$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa File: ced27730-8460-33af-9791-605fb1792856.roa (raw, json) Hash identifier: VZzxk57gL88cGE0bSIRuwUnbJ58K2jw6sbpEZuMsSGw= Subject key identifier: 13:11:BE:90:35:C3:EA:A5:66:3E:C2:31:D4:47:86:35:CB:DD:36:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57836BB6C6E4EFA0D088280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa Signing time: Tue 04 Feb 2025 13:43:21 +0000 ROA not before: Tue 04 Feb 2025 13:43:21 +0000 ROA not after: Mon 05 May 2025 12:43:21 +0000 asID: 30036 IP address blocks: 2604:2d80:9d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:78:36:bb:6c:6e:4e:fa:0d:08:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:43:21 2025 GMT Not After : May 5 12:43:21 2025 GMT Subject: CN=a86b442c-b1ef-4b33-bf71-d2210ba60711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:19:c3:49:86:d2:91:74:15:76:cb:02:93: df:8b:ba:27:d5:39:61:53:76:a4:be:22:f5:99:23: 6d:fb:ac:71:70:08:32:55:80:b9:40:eb:b6:90:a8: 18:d4:05:04:8a:9a:3b:19:d8:7d:71:94:83:58:4e: c5:85:87:38:e6:26:38:8a:ac:b6:92:db:45:c6:29: 2b:a3:55:6e:9a:58:25:69:23:81:99:5e:fb:16:3a: 28:b7:7d:36:69:1d:99:b9:59:5b:35:77:02:72:bd: b2:14:0e:ba:18:c7:3f:50:0a:05:65:c3:06:29:ca: 42:a6:89:35:26:e5:47:67:5c:d5:48:bd:cc:1c:c3: 9d:0e:eb:9c:c0:3f:63:aa:d2:9c:2f:ca:ee:7b:28: 44:62:1d:d0:a9:0b:8c:02:89:af:e8:d0:b5:af:97: bc:5e:ab:f2:3e:70:bc:8f:fe:90:dd:dd:93:3c:9f: f9:46:19:9e:e9:ba:92:60:3c:8a:f3:d2:5b:d2:52: 0b:6c:fe:a5:9f:76:c6:bb:83:21:61:1e:70:de:f8: 37:72:c7:c8:6a:8d:fd:43:f2:b0:fa:f7:de:9a:50: 10:cd:43:e4:41:b1:20:1a:0d:ad:4d:df:c4:f5:d5: 05:c6:de:0f:45:4d:8f:26:fb:29:a8:4f:e8:c2:76: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:11:BE:90:35:C3:EA:A5:66:3E:C2:31:D4:47:86:35:CB:DD:36:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:49:9b:0e:25:bd:e1:06:93:74:46:56:3e:6a:b5:07:75:18: 50:68:6c:80:31:bb:d1:a6:b5:bb:d7:2f:51:6b:d0:e2:58:f5: e5:b3:a7:8f:c0:ae:dc:7f:ea:ff:33:2a:55:d8:db:b1:2c:1e: d8:c8:22:cd:da:c2:8c:93:bf:45:d8:00:e9:24:7b:31:8e:42: 18:e6:d7:00:c4:17:b4:42:bb:21:6e:7e:eb:a4:12:f4:e7:41: f5:3f:14:1d:45:da:da:62:af:0e:e9:43:b8:54:bd:b9:32:16: 3e:db:93:cb:28:b9:69:d6:32:9c:1b:e4:4e:4c:20:f5:5d:52: 74:56:d3:6e:7a:f8:98:ad:05:67:18:04:57:3a:74:69:c1:19: 87:a3:c8:49:cd:d2:69:69:dd:54:09:7d:6d:dc:8c:ef:06:67: 98:ea:70:22:51:d4:00:13:06:d8:e6:fa:86:78:6f:9e:3f:b1: de:dc:14:b8:cd:ac:b9:78:0f:a4:dc:93:89:cc:69:20:d0:c8: 44:13:5c:3b:10:57:13:7b:d7:a9:7c:38:6e:d4:46:12:18:2b: 0e:65:41:a6:5d:0e:3b:41:ba:f7:60:bf:6d:64:56:cb:de:26: c8:a3:65:12:36:fb:3e:4c:f8:bd:a2:0d:4c:ad:27:82:1b:af: c1:7b:0b:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFeDa7bG5O+g0IgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDMyMVoXDTI1MDUwNTEyNDMyMVowLzEtMCsGA1UEAxMk YTg2YjQ0MmMtYjFlZi00YjMzLWJmNzEtZDIyMTBiYTYwNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYZw0mG0pF0FXbLApPfi7on1TlhU3akviL1 mSNt+6xxcAgyVYC5QOu2kKgY1AUEipo7Gdh9cZSDWE7FhYc45iY4iqy2kttFxikr o1VumlglaSOBmV77Fjoot302aR2ZuVlbNXcCcr2yFA66GMc/UAoFZcMGKcpCpok1 JuVHZ1zVSL3MHMOdDuucwD9jqtKcL8rueyhEYh3QqQuMAomv6NC1r5e8XqvyPnC8 j/6Q3d2TPJ/5Rhme6bqSYDyK89Jb0lILbP6ln3bGu4MhYR5w3vg3csfIao39Q/Kw +vfemlAQzUPkQbEgGg2tTd/E9dUFxt4PRU2PJvspqE/ownZ6NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBMRvpA1w+qlZj7CMdRHhjXL3TbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VkMjc3MzAtODQ2MC0z M2FmLTk3OTEtNjA1ZmIxNzkyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJ0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABJmw4lveEGk3RGVj5qtQd1GFBobIAxu9GmtbvXL1Fr0OJY9eWz p4/Artx/6v8zKlXY27EsHtjIIs3awoyTv0XYAOkkezGOQhjm1wDEF7RCuyFufuuk EvTnQfU/FB1F2tpirw7pQ7hUvbkyFj7bk8souWnWMpwb5E5MIPVdUnRW0256+Jit BWcYBFc6dGnBGYejyEnN0mlp3VQJfW3cjO8GZ5jqcCJR1AATBtjm+oZ4b54/sd7c FLjNrLl4D6Tck4nMaSDQyEQTXDsQVxN716l8OG7URhIYKw5lQaZdDjtBuvdgv21k VsveJsijZRI2+z5M+L2iDUytJ4Ibr8F7CyA= -----END CERTIFICATE-----Generated at Sun Apr 6 12:48:01 2025 by rpki-client