$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c26f00c7-a794-3957-bf3c-490135776dfd.roa File: c26f00c7-a794-3957-bf3c-490135776dfd.roa (raw, json) Hash identifier: VK9ffD0Z7k1pMJo5B9pEZxSTjoZFp2GM2SS3rX1ihLc= Subject key identifier: 55:1D:1A:0D:9D:4B:86:1C:C7:7C:75:F2:DD:8A:F7:D6:C7:31:56:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57842F35B3917FD2B6F5100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c26f00c7-a794-3957-bf3c-490135776dfd.roa Signing time: Tue 04 Feb 2025 13:43:27 +0000 ROA not before: Tue 04 Feb 2025 13:43:27 +0000 ROA not after: Mon 05 May 2025 12:43:27 +0000 asID: 30036 IP address blocks: 2604:2d80:a080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:78:42:f3:5b:39:17:fd:2b:6f:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:43:27 2025 GMT Not After : May 5 12:43:27 2025 GMT Subject: CN=30d45ad9-d221-4da2-aaf4-2c84a7ef6c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:41:bb:dc:15:2b:c3:a3:60:84:d0:44:17: c4:7c:25:38:f0:18:64:0d:0b:47:c0:94:21:30:4a: b1:9c:a4:b3:c3:f1:02:61:a9:45:f8:7f:a0:ac:42: 97:2e:2e:5e:36:b6:c7:f2:f1:5a:55:c6:c7:3d:e2: 2a:ab:18:54:96:ff:0c:99:bf:45:fd:97:d4:32:05: 7b:aa:56:a2:f4:67:a2:e6:b1:5b:a8:62:8d:94:0a: 5a:12:e1:84:8d:de:48:3b:35:84:6c:a7:38:2c:f4: 01:35:80:36:ff:70:7a:f9:80:51:14:b5:0f:93:40: 76:65:44:c1:88:e1:99:8c:ef:c1:16:ce:a7:4a:52: 15:e7:74:e9:09:a8:65:e0:58:62:7a:f0:8d:34:74: 19:6d:ee:a6:9c:19:fa:e0:f4:65:61:87:60:84:ff: 24:76:e2:62:fd:45:f1:29:23:23:b9:0c:0b:be:96: 5a:86:e3:6b:56:f3:a1:af:ac:9f:64:c7:8d:a1:5e: cd:54:32:fe:1c:ba:8f:56:a7:cc:a9:d0:cc:cd:79: 4b:33:36:08:4f:21:0c:31:97:5b:05:3b:6f:37:31: 0a:e4:c5:e0:df:10:e7:0e:8b:5a:8b:8a:a1:37:04: 2c:c3:a3:90:31:21:6c:2a:fe:6c:a9:db:0f:04:7b: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1D:1A:0D:9D:4B:86:1C:C7:7C:75:F2:DD:8A:F7:D6:C7:31:56:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c26f00c7-a794-3957-bf3c-490135776dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e3:db:96:5b:02:ac:fe:17:62:61:43:02:9e:cd:10:4b:81: 9d:f9:90:82:94:4d:02:1a:f7:13:7e:6a:70:9f:6a:d2:8d:1d: bc:29:85:a0:e6:6d:63:f2:bf:aa:c0:e9:d5:6a:bc:c8:b9:cb: e7:f7:82:30:dd:ff:3e:2d:af:c8:fc:cf:b6:23:4a:87:0b:77: 7c:12:bd:3f:8c:b7:4f:e3:fb:df:8b:e8:48:f8:dc:97:78:f5: 7e:8e:f8:ad:c6:21:dd:10:79:41:db:89:fd:ef:c7:9c:4e:92: 98:b6:83:f2:6d:fe:6b:f0:af:f8:76:2a:f4:47:e9:e0:89:76: c9:14:7b:15:30:3b:3f:06:70:bb:91:6e:35:56:50:39:8b:e1: 17:88:45:49:b2:74:4b:03:81:47:ea:cd:47:5d:f2:f6:83:99: 28:e7:33:26:d0:2a:aa:86:f3:28:f3:b6:b1:8e:33:db:20:e6: c0:b1:7f:87:6e:60:f5:41:16:14:72:fe:27:4a:e5:c8:e9:c4: 7d:8f:eb:36:07:90:de:ba:f1:91:68:a8:34:58:42:86:68:59: e2:1f:9c:0f:93:42:06:85:37:e9:ac:8d:e1:5f:f1:db:f7:ab: 32:c1:ef:ba:11:81:35:24:78:20:d1:e9:47:8f:da:e6:5e:65: 0b:0e:c4:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFeELzWzkX/StvUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDMyN1oXDTI1MDUwNTEyNDMyN1owLzEtMCsGA1UEAxMk MzBkNDVhZDktZDIyMS00ZGEyLWFhZjQtMmM4NGE3ZWY2YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSJBu9wVK8OjYITQRBfEfCU48BhkDQtHwJQh MEqxnKSzw/ECYalF+H+grEKXLi5eNrbH8vFaVcbHPeIqqxhUlv8Mmb9F/ZfUMgV7 qlai9Gei5rFbqGKNlApaEuGEjd5IOzWEbKc4LPQBNYA2/3B6+YBRFLUPk0B2ZUTB iOGZjO/BFs6nSlIV53TpCahl4FhievCNNHQZbe6mnBn64PRlYYdghP8kduJi/UXx KSMjuQwLvpZahuNrVvOhr6yfZMeNoV7NVDL+HLqPVqfMqdDMzXlLMzYITyEMMZdb BTtvNzEK5MXg3xDnDotai4qhNwQsw6OQMSFsKv5sqdsPBHvHdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUdGg2dS4Ycx3x18t2K99bHMVbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzI2ZjAwYzctYTc5NC0z OTU3LWJmM2MtNDkwMTM1Nzc2ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7j25ZbAqz+F2JhQwKezRBLgZ35kIKUTQIa9xN+anCfatKNHbwp haDmbWPyv6rA6dVqvMi5y+f3gjDd/z4tr8j8z7YjSocLd3wSvT+Mt0/j+9+L6Ej4 3Jd49X6O+K3GId0QeUHbif3vx5xOkpi2g/Jt/mvwr/h2KvRH6eCJdskUexUwOz8G cLuRbjVWUDmL4ReIRUmydEsDgUfqzUdd8vaDmSjnMybQKqqG8yjztrGOM9sg5sCx f4duYPVBFhRy/idK5cjpxH2P6zYHkN668ZFoqDRYQoZoWeIfnA+TQgaFN+msjeFf 8dv3qzLB77oRgTUkeCDR6UeP2uZeZQsOxBU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:41 2025 by rpki-client