$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa File: 5ef4a130-5004-3af8-ae4b-60307a05203c.roa (raw, json) Hash identifier: D4I+DNH5PmauSyWoNIu3LavrZtsNiWK0UnZLLTxikUk= Subject key identifier: 54:F7:F5:CF:11:0C:8D:0C:F6:12:84:4F:62:C7:B4:4A:00:71:F9:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C580858FD4AA5151656CAC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa Signing time: Tue 04 Feb 2025 14:00:05 +0000 ROA not before: Tue 04 Feb 2025 14:00:05 +0000 ROA not after: Mon 05 May 2025 13:00:05 +0000 asID: 30036 IP address blocks: 2604:2d80:c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:85:8f:d4:aa:51:51:65:6c:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:00:05 2025 GMT Not After : May 5 13:00:05 2025 GMT Subject: CN=09b3a7d8-e1b5-4875-a4ca-678fddc9cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:52:52:0f:c5:c2:3d:44:02:06:84:cd:f7: 4d:6c:54:ab:65:55:37:61:54:88:fc:46:bb:bb:29: 6a:c4:f3:8b:76:2d:92:76:af:8f:5b:79:d9:85:ee: 6d:c2:87:32:39:15:26:9c:6b:a0:19:92:73:a9:ef: e5:bd:ce:54:ad:c9:12:90:8d:f4:36:18:d6:3b:e2: 8a:18:26:50:25:5d:61:39:f9:b4:97:97:d1:c1:27: 8b:a3:1a:e4:a7:c3:e5:98:36:96:7b:95:e5:f1:b4: 12:37:14:16:25:59:5e:80:5c:b1:26:6f:28:d9:68: 07:10:24:70:39:2c:49:96:55:11:d9:ff:18:b0:42: f6:11:02:cf:66:de:2c:4c:f3:b3:2d:1c:70:10:86: 33:25:bc:76:9c:fa:21:2d:94:2a:c3:17:a7:54:36: 05:50:57:5e:bd:07:66:09:f0:25:9f:63:c8:ef:ec: ef:c9:49:5d:41:eb:4f:e0:47:25:78:b3:b2:d0:73: 89:dc:5e:b3:14:f3:6c:3f:38:f7:dd:75:69:1a:c2: 60:d2:3f:1c:57:db:1a:7e:de:44:39:59:d8:b9:16: fe:9b:a9:4b:91:b0:20:c5:bb:a7:21:5a:50:f6:03: f9:7b:bc:aa:0f:bc:8d:72:b2:f8:38:cb:24:d6:1c: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:F5:CF:11:0C:8D:0C:F6:12:84:4F:62:C7:B4:4A:00:71:F9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2f:24:e0:a5:20:72:1d:37:9c:07:c1:e8:8e:14:5c:0a:d9: bd:3d:9d:9d:2b:ce:03:a7:6d:f3:07:f0:9d:55:8b:b3:d6:b5: 8e:79:25:92:4a:34:e5:ea:77:48:96:e2:56:23:54:94:0a:63: a6:fb:5e:5c:e8:06:72:e8:f4:00:11:c6:80:e7:b9:54:a7:de: 73:b7:5d:d2:e7:20:43:63:9e:6c:73:cf:5e:70:6b:7d:70:2a: 2d:dd:5b:03:bd:dc:c3:51:51:b1:e4:7d:b9:d0:e9:a9:82:79: ac:92:09:6e:58:44:0f:0d:c7:e4:5b:87:a1:c7:92:4d:62:cd: 78:1e:eb:cf:f2:3a:9f:73:3e:98:a8:92:9e:c7:62:16:f6:68: 1b:4e:ce:d5:32:92:cb:7f:28:eb:7a:be:38:87:5b:6c:c9:78: e5:6a:b8:6c:a3:c8:de:02:21:68:9c:58:2b:ab:16:5c:80:7b: b3:33:ca:ab:01:6b:bb:13:32:96:6d:b2:e5:74:c8:71:31:61: b7:07:11:c6:4d:05:6a:7d:ad:db:1b:ed:10:aa:96:1e:b8:8c: 97:b2:96:1f:51:94:5a:a5:fa:69:c8:96:5b:d5:67:13:04:ce: 9d:6a:4a:f6:e8:0b:b6:71:bf:fa:42:b5:de:67:aa:37:2f:9d: be:c2:2f:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgIWP1KpRUWVsrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDAwNVoXDTI1MDUwNTEzMDAwNVowLzEtMCsGA1UEAxMk MDliM2E3ZDgtZTFiNS00ODc1LWE0Y2EtNjc4ZmRkYzljYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+BSUg/Fwj1EAgaEzfdNbFSrZVU3YVSI/Ea7 uylqxPOLdi2Sdq+PW3nZhe5twocyORUmnGugGZJzqe/lvc5UrckSkI30NhjWO+KK GCZQJV1hOfm0l5fRwSeLoxrkp8PlmDaWe5Xl8bQSNxQWJVlegFyxJm8o2WgHECRw OSxJllUR2f8YsEL2EQLPZt4sTPOzLRxwEIYzJbx2nPohLZQqwxenVDYFUFdevQdm CfAln2PI7+zvyUldQetP4EcleLOy0HOJ3F6zFPNsPzj33XVpGsJg0j8cV9saft5E OVnYuRb+m6lLkbAgxbunIVpQ9gP5e7yqD7yNcrL4OMsk1hwZ0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFT39c8RDI0M9hKET2LHtEoAcflyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWVmNGExMzAtNTAwNC0z YWY4LWFlNGItNjAzMDdhMDUyMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsvJOClIHIdN5wHweiOFFwK2b09nZ0rzgOnbfMH8J1Vi7PWtY55 JZJKNOXqd0iW4lYjVJQKY6b7XlzoBnLo9AARxoDnuVSn3nO3XdLnIENjnmxzz15w a31wKi3dWwO93MNRUbHkfbnQ6amCeaySCW5YRA8Nx+Rbh6HHkk1izXge68/yOp9z Ppiokp7HYhb2aBtOztUykst/KOt6vjiHW2zJeOVquGyjyN4CIWicWCurFlyAe7Mz yqsBa7sTMpZtsuV0yHExYbcHEcZNBWp9rdsb7RCqlh64jJeylh9RlFql+mnIllvV ZxMEzp1qSvboC7Zxv/pCtd5nqjcvnb7CLwc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:02 2025 by rpki-client