:69: 6e:13:55:74:fc:e0:49:f9:54:55:40:b9:bc:4e:09:5f:b8:d8: 2c:05:fa:dd:9b:c9:63:64:db:aa:19:c8:02:d5:96:31:9a:10: 2f:30:f9:59:f5:7d:2f:e0:ee:ef:4d:2a:c9:81:29:f7:3a:8c: 16:88:41:10:c4:8d:95:e8:f4:3f:81:03:8a:a4:f9:93:d9:a9: 17:6b:53:65:b7:77:06:6f:bd:f3:2a:03:bf:23:0c:69:ef:43: 8c:23:05:6e:ae:1e:de:96:34:62:c5:7c:96:0c:5d:f8:2f:a8: fe:1d:71:36:7f:90:01:6b:93:4e:79:c7:12:85:0c:5b:3a:95: 35:08:fc:db:d3:43:5c:c4:85:dc:77:c4:04:3b:98:ec:8b:e3: e0:7b:5a:83:03:ae:48:59:18:ec:8b:25:e6:a9:3f:bb:bb:82: d3:7c:39:d8:d6:c1:64:5e:59:c1:d8:45:b1:21:4b:88:a4:a2: 88:ae:45:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjH+E9soOHoB1dbnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTMwNFoXDTI1MDUwNjEwMTMwNFowLzEtMCsGA1UEAxMk MDNmNzhhZjMtYzgwYy00NjVhLWJhNTMtZTFlMWEwYjZkMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLcpuiK7IDcndx8zmNbhxgDicaBaU2pDSVdu lt8/TdxRfaPw9BJPeGjlF2he+5KFQk7Ebl6xKBVJL83+45U+YwtnHtN2S1BpuAg1 GhQRgiYIDNeoQ5EzaNLPyu/6MLhZexrAlmhEHDZCFiPvp7dOwrA1Gc6KNT7pTqJL 90mHVt/jvdTyrsYigBy1bAonTqe1ROVBgnxnClfJMLHbvMZ9IRtFTYHwVWCp3t6S OysZPz3YgCJXNg7thALMOahqjoy6f5GLgWA7nPR4AGOHMLwRqq8SwKXHOGSEGHYq nKSD8TrLD310RuPrAwNzLjs6k1f5R+2Mfo1d2xcueXNE9JWXPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9AYI6pQjqS++klLzHu4wpOYwWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTljYjlkNGMtYzI5NC0z ZTgwLTgwNjUtZjAzMTRhZWViMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGX/5L9D/DfqWcLKDARA074lux3TDD0W7DgZCS3Tow1F/4e/qwCg 2W2yd/F1BOGu6DN985p9x4uEvvDdSbxj8i29NULh14EWaW4TVXT84En5VFVAubxO CV+42CwF+t2byWNk26oZyALVljGaEC8w+Vn1fS/g7u9NKsmBKfc6jBaIQRDEjZXo 9D+BA4qk+ZPZqRdrU2W3dwZvvfMqA78jDGnvQ4wjBW6uHt6WNGLFfJYMXfgvqP4d cTZ/kAFrk055xxKFDFs6lTUI/NvTQ1zEhdx3xAQ7mOyL4+B7WoMDrkhZGOyLJeap P7u7gtN8OdjWwWReWcHYRbEhS4ikooiuRS0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:40 2025 by rpki-client