$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa File: c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa (raw, json) Hash identifier: F+GWxi9lEgkg3QyK0XYFxny3JPVOv9FkixXDoGs0ptA= Subject key identifier: A9:4F:26:73:7F:D4:A4:37:36:1A:97:7C:92:52:A9:23:40:39:C1:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B737FDE08794330BEA339100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa Signing time: Thu 30 Jan 2025 11:12:38 +0000 ROA not before: Thu 30 Jan 2025 11:12:38 +0000 ROA not after: Wed 30 Apr 2025 10:12:38 +0000 asID: 30036 IP address blocks: 2604:2d80:5100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:fd:e0:87:94:33:0b:ea:33:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:12:38 2025 GMT Not After : Apr 30 10:12:38 2025 GMT Subject: CN=d0012ca0-e7eb-47d7-9366-8901843dbc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:d8:ed:24:b9:9a:b1:60:6a:d6:1a:d4:5d: 3d:c7:34:13:85:19:f0:5f:50:ab:88:97:c1:ef:d1: fb:8f:41:d2:6f:5b:d6:aa:1b:ec:c8:db:f9:c9:63: f3:21:71:ed:2b:ac:3f:6a:55:89:9b:f6:76:d6:dd: c4:25:87:b4:69:30:24:d3:c0:8a:d8:b6:46:74:ea: c2:5f:7e:be:74:f7:3d:c9:cf:55:d5:4e:d3:82:f4: 9e:e7:70:1f:d7:20:d8:14:7f:59:be:85:dc:32:cf: 23:0d:72:fd:8a:85:f0:cf:57:d3:e0:ac:cb:2d:e5: 58:f7:6f:7d:c4:1d:61:2b:26:a7:3a:ab:ca:d8:56: e5:5c:1f:dc:d7:38:d1:97:69:f6:f0:f3:ae:49:3c: 00:0a:d8:0b:a9:c2:9d:d5:72:4d:04:0d:06:56:66: 4d:fa:c9:18:20:99:02:22:f0:82:52:f9:19:ec:ee: 2d:ae:46:8e:e2:66:97:4a:39:1b:77:54:6b:cb:1e: 28:b5:cd:eb:d9:33:5d:2f:7a:0c:66:4e:dc:a1:59: a3:46:eb:1d:7c:ce:92:b0:8c:9f:a1:6b:37:14:ed: e2:68:cb:aa:79:b4:25:7e:ae:80:c6:63:20:6c:e6: c0:f2:f9:0b:dc:fd:97:d8:ec:ba:36:6c:04:94:73: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:26:73:7F:D4:A4:37:36:1A:97:7C:92:52:A9:23:40:39:C1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49db1af-f6bf-3eff-9c5f-a4d28be224e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b0:6b:77:c2:b1:8d:cc:8d:fa:eb:f8:ce:61:7d:bf:1d:84: c3:66:bc:7f:57:85:92:0c:63:52:35:38:53:e4:22:18:38:00: 1c:30:e9:ce:35:31:99:9f:00:76:8b:5f:2a:1a:53:33:f8:d1: 04:e7:17:e2:bf:48:8c:39:4d:b6:85:6b:da:8e:d4:10:bc:18: 71:9a:f1:93:8e:1a:48:2e:34:22:1a:29:c1:b3:8a:8b:cd:4e: 41:e6:fd:45:98:4e:64:10:7d:5b:cd:3c:db:2a:b0:17:ad:a9: e5:31:16:ee:f9:d1:a5:97:e9:cc:0e:64:46:db:02:b4:b2:a9: f3:2d:98:be:52:6e:c6:25:71:16:60:51:9a:0a:c2:ef:45:b9: 76:a6:4c:97:69:db:6e:58:c4:c4:28:d6:b8:4b:d9:a0:bf:b4: e1:b9:c9:55:58:a6:24:bc:4d:86:d6:30:ea:ca:a0:5f:40:06: 2a:b7:e3:c7:c6:8e:cc:e1:64:f4:a8:85:47:df:93:e4:1e:24: c9:d1:9f:77:61:e6:6e:d8:26:c7:59:aa:68:83:f7:db:dc:38: 4e:2b:4a:5e:68:e1:b7:78:de:98:8a:e9:42:80:2d:b7:d3:32: 60:1f:88:7a:7b:e0:05:4c:ca:1c:41:e2:a4:ea:7f:2b:4b:85: 10:13:af:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3N/3gh5QzC+ozkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTIzOFoXDTI1MDQzMDEwMTIzOFowLzEtMCsGA1UEAxMk ZDAwMTJjYTAtZTdlYi00N2Q3LTkzNjYtODkwMTg0M2RiYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5XY7SS5mrFgatYa1F09xzQThRnwX1CriJfB 79H7j0HSb1vWqhvsyNv5yWPzIXHtK6w/alWJm/Z21t3EJYe0aTAk08CK2LZGdOrC X36+dPc9yc9V1U7TgvSe53Af1yDYFH9ZvoXcMs8jDXL9ioXwz1fT4KzLLeVY9299 xB1hKyanOqvK2FblXB/c1zjRl2n28POuSTwACtgLqcKd1XJNBA0GVmZN+skYIJkC IvCCUvkZ7O4trkaO4maXSjkbd1Rryx4otc3r2TNdL3oMZk7coVmjRusdfM6SsIyf oWs3FO3iaMuqebQlfq6AxmMgbObA8vkL3P2X2Oy6NmwElHPMHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlPJnN/1KQ3NhqXfJJSqSNAOcGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQ5ZGIxYWYtZjZiZi0z ZWZmLTljNWYtYTRkMjhiZTIyNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiwa3fCsY3Mjfrr+M5hfb8dhMNmvH9XhZIMY1I1OFPkIhg4ABww 6c41MZmfAHaLXyoaUzP40QTnF+K/SIw5TbaFa9qO1BC8GHGa8ZOOGkguNCIaKcGz iovNTkHm/UWYTmQQfVvNPNsqsBetqeUxFu750aWX6cwOZEbbArSyqfMtmL5SbsYl cRZgUZoKwu9FuXamTJdp225YxMQo1rhL2aC/tOG5yVVYpiS8TYbWMOrKoF9ABiq3 48fGjszhZPSohUffk+QeJMnRn3dh5m7YJsdZqmiD99vcOE4rSl5o4bd43piK6UKA LbfTMmAfiHp74AVMyhxB4qTqfytLhRATr5M= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:26 2025 by rpki-client