$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa File: 7386bb74-9487-3be0-90d7-6f39ba1218c3.roa (raw, json) Hash identifier: 9rWvPvjeXWqxGQ8Z3gpKk4dhFREzCBfS2KbT5qn2GZU= Subject key identifier: 72:32:F2:F2:71:3B:C1:0D:8E:7A:23:DF:A4:73:73:C1:0D:2E:0A:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C580F539F20A082E3BA93E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa Signing time: Tue 04 Feb 2025 14:00:58 +0000 ROA not before: Tue 04 Feb 2025 14:00:58 +0000 ROA not after: Mon 05 May 2025 13:00:58 +0000 asID: 30036 IP address blocks: 2604:2d80:dc80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f5:39:f2:0a:08:2e:3b:a9:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:00:58 2025 GMT Not After : May 5 13:00:58 2025 GMT Subject: CN=92deb4c5-947c-4e3c-99b3-d78ce03d110a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:c8:95:11:0f:b7:76:79:05:72:6a:7c:4e: 09:7d:51:78:5d:5c:0a:d8:ac:47:0a:e8:0d:25:fd: 3f:4e:44:9d:89:3b:cb:3e:f0:5d:69:65:5c:d7:54: ff:13:4b:d2:f1:fe:41:04:1d:44:7f:38:7e:d0:ac: 74:c4:90:79:a0:e4:17:47:78:5a:23:cf:57:38:f2: fa:ae:7d:a2:cd:ff:45:fa:62:e1:a0:d8:7c:c9:5f: fa:ff:d3:ff:47:cf:ec:e8:8a:c5:57:8b:8d:53:10: 84:9a:35:4c:00:45:d9:95:df:97:c6:6b:5e:f4:e6: a5:2f:6e:36:4e:be:b7:4a:92:3c:47:b5:ef:74:7c: e4:ac:91:80:1e:74:bb:5c:19:62:59:df:4e:37:17: f3:86:fb:e5:c5:9a:cc:75:39:62:29:f4:fd:2c:84: 5c:08:b1:a1:45:bc:e6:9e:e2:16:f6:20:9a:c2:d3: e5:9a:d3:1a:04:18:dc:35:f4:27:f9:4e:49:74:6e: 36:23:6c:bd:49:26:fe:f9:36:50:4a:ff:8d:81:84: 37:8e:ca:f2:0c:de:35:10:be:54:ca:be:b6:29:64: 6c:67:f6:29:1f:65:ee:47:1e:7b:e6:88:d6:5a:e5: ac:18:51:7e:93:de:76:9f:be:63:f7:6d:da:84:8e: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:32:F2:F2:71:3B:C1:0D:8E:7A:23:DF:A4:73:73:C1:0D:2E:0A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:dc80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:71:f1:17:2b:d9:22:15:6d:a4:4c:f8:81:55:05:e7:c1:4e: 22:0e:a8:c3:d9:0c:6f:a4:06:f2:3a:3b:ba:80:aa:03:a8:df: 43:2c:55:c9:98:71:90:04:f1:52:09:9f:12:f4:5e:b0:c1:0a: c8:63:bf:ae:4d:33:02:bf:d1:1f:e7:9c:66:db:25:97:8c:74: b1:83:b4:8a:20:76:83:6e:db:28:59:f5:bd:71:cf:27:18:2a: 36:7e:b6:c8:59:c4:f4:a0:ef:47:33:df:d4:1a:60:d0:99:d5: 4e:e0:15:9e:80:86:f3:08:4c:63:53:b3:6f:cd:fd:93:2a:9c: e7:68:02:1b:62:ee:e4:c3:56:cc:72:ce:16:98:b1:b5:f1:d2: 9e:ba:89:2d:16:82:e2:dc:46:ec:02:a0:fc:34:df:73:da:a6: 0d:99:bd:2f:b4:8c:a5:5f:d3:2d:4f:de:f1:02:69:40:28:77: 18:d0:46:d0:b2:90:06:ba:15:a4:d1:40:05:38:ec:96:c8:45: e1:a4:b6:8a:42:85:d1:6b:83:82:29:bb:23:08:27:8e:3f:43: 14:cc:59:36:e3:88:64:d5:dc:7c:95:e9:77:bd:07:b7:8c:9b: 9b:71:d5:13:24:41:37:7c:2c:04:f5:0e:d1:a8:7b:aa:86:eb: bc:f0:7a:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgPU58goILjupPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDA1OFoXDTI1MDUwNTEzMDA1OFowLzEtMCsGA1UEAxMk OTJkZWI0YzUtOTQ3Yy00ZTNjLTk5YjMtZDc4Y2UwM2QxMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX/IlREPt3Z5BXJqfE4JfVF4XVwK2KxHCugN Jf0/TkSdiTvLPvBdaWVc11T/E0vS8f5BBB1Efzh+0Kx0xJB5oOQXR3haI89XOPL6 rn2izf9F+mLhoNh8yV/6/9P/R8/s6IrFV4uNUxCEmjVMAEXZld+Xxmte9OalL242 Tr63SpI8R7XvdHzkrJGAHnS7XBliWd9ONxfzhvvlxZrMdTliKfT9LIRcCLGhRbzm nuIW9iCawtPlmtMaBBjcNfQn+U5JdG42I2y9SSb++TZQSv+NgYQ3jsryDN41EL5U yr62KWRsZ/YpH2XuRx575ojWWuWsGFF+k952n75j923ahI4L6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHIy8vJxO8ENjnoj36Rzc8ENLgp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzM4NmJiNzQtOTQ4Ny0z YmUwLTkwZDctNmYzOWJhMTIxOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBx8Rcr2SIVbaRM+IFVBefBTiIOqMPZDG+kBvI6O7qAqgOo30Ms VcmYcZAE8VIJnxL0XrDBCshjv65NMwK/0R/nnGbbJZeMdLGDtIogdoNu2yhZ9b1x zycYKjZ+tshZxPSg70cz39QaYNCZ1U7gFZ6AhvMITGNTs2/N/ZMqnOdoAhti7uTD VsxyzhaYsbXx0p66iS0WguLcRuwCoPw033Papg2ZvS+0jKVf0y1P3vECaUAodxjQ RtCykAa6FaTRQAU47JbIReGktopChdFrg4IpuyMIJ44/QxTMWTbjiGTV3HyV6Xe9 B7eMm5tx1RMkQTd8LAT1DtGoe6qG67zwetg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:06 2025 by rpki-client