$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c131726f-5500-372a-8d8b-e81b7c7cee0b.roa File: c131726f-5500-372a-8d8b-e81b7c7cee0b.roa (raw, json) Hash identifier: h9PqEbI73nbQV1a39f84k5CEZC00nA25VtHOI6VwB8U= Subject key identifier: 7F:E6:84:DB:5A:06:AB:C6:F8:F9:2E:A3:71:B7:16:56:50:08:FF:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C8B71B1E1A1D280CAC2E2380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c131726f-5500-372a-8d8b-e81b7c7cee0b.roa Signing time: Wed 05 Feb 2025 17:37:30 +0000 ROA not before: Wed 05 Feb 2025 17:37:30 +0000 ROA not after: Tue 06 May 2025 16:37:30 +0000 asID: 30036 IP address blocks: 2604:2d80:f280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:b7:1b:1e:1a:1d:28:0c:ac:2e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 17:37:30 2025 GMT Not After : May 6 16:37:30 2025 GMT Subject: CN=10b620ec-d008-498a-ad9f-4b7fd39bfb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4f:83:bb:1d:75:ff:97:8a:56:cc:43:06:d2: d5:5e:8c:10:3c:b2:7f:a7:a4:ba:9d:cf:f2:16:eb: 75:97:a2:8e:4c:57:54:d8:bf:ee:3c:fb:e8:56:7f: 76:b9:3e:27:63:4a:08:8d:c6:fe:3d:08:e2:e6:a4: 57:95:e5:21:47:10:95:e2:8c:2c:1c:3c:92:46:52: 71:74:6e:7e:92:4a:e3:a6:9e:8a:c2:c5:79:32:1a: ec:45:e5:16:ae:d3:ad:61:13:11:8e:24:57:9e:97: 1e:a7:dc:d5:e3:4c:07:ac:2d:84:78:5f:8a:72:66: 7d:fd:01:72:b3:43:62:8b:7a:00:a4:7c:17:0e:a2: 11:b8:9f:b0:14:bc:ad:01:4d:1e:68:a4:84:bd:50: 0d:06:45:b4:2c:e7:ac:5c:97:1b:2f:48:43:c1:36: a9:1e:48:f5:2f:5b:54:ed:74:ba:9c:c8:3d:f5:a9: 76:a4:11:31:a0:16:64:06:af:c5:86:b3:b4:13:34: 40:b1:39:ea:a6:26:bc:ce:d6:3c:30:11:83:a3:da: cc:ae:a6:e2:2f:23:03:7c:5b:1c:d9:87:ae:c9:63: d0:fc:3d:ca:b3:52:aa:a1:30:ac:b7:5a:1f:9b:e4: df:25:17:b7:ec:cd:56:8a:0f:ed:2c:ff:50:d5:9e: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:84:DB:5A:06:AB:C6:F8:F9:2E:A3:71:B7:16:56:50:08:FF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c131726f-5500-372a-8d8b-e81b7c7cee0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:aa:c7:f9:c7:8a:2c:9a:b0:ec:12:72:1a:7b:27:74:10:71: 41:b5:f9:ed:9e:37:4b:e7:be:5a:25:a9:a9:68:b3:be:e7:a6: 84:44:99:88:fe:64:df:d5:04:e9:89:77:df:f3:9b:72:76:b6: 17:d6:56:ed:1a:61:eb:f4:24:1d:ad:5c:ba:f0:9e:a9:b3:ab: e8:4f:85:d5:63:ab:a0:c1:1e:f4:ef:c9:27:f6:0b:3e:5c:7d: dd:8c:7f:e0:2b:fd:e0:ea:91:d3:c9:b5:3c:b0:4a:a4:ee:33: fb:1e:4e:b4:6e:7e:53:17:84:54:29:e9:6a:79:0d:51:0e:d5: 19:b8:31:d0:5e:69:b0:c8:2d:4b:23:e8:9b:a4:95:36:fc:71: 2b:81:7a:a6:45:6a:82:d4:c9:a0:4d:5e:f9:9d:61:b3:9d:bc: bd:85:f3:17:05:5c:69:25:51:d1:b0:04:22:02:a8:15:d8:ea: e1:35:f2:3c:7e:69:b3:94:74:86:a0:2b:21:58:d6:e0:76:29: 90:58:63:10:55:b6:d7:4f:c0:1f:c3:f1:19:c6:5d:d1:69:6d: 6b:b8:ca:5b:a3:ee:e9:d2:80:80:02:f6:aa:51:ed:ec:2f:0d: dc:cc:f8:27:bc:8e:f1:ea:44:16:7e:fe:2b:5e:08:ae:ea:a5: 16:cb:a1:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjItxseGh0oDKwuI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTE3MzczMFoXDTI1MDUwNjE2MzczMFowLzEtMCsGA1UEAxMk MTBiNjIwZWMtZDAwOC00OThhLWFkOWYtNGI3ZmQzOWJmYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk+Dux11/5eKVsxDBtLVXowQPLJ/p6S6nc/y Fut1l6KOTFdU2L/uPPvoVn92uT4nY0oIjcb+PQji5qRXleUhRxCV4owsHDySRlJx dG5+kkrjpp6KwsV5MhrsReUWrtOtYRMRjiRXnpcep9zV40wHrC2EeF+KcmZ9/QFy s0Nii3oApHwXDqIRuJ+wFLytAU0eaKSEvVANBkW0LOesXJcbL0hDwTapHkj1L1tU 7XS6nMg99al2pBExoBZkBq/FhrO0EzRAsTnqpia8ztY8MBGDo9rMrqbiLyMDfFsc 2YeuyWPQ/D3Ks1KqoTCst1ofm+TfJRe37M1Wig/tLP9Q1Z63wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/mhNtaBqvG+Pkuo3G3FlZQCP8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzEzMTcyNmYtNTUwMC0z NzJhLThkOGItZTgxYjdjN2NlZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeqx/nHiiyasOwSchp7J3QQcUG1+e2eN0vnvlolqalos77npoRE mYj+ZN/VBOmJd9/zm3J2thfWVu0aYev0JB2tXLrwnqmzq+hPhdVjq6DBHvTvySf2 Cz5cfd2Mf+Ar/eDqkdPJtTywSqTuM/seTrRuflMXhFQp6Wp5DVEO1Rm4MdBeabDI LUsj6JuklTb8cSuBeqZFaoLUyaBNXvmdYbOdvL2F8xcFXGklUdGwBCICqBXY6uE1 8jx+abOUdIagKyFY1uB2KZBYYxBVttdPwB/D8RnGXdFpbWu4yluj7unSgIAC9qpR 7ewvDdzM+Ce8jvHqRBZ+/iteCK7qpRbLoSY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:33 2025 by rpki-client