$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa File: 7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa (raw, json) Hash identifier: wxTe5y0KAR8/N1dFCeGGQQVNuxNW1VEDIsD3LZsH0co= Subject key identifier: A3:5A:C2:26:B0:BE:D7:EE:96:CA:B9:28:57:2E:54:BE:E9:5A:43:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B558FF884D85E99DECCC46D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa Signing time: Wed 29 Jan 2025 19:07:31 +0000 ROA not before: Wed 29 Jan 2025 19:07:31 +0000 ROA not after: Tue 29 Apr 2025 18:07:31 +0000 asID: 30036 IP address blocks: 2604:2d80:3d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b5:58:ff:88:4d:85:e9:9d:ec:cc:46:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 19:07:31 2025 GMT Not After : Apr 29 18:07:31 2025 GMT Subject: CN=5571e581-aa95-45a3-9cd9-e1fcc6b09944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:c6:93:de:cd:d5:fb:1c:d3:78:ab:bf:e4: ec:85:24:0c:99:bb:e1:f4:4e:a0:1f:84:18:6a:01: 62:04:68:5f:29:5e:ce:21:09:26:e9:47:22:e5:8c: e1:f9:1c:1c:ec:05:45:32:a1:1e:ab:2e:12:2a:7d: ce:20:c3:9f:33:b2:57:2e:ab:7d:73:38:81:6d:a0: 68:7a:65:f6:07:78:4f:46:bf:be:38:24:47:a8:c8: f8:7a:40:ef:a1:e2:d8:e5:cf:44:ae:9e:38:86:73: d6:16:c2:9e:9a:cd:38:12:6d:6c:89:ef:95:53:69: b3:59:82:df:00:c4:ad:cf:45:38:71:60:74:a6:8e: 32:5c:a4:a5:36:36:1a:c9:ae:22:63:24:95:d1:6c: f2:db:4d:19:55:59:8c:46:20:90:f6:c6:bf:ee:7f: fd:af:07:ee:a2:8f:58:da:1f:a6:58:52:d4:1d:5f: 88:a6:f8:c0:cf:a6:6f:cd:52:20:7b:75:29:23:d0: b2:09:08:0b:60:07:ee:cb:8d:a0:c4:d4:e8:20:d8: 53:f6:a9:cd:2d:00:76:0f:8b:f8:50:4f:f3:d1:06: 51:25:2f:33:eb:a6:40:16:29:30:f0:bd:dd:d2:7d: 52:fa:d8:01:34:e1:31:28:42:c3:a1:7d:c8:0e:e8: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5A:C2:26:B0:BE:D7:EE:96:CA:B9:28:57:2E:54:BE:E9:5A:43:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e3:c7:fe:a7:52:f7:9c:55:a6:15:d9:41:1b:27:d6:cd:0f: cc:4d:80:ab:1d:8f:19:b4:64:b7:33:07:1a:2f:fa:25:26:a8: 7a:27:e7:74:19:77:86:3d:14:c6:21:7c:7a:52:4a:0b:a8:5a: bb:80:2f:55:fc:87:c8:77:69:fa:87:f9:3b:8e:a1:15:a8:75: 2a:a9:40:37:df:aa:d3:09:df:45:a3:85:3a:e4:5b:a4:ad:16: a6:0e:79:c1:98:cd:ee:f9:5f:bb:c5:c8:b9:78:2a:a8:21:a1: 6a:97:a4:8f:8d:e0:e7:59:c4:c0:ac:3d:cc:01:5b:90:2e:77: 78:4f:ef:66:a4:61:e9:9c:22:38:08:7c:e1:a4:83:99:67:f9: 57:0e:16:21:ca:b9:ec:7b:98:2f:ec:8b:9a:6a:da:44:63:7f: d7:51:63:b6:e9:63:25:84:1e:9c:19:d2:2a:2d:92:fe:98:b0: 18:34:b1:b6:c5:19:f2:0c:cd:a3:37:89:86:dc:9b:69:76:4b: 52:13:f9:e7:d1:50:92:11:1b:2e:8e:dc:f6:03:d4:a0:d0:b1: 23:c8:5d:4f:40:e8:6b:4c:d9:1f:70:bb:c2:3d:88:ec:46:27: 0c:1b:75:d4:3f:0c:ca:fc:78:4f:d6:9c:9a:11:3f:ec:a0:cb: ff:b9:fb:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi1WP+ITYXpnezMRtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEyOTE5MDczMVoXDTI1MDQyOTE4MDczMVowLzEtMCsGA1UEAxMk NTU3MWU1ODEtYWE5NS00NWEzLTljZDktZTFmY2M2YjA5OTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXbGk97N1fsc03irv+TshSQMmbvh9E6gH4QY agFiBGhfKV7OIQkm6Uci5Yzh+Rwc7AVFMqEeqy4SKn3OIMOfM7JXLqt9cziBbaBo emX2B3hPRr++OCRHqMj4ekDvoeLY5c9Erp44hnPWFsKems04Em1sie+VU2mzWYLf AMStz0U4cWB0po4yXKSlNjYaya4iYySV0Wzy200ZVVmMRiCQ9sa/7n/9rwfuoo9Y 2h+mWFLUHV+IpvjAz6ZvzVIge3UpI9CyCQgLYAfuy42gxNToINhT9qnNLQB2D4v4 UE/z0QZRJS8z66ZAFikw8L3d0n1S+tgBNOExKELDoX3IDujxWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNawiawvtfulsq5KFcuVL7pWkP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2M3YmJjOGItNDNjOS0z ZDQ2LTgxM2ItNWM4MWM4ODcwZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvjx/6nUvecVaYV2UEbJ9bND8xNgKsdjxm0ZLczBxov+iUmqHon 53QZd4Y9FMYhfHpSSguoWruAL1X8h8h3afqH+TuOoRWodSqpQDffqtMJ30WjhTrk W6StFqYOecGYze75X7vFyLl4KqghoWqXpI+N4OdZxMCsPcwBW5Aud3hP72akYemc IjgIfOGkg5ln+VcOFiHKuex7mC/si5pq2kRjf9dRY7bpYyWEHpwZ0iotkv6YsBg0 sbbFGfIMzaM3iYbcm2l2S1IT+efRUJIRGy6O3PYD1KDQsSPIXU9A6GtM2R9wu8I9 iOxGJwwbddQ/DMr8eE/WnJoRP+ygy/+5+wM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:39 2025 by rpki-client