$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa File: 7ca23138-74ff-3b07-b481-d040edc7eec3.roa (raw, json) Hash identifier: HH5WleQs7QSluOu2C790vBBpD/UcUM5gwnhrapqJ4jU= Subject key identifier: DF:34:CA:2A:EC:A3:B5:ED:B4:E2:4A:C8:EE:6B:C4:10:09:98:9C:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55952AD9177A4A1F9ABC480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa Signing time: Tue 04 Feb 2025 12:41:06 +0000 ROA not before: Tue 04 Feb 2025 12:41:06 +0000 ROA not after: Mon 05 May 2025 11:41:06 +0000 asID: 30036 IP address blocks: 2604:2d80:be80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:59:52:ad:91:77:a4:a1:f9:ab:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:41:06 2025 GMT Not After : May 5 11:41:06 2025 GMT Subject: CN=7816b77f-beef-4a32-bdbe-73457b26c4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:48:9e:8c:12:e1:3a:4b:5a:8d:4a:cb:28: 2c:68:98:2a:e4:e9:84:69:5b:6d:80:57:a0:79:7b: f1:1a:90:17:84:79:7a:19:16:4d:28:e1:cf:17:32: 9d:f4:6c:09:73:e3:db:6b:00:da:ee:a3:27:e7:84: 59:71:3b:2b:d2:26:b3:dc:33:35:92:72:90:1f:ee: 8d:b0:0b:e2:53:2f:0a:09:3a:90:aa:75:4e:0e:f1: 28:1a:ca:cf:ce:e1:f0:a1:64:c6:42:2b:73:a7:7a: 55:7d:52:af:57:fe:44:81:4a:de:9f:56:84:6c:c5: bf:dc:80:4f:de:ea:1c:7f:b5:86:30:4f:ff:66:40: 95:6d:b6:81:75:34:32:4e:ea:6e:74:fa:77:13:b6: 2e:ff:82:1a:fc:ab:8c:a9:93:3d:90:48:46:b2:e6: 81:1d:b2:df:85:5e:ea:c6:56:52:64:1e:40:53:d7: ec:bf:94:12:a1:40:ce:99:6e:9d:ec:c2:fc:65:5c: 38:12:43:41:85:ed:87:a6:cf:72:b4:1a:a8:9a:aa: f7:b7:3f:6f:53:5b:d7:09:be:b5:7a:b8:4f:4c:9b: c2:91:58:21:ae:00:c8:18:e9:3b:69:71:71:53:ac: f1:cb:2a:99:3a:f5:1d:94:67:29:15:ed:0f:25:47: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:CA:2A:EC:A3:B5:ED:B4:E2:4A:C8:EE:6B:C4:10:09:98:9C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:be80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:85:35:9f:80:90:f6:b9:cd:35:9d:1f:91:ee:bb:7f:8d:75: 1a:f7:37:f0:f2:5c:84:19:84:65:9f:0e:66:01:13:b6:4c:fa: 44:4d:4a:53:3b:9b:bf:f9:e4:65:71:ba:47:46:dd:6b:06:38: 30:c5:ca:80:cf:5f:56:bc:95:8b:f9:8a:85:46:12:62:1e:90: 38:f7:6f:ba:b1:f7:f7:c0:ec:71:3a:07:54:76:99:5f:df:08: 85:15:6e:36:9f:88:0f:01:56:c8:ba:3e:da:ce:e0:59:ed:19: 90:c5:ff:81:29:e6:ff:aa:63:fb:0e:e3:ec:21:7e:fd:f4:e9: 24:28:1f:e2:f7:e9:77:4f:dd:35:49:3f:18:0f:c4:cb:76:9e: 74:b7:e0:80:24:0e:16:e2:ee:0b:fd:9e:cc:28:5f:fb:91:01: ba:2c:0f:e7:a6:b9:69:a5:14:a0:b7:58:ed:34:d6:f5:8d:6f: 14:43:ac:da:c2:38:06:8f:82:0e:78:5a:21:f3:e5:13:e9:33: fb:cc:24:db:cd:81:22:2c:1f:e0:1c:d2:1b:a1:62:4e:2d:ce: 46:78:3a:0d:ff:18:1e:18:1a:f9:b9:ad:1a:85:f5:02:5d:cb: 0c:f6:23:96:37:f4:a5:f4:b5:36:34:0d:71:ef:3b:16:29:71: 0e:ae:5b:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFWVKtkXekofmrxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNDEwNloXDTI1MDUwNTExNDEwNlowLzEtMCsGA1UEAxMk NzgxNmI3N2YtYmVlZi00YTMyLWJkYmUtNzM0NTdiMjZjNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHVInowS4TpLWo1KyygsaJgq5OmEaVttgFeg eXvxGpAXhHl6GRZNKOHPFzKd9GwJc+PbawDa7qMn54RZcTsr0iaz3DM1knKQH+6N sAviUy8KCTqQqnVODvEoGsrPzuHwoWTGQitzp3pVfVKvV/5EgUren1aEbMW/3IBP 3uocf7WGME//ZkCVbbaBdTQyTupudPp3E7Yu/4Ia/KuMqZM9kEhGsuaBHbLfhV7q xlZSZB5AU9fsv5QSoUDOmW6d7ML8ZVw4EkNBhe2Hps9ytBqomqr3tz9vU1vXCb61 erhPTJvCkVghrgDIGOk7aXFxU6zxyyqZOvUdlGcpFe0PJUdxewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN80yirso7XttOJKyO5rxBAJmJyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2NhMjMxMzgtNzRmZi0z YjA3LWI0ODEtZDA0MGVkYzdlZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgL6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSFNZ+AkPa5zTWdH5Huu3+NdRr3N/DyXIQZhGWfDmYBE7ZM+kRN SlM7m7/55GVxukdG3WsGODDFyoDPX1a8lYv5ioVGEmIekDj3b7qx9/fA7HE6B1R2 mV/fCIUVbjafiA8BVsi6PtrO4FntGZDF/4Ep5v+qY/sO4+whfv306SQoH+L36XdP 3TVJPxgPxMt2nnS34IAkDhbi7gv9nswoX/uRAbosD+emuWmlFKC3WO001vWNbxRD rNrCOAaPgg54WiHz5RPpM/vMJNvNgSIsH+Ac0huhYk4tzkZ4Og3/GB4YGvm5rRqF 9QJdywz2I5Y39KX0tTY0DXHvOxYpcQ6uW1o= -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:55 2025 by rpki-client