$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa File: 85c94281-739b-39cf-b04d-5aca96590033.roa (raw, json) Hash identifier: PQqxiGNvw2ERszkWEERFyFWuu0YF7Mxgecp5lk8Fhbw= Subject key identifier: 1A:D8:38:2C:9D:F4:07:FB:69:DC:07:34:59:E8:E1:6F:A1:31:77:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B73829B94A9003E5CA082380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa Signing time: Thu 30 Jan 2025 11:12:59 +0000 ROA not before: Thu 30 Jan 2025 11:12:59 +0000 ROA not after: Wed 30 Apr 2025 10:12:59 +0000 asID: 30036 IP address blocks: 2604:2d80:6d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:38:29:b9:4a:90:03:e5:ca:08:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:12:59 2025 GMT Not After : Apr 30 10:12:59 2025 GMT Subject: CN=29be03fd-d052-4fa2-9b27-dd87682d8cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:66:55:7d:fc:83:7d:8c:43:46:4f:8c:d7: 79:17:58:f6:5b:92:1c:a5:65:49:07:71:fa:88:4a: 51:51:ab:67:bd:28:1d:38:be:5f:16:8a:82:1c:37: 8a:65:bf:2b:8d:7f:c3:c0:ec:40:f8:5d:c1:e0:20: ad:b4:c2:0b:36:0b:61:40:ab:0d:d0:71:28:55:87: cd:a1:ab:53:ea:70:d0:fb:ec:10:cd:77:56:32:08: c9:d2:ae:2e:16:35:34:d2:a7:a5:04:d7:02:98:91: 5a:b6:eb:79:df:10:22:36:8d:a6:16:0b:2c:61:1f: 43:c0:dc:0a:d1:be:cd:bf:81:80:7e:97:61:77:69: 40:d4:b0:42:6d:99:a2:9b:82:ec:0c:ff:72:1d:68: 82:a9:d1:52:60:80:d3:ba:4d:cc:23:9e:91:a8:fe: 6a:7c:30:68:63:c4:94:b9:08:29:28:b1:16:66:f2: 51:4f:e6:f8:9e:7a:ff:7e:42:6d:33:53:6d:ef:88: 43:45:2d:c4:c0:48:32:34:8b:26:6f:17:8c:f0:53: 4b:61:b2:5c:52:b7:a4:65:83:8e:b3:9c:3b:71:74: eb:1f:10:fa:af:b5:cc:fd:a6:11:47:c7:fd:2d:a4: 17:9d:23:3b:93:22:ad:fd:70:fe:8b:9c:e4:0e:6a: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:38:2C:9D:F4:07:FB:69:DC:07:34:59:E8:E1:6F:A1:31:77:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:08:64:ad:e5:52:8e:e0:b2:c2:ca:3a:ed:26:07:5c:5f:e4: 75:85:d6:bc:2a:8f:01:dc:b4:74:0e:18:35:5e:13:71:a8:58: a4:b8:49:79:10:c4:02:2d:a5:b3:77:ab:a5:b5:2d:4b:a3:39: 29:3a:76:eb:a0:a1:6c:e1:86:2d:13:68:a0:30:88:da:59:4a: d0:c8:0b:fa:10:f9:c3:ac:49:ef:13:2c:b8:e6:f2:3a:7f:0c: b8:ac:8f:c1:62:32:dd:1f:fe:16:0b:c9:87:ba:01:a5:2a:f5: 7d:a8:63:e3:4a:a9:bc:4d:08:7f:bb:26:3e:6c:d6:2d:a6:64: db:e6:a9:96:34:0d:f2:df:26:9b:0e:76:75:02:52:a4:59:12: f4:5c:b6:b6:42:b8:93:30:40:bc:83:1b:de:c7:a5:1f:24:5e: b1:00:19:e0:5c:25:8a:7e:0e:74:72:5c:8d:81:16:be:31:35: 55:48:19:1b:57:05:43:fb:1a:8f:37:4d:e6:2c:54:04:1a:06: 16:9f:a2:26:bf:2f:ca:58:29:f9:b6:b7:f0:6c:b9:5b:e8:91: 92:d0:92:d8:07:78:40:fb:5d:93:93:8d:ab:e2:9f:85:d1:ed: eb:f4:00:73:0d:a8:a0:66:24:e0:dc:22:ee:f8:bd:3f:df:32: 7c:cc:9d:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3OCm5SpAD5coII4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTI1OVoXDTI1MDQzMDEwMTI1OVowLzEtMCsGA1UEAxMk MjliZTAzZmQtZDA1Mi00ZmEyLTliMjctZGQ4NzY4MmQ4Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR5mVX38g32MQ0ZPjNd5F1j2W5IcpWVJB3H6 iEpRUatnvSgdOL5fFoqCHDeKZb8rjX/DwOxA+F3B4CCttMILNgthQKsN0HEoVYfN oatT6nDQ++wQzXdWMgjJ0q4uFjU00qelBNcCmJFatut53xAiNo2mFgssYR9DwNwK 0b7Nv4GAfpdhd2lA1LBCbZmim4LsDP9yHWiCqdFSYIDTuk3MI56RqP5qfDBoY8SU uQgpKLEWZvJRT+b4nnr/fkJtM1Nt74hDRS3EwEgyNIsmbxeM8FNLYbJcUrekZYOO s5w7cXTrHxD6r7XM/aYRR8f9LaQXnSM7kyKt/XD+i5zkDmqMRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrYOCyd9Af7adwHNFno4W+hMXfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVjOTQyODEtNzM5Yi0z OWNmLWIwNGQtNWFjYTk2NTkwMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgG0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkIZK3lUo7gssLKOu0mB1xf5HWF1rwqjwHctHQOGDVeE3GoWKS4 SXkQxAItpbN3q6W1LUujOSk6duugoWzhhi0TaKAwiNpZStDIC/oQ+cOsSe8TLLjm 8jp/DLisj8FiMt0f/hYLyYe6AaUq9X2oY+NKqbxNCH+7Jj5s1i2mZNvmqZY0DfLf JpsOdnUCUqRZEvRctrZCuJMwQLyDG97HpR8kXrEAGeBcJYp+DnRyXI2BFr4xNVVI GRtXBUP7Go83TeYsVAQaBhafoia/L8pYKfm2t/BsuVvokZLQktgHeED7XZOTjavi n4XR7ev0AHMNqKBmJODcIu74vT/fMnzMnYE= -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:49 2025 by rpki-client