$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7af77e-2c19-3f88-bfc8-7616a8762731.roa File: 5d7af77e-2c19-3f88-bfc8-7616a8762731.roa (raw, json) Hash identifier: dcsEos3jfWcOpUneAgJQOLdYy6K034eQ/rEAsKZSVCg= Subject key identifier: A8:58:A9:89:30:18:80:76:74:01:9D:27:13:6F:D7:1E:00:14:08:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5807F6650E3EA6AAA176A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7af77e-2c19-3f88-bfc8-7616a8762731.roa Signing time: Tue 04 Feb 2025 14:00:02 +0000 ROA not before: Tue 04 Feb 2025 14:00:02 +0000 ROA not after: Mon 05 May 2025 13:00:02 +0000 asID: 30036 IP address blocks: 2604:2d80:400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:7f:66:50:e3:ea:6a:aa:17:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:00:02 2025 GMT Not After : May 5 13:00:02 2025 GMT Subject: CN=f2f7e027-96b1-4c75-b278-a710d060de83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:1d:cb:71:60:27:17:70:6f:e4:fc:ef:9f: 09:33:92:fe:9f:d8:89:35:00:3d:70:d0:d0:a1:b1: 5d:18:58:d2:b4:5c:ee:d9:35:3d:2f:d8:1f:80:a0: e6:66:a4:d6:0f:b5:21:d3:88:0a:02:1b:73:97:67: 4b:c8:cc:85:59:34:1f:4b:90:90:90:44:96:a2:3e: 4c:68:1b:78:ad:f0:69:98:37:ec:aa:40:9b:9c:b4: ec:7b:3e:ec:51:ac:cc:e4:c2:cf:f6:52:a6:38:f8: a4:98:7f:0c:b0:5b:fc:d9:6f:71:a1:11:d9:14:1b: 8d:e4:53:1f:7f:90:49:3a:12:ed:f4:ef:e6:41:41: 71:4f:3e:2a:96:e9:a6:5f:d6:ee:e1:cd:7c:69:e3: 0e:51:b7:d3:6d:58:1a:86:fc:e9:55:35:36:01:ab: 60:6a:65:68:0c:36:f9:f3:54:67:86:f8:9a:de:bd: fb:c2:4a:9d:dd:2c:81:6e:0b:40:cf:ee:b7:64:1c: 5d:4a:55:ca:33:44:08:55:96:30:63:63:99:b7:a9: 55:a5:20:95:04:de:a5:6e:e1:23:72:16:70:87:c7: 2a:07:90:d7:c6:b8:11:bf:91:76:ab:8b:cc:72:46: 98:0c:16:fb:af:49:af:3d:ea:c7:33:5b:97:dc:ee: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:A9:89:30:18:80:76:74:01:9D:27:13:6F:D7:1E:00:14:08:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7af77e-2c19-3f88-bfc8-7616a8762731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cc:23:3d:68:12:a7:3a:4c:58:d3:20:0f:0f:ad:33:fa:07: 74:8b:df:80:02:6e:a7:12:e0:dc:93:c3:ac:32:4d:db:f0:81: 14:8a:2f:ab:7d:9f:fe:c7:56:cf:ab:31:7c:cd:7c:d3:09:8c: eb:fd:71:51:7b:87:76:24:dc:c0:b0:3b:a0:a1:28:99:84:a7: 98:db:c8:84:40:6e:be:9d:b4:fd:30:4a:49:6e:0d:92:9c:a8: 7a:38:16:72:40:df:d7:ca:c9:49:19:cf:d5:82:14:66:04:3c: 35:a0:19:e6:46:45:d6:03:ac:54:d3:30:68:cb:79:81:35:32: 1d:17:16:d6:9e:c7:4b:19:eb:07:02:69:1d:bc:a3:e0:7b:25: fb:07:af:e3:36:60:d2:57:c9:29:43:63:55:cc:08:1a:c0:e0: 3e:1a:9f:90:a8:7e:9c:63:a5:33:f2:4a:17:f0:27:48:11:4e: bc:34:ed:14:55:1e:a1:b7:d5:1b:4c:9b:b1:62:b3:b7:d0:d4: 85:a7:30:e4:a1:90:e9:bd:24:5f:be:01:8b:b0:44:c7:a8:6c: 23:26:19:67:2e:92:75:7d:a5:fe:7f:54:80:b9:a4:1c:0c:3c: 19:b3:c9:06:53:05:ed:f5:3c:3f:a3:92:1a:8d:b7:26:aa:43: 88:47:52:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgH9mUOPqaqoXagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDAwMloXDTI1MDUwNTEzMDAwMlowLzEtMCsGA1UEAxMk ZjJmN2UwMjctOTZiMS00Yzc1LWIyNzgtYTcxMGQwNjBkZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5cdy3FgJxdwb+T8758JM5L+n9iJNQA9cNDQ obFdGFjStFzu2TU9L9gfgKDmZqTWD7Uh04gKAhtzl2dLyMyFWTQfS5CQkESWoj5M aBt4rfBpmDfsqkCbnLTsez7sUazM5MLP9lKmOPikmH8MsFv82W9xoRHZFBuN5FMf f5BJOhLt9O/mQUFxTz4qlummX9bu4c18aeMOUbfTbVgahvzpVTU2AatgamVoDDb5 81Rnhvia3r37wkqd3SyBbgtAz+63ZBxdSlXKM0QIVZYwY2OZt6lVpSCVBN6lbuEj chZwh8cqB5DXxrgRv5F2q4vMckaYDBb7r0mvPerHM1uX3O58XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKhYqYkwGIB2dAGdJxNv1x4AFAjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQ3YWY3N2UtMmMxOS0z Zjg4LWJmYzgtNzYxNmE4NzYyNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXMIz1oEqc6TFjTIA8PrTP6B3SL34ACbqcS4NyTw6wyTdvwgRSK L6t9n/7HVs+rMXzNfNMJjOv9cVF7h3Yk3MCwO6ChKJmEp5jbyIRAbr6dtP0wSklu DZKcqHo4FnJA39fKyUkZz9WCFGYEPDWgGeZGRdYDrFTTMGjLeYE1Mh0XFtaex0sZ 6wcCaR28o+B7JfsHr+M2YNJXySlDY1XMCBrA4D4an5CofpxjpTPyShfwJ0gRTrw0 7RRVHqG31RtMm7Fis7fQ1IWnMOShkOm9JF++AYuwRMeobCMmGWcuknV9pf5/VIC5 pBwMPBmzyQZTBe31PD+jkhqNtyaqQ4hHUrE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:41 2025 by rpki-client