$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa File: 91c931f3-5995-35dd-a833-dd487ec4b69b.roa (raw, json) Hash identifier: Ncg8ud/Jjrxr+AmntFthP4aLUyXM0Bo/ne7WJMnOdJ4= Subject key identifier: D7:7B:76:1E:42:54:EC:D2:88:56:EB:7D:4F:8F:C3:C6:AC:FA:E5:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F89541760ED63C808F9140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa Signing time: Wed 05 Feb 2025 11:13:37 +0000 ROA not before: Wed 05 Feb 2025 11:13:37 +0000 ROA not after: Tue 06 May 2025 10:13:37 +0000 asID: 30036 IP address blocks: 2604:2d80:d080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f8:95:41:76:0e:d6:3c:80:8f:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:13:37 2025 GMT Not After : May 6 10:13:37 2025 GMT Subject: CN=41c5ee8e-7528-4b24-879f-15c3d191d3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:a2:66:3c:0f:d9:42:81:6c:9e:96:1f:d8: 0f:09:0a:75:cc:a6:d6:86:0d:7f:55:c8:99:5d:bd: 38:bb:de:91:ea:5d:83:5e:2d:a8:17:a7:4a:4d:80: 34:69:59:bd:f7:5f:fa:e8:b7:e3:49:49:60:01:60: d3:5e:11:04:08:f5:f1:39:78:36:fb:0b:fa:73:cb: 05:f7:5c:72:c2:7f:24:21:c5:b8:91:08:3a:e4:13: 2e:0c:da:3d:12:3e:51:91:2f:d5:66:6d:ff:8f:b5: c9:ad:50:df:3d:11:0b:51:82:ef:d2:27:89:6d:11: 82:68:f5:2d:1d:bd:81:c5:4c:09:bd:03:45:2a:cc: d5:b2:74:67:06:f7:bd:3a:dd:f5:0d:bc:91:60:d0: 20:c2:e4:85:e4:9d:c0:f2:3a:ff:1e:07:4a:4f:b6: cf:4b:60:f3:7f:12:2f:e5:d0:8d:c4:9e:fd:ab:fd: 00:de:35:78:23:f6:6b:30:fe:4b:81:a7:85:31:f8: 6a:c6:35:b1:07:14:4e:39:12:07:eb:11:eb:c5:3f: 66:11:eb:3e:f0:89:57:74:ce:ed:64:58:05:32:31: a4:38:fa:7e:21:87:3d:f1:59:76:8f:78:2f:5b:cc: 9b:72:49:0a:c8:eb:4f:50:5e:fa:0c:ac:a3:8d:36: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:76:1E:42:54:EC:D2:88:56:EB:7D:4F:8F:C3:C6:AC:FA:E5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b2:15:5f:f5:a7:3f:76:82:da:0e:cf:d5:48:f9:6d:f3:cb: 63:52:e2:8a:df:ba:5c:61:9f:41:b5:c0:62:cf:86:92:c3:03: 9e:e6:62:fc:b9:f4:8f:3f:45:dd:9c:86:7d:e9:4e:b6:fa:81: 26:f9:c2:b0:fb:d3:06:23:9c:93:01:84:1c:3c:08:73:ed:03: fc:d2:b1:ea:8c:c9:51:b9:3b:4e:8f:3e:c7:03:4f:72:52:ff: 2f:78:d2:80:d6:03:16:18:a9:1e:3a:c7:6f:ea:06:66:c3:1f: 6e:a8:f3:e7:d4:c5:2d:c1:47:f3:af:5d:2d:eb:03:5d:e4:3d: df:35:89:4b:6d:95:51:7d:e1:ce:cd:34:fc:40:1d:8b:c2:5d: 97:da:a9:c2:f8:a5:3b:8d:f6:d5:2f:09:64:b1:75:c0:d9:6e: 80:69:7e:c8:42:98:c6:6d:45:d5:f6:ab:22:8f:f3:c9:33:ba: e9:39:a5:96:ab:03:4c:50:20:6a:ff:2d:c7:69:e0:ee:ce:e1: 6d:a3:0e:ab:d5:3c:5a:4a:98:7e:11:d7:89:f6:3c:af:88:90: b1:ab:85:2d:d5:c5:08:a9:f4:92:66:b6:8f:2b:ac:ce:53:a3: 9f:0f:f4:23:5a:69:e7:63:0d:7d:14:11:3a:39:6a:32:60:72: b1:e7:59:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjH+JVBdg7WPICPkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTMzN1oXDTI1MDUwNjEwMTMzN1owLzEtMCsGA1UEAxMk NDFjNWVlOGUtNzUyOC00YjI0LTg3OWYtMTVjM2QxOTFkM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYeiZjwP2UKBbJ6WH9gPCQp1zKbWhg1/VciZ Xb04u96R6l2DXi2oF6dKTYA0aVm991/66LfjSUlgAWDTXhEECPXxOXg2+wv6c8sF 91xywn8kIcW4kQg65BMuDNo9Ej5RkS/VZm3/j7XJrVDfPRELUYLv0ieJbRGCaPUt Hb2BxUwJvQNFKszVsnRnBve9Ot31DbyRYNAgwuSF5J3A8jr/HgdKT7bPS2DzfxIv 5dCNxJ79q/0A3jV4I/ZrMP5LgaeFMfhqxjWxBxROORIH6xHrxT9mEes+8IlXdM7t ZFgFMjGkOPp+IYc98Vl2j3gvW8ybckkKyOtPUF76DKyjjTatJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNd7dh5CVOzSiFbrfU+Pw8as+uVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTFjOTMxZjMtNTk5NS0z NWRkLWE4MzMtZGQ0ODdlYzRiNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOyFV/1pz92gtoOz9VI+W3zy2NS4orfulxhn0G1wGLPhpLDA57m Yvy59I8/Rd2chn3pTrb6gSb5wrD70wYjnJMBhBw8CHPtA/zSseqMyVG5O06PPscD T3JS/y940oDWAxYYqR46x2/qBmbDH26o8+fUxS3BR/OvXS3rA13kPd81iUttlVF9 4c7NNPxAHYvCXZfaqcL4pTuN9tUvCWSxdcDZboBpfshCmMZtRdX2qyKP88kzuuk5 pZarA0xQIGr/Lcdp4O7O4W2jDqvVPFpKmH4R14n2PK+IkLGrhS3VxQip9JJmto8r rM5To58P9CNaaedjDX0UETo5ajJgcrHnWXQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:40 2025 by rpki-client