$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4760d4b-20df-3f6c-946a-7b5b1fbbb0e1.roa File: b4760d4b-20df-3f6c-946a-7b5b1fbbb0e1.roa (raw, json) Hash identifier: RXxt9TfuoBcQVtyl6xawObqrfgZkYCygZ7yyiunpfY0= Subject key identifier: EB:74:7D:C7:4B:E7:FB:B8:76:E3:1A:38:58:8B:B9:43:67:1D:58:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C534DFCC85AE43A77052C640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4760d4b-20df-3f6c-946a-7b5b1fbbb0e1.roa Signing time: Tue 04 Feb 2025 11:27:40 +0000 ROA not before: Tue 04 Feb 2025 11:27:40 +0000 ROA not after: Mon 05 May 2025 10:27:40 +0000 asID: 30036 IP address blocks: 2604:2d80:9a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:df:cc:85:ae:43:a7:70:52:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:27:40 2025 GMT Not After : May 5 10:27:40 2025 GMT Subject: CN=96348df3-4e1d-4027-ad98-903903f88a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:85:fe:02:81:00:ad:6c:61:b9:f0:c1:99: 34:3e:5f:c4:d6:0e:26:30:78:4c:3e:2a:5d:5f:91: ad:80:08:12:77:5d:65:44:b1:26:04:e5:2c:c2:b6: 22:31:87:41:e6:98:7e:9f:78:ba:4f:6f:8e:33:0d: 93:dc:f8:eb:53:84:9f:c0:e5:44:83:ea:54:ca:df: fa:c1:98:93:0d:58:45:c6:87:77:e1:a1:35:29:ab: 27:83:ad:9b:9b:2f:3b:05:b8:44:4b:3d:a5:04:f0: d8:53:07:36:21:3d:d0:8d:20:c8:d1:99:42:b3:90: 0e:27:0c:f7:bd:55:13:24:f4:53:5c:b9:d9:0b:b2: 4b:d9:f5:13:a7:c2:41:42:84:dd:a3:d8:1d:0a:6e: c5:6f:35:e0:d3:09:48:e0:c7:05:67:02:1a:a9:11: f5:f9:85:73:67:42:71:b4:1d:bc:f5:4d:dd:36:c8: b9:66:8a:52:fd:87:81:e1:9a:47:d6:95:ae:c8:00: a0:4e:31:96:74:92:13:05:da:33:60:59:1d:e6:1d: 3e:20:7f:ea:ac:bd:4a:14:f3:55:ad:4c:00:b6:97: b2:64:58:49:11:2c:9b:63:be:b3:57:90:46:22:02: c3:7b:c8:76:0c:b4:06:3c:17:5a:d2:5d:4a:3f:fb: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:7D:C7:4B:E7:FB:B8:76:E3:1A:38:58:8B:B9:43:67:1D:58:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4760d4b-20df-3f6c-946a-7b5b1fbbb0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:79:cb:67:89:21:70:1f:87:87:58:8b:7f:08:e0:81:66:b4: 6b:9b:d5:5e:4c:c4:09:87:e5:93:db:24:42:07:6d:28:a2:6d: fe:45:c4:94:80:bc:c1:3f:49:e0:67:c3:b2:8f:c1:61:a8:cf: 6f:ee:33:46:f1:7a:2c:8d:ea:9a:ae:83:2b:e9:5e:b0:f0:21: 8d:81:b2:51:90:fa:81:59:d9:8a:60:b0:52:70:15:11:d4:9c: 6a:6e:6f:84:90:af:83:1a:3e:50:ac:15:12:f8:06:e3:86:fa: ff:74:1d:9d:35:39:1a:07:50:4e:aa:31:6b:1c:bb:d5:f1:0f: 9e:fb:14:a8:68:e8:ac:ca:be:68:8c:49:4a:fc:f4:cc:d0:95: e7:90:be:9a:bf:89:ff:01:20:80:e7:95:fa:4d:7a:85:63:db: 5e:b4:56:a1:fc:b2:d0:7f:a6:51:fb:0c:c9:f5:8e:45:ee:24: b8:48:9d:00:c8:00:db:dd:46:02:65:5d:e6:d0:47:64:be:6e: 61:25:71:b5:da:01:08:90:7a:bd:b1:d5:43:d7:27:05:3a:5b: 96:03:ba:fd:f8:0e:8a:c4:5f:fc:73:62:69:9c:de:53:9d:d6: 9b:63:ec:fd:9a:67:cc:3d:3c:98:f6:02:c3:b2:34:b3:8b:e5: a1:64:e5:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFNN/Mha5Dp3BSxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjc0MFoXDTI1MDUwNTEwMjc0MFowLzEtMCsGA1UEAxMk OTYzNDhkZjMtNGUxZC00MDI3LWFkOTgtOTAzOTAzZjg4YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUCF/gKBAK1sYbnwwZk0Pl/E1g4mMHhMPipd X5GtgAgSd11lRLEmBOUswrYiMYdB5ph+n3i6T2+OMw2T3PjrU4SfwOVEg+pUyt/6 wZiTDVhFxod34aE1Kasng62bmy87BbhESz2lBPDYUwc2IT3QjSDI0ZlCs5AOJwz3 vVUTJPRTXLnZC7JL2fUTp8JBQoTdo9gdCm7FbzXg0wlI4McFZwIaqRH1+YVzZ0Jx tB289U3dNsi5ZopS/YeB4ZpH1pWuyACgTjGWdJITBdozYFkd5h0+IH/qrL1KFPNV rUwAtpeyZFhJESybY76zV5BGIgLDe8h2DLQGPBda0l1KP/s2aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOt0fcdL5/u4duMaOFiLuUNnHVglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjQ3NjBkNGItMjBkZi0z ZjZjLTk0NmEtN2I1YjFmYmJiMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF15y2eJIXAfh4dYi38I4IFmtGub1V5MxAmH5ZPbJEIHbSiibf5F xJSAvME/SeBnw7KPwWGoz2/uM0bxeiyN6pqugyvpXrDwIY2BslGQ+oFZ2YpgsFJw FRHUnGpub4SQr4MaPlCsFRL4BuOG+v90HZ01ORoHUE6qMWscu9XxD577FKho6KzK vmiMSUr89MzQleeQvpq/if8BIIDnlfpNeoVj2160VqH8stB/plH7DMn1jkXuJLhI nQDIANvdRgJlXebQR2S+bmElcbXaAQiQer2x1UPXJwU6W5YDuv34DorEX/xzYmmc 3lOd1ptj7P2aZ8w9PJj2AsOyNLOL5aFk5fk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:16 2025 by rpki-client