$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa File: d42ef95f-66c7-31f8-8318-c0c8e3128160.roa (raw, json) Hash identifier: Xmb9mru9gVU0di6h0OKjdN2LBYvGVzjjHUvV6nXqSQo= Subject key identifier: 16:73:EB:ED:70:0B:1D:EE:01:12:32:51:1B:D9:B6:80:FD:91:9C:C8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B738274F43AF1B27F9AA5B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa Signing time: Thu 30 Jan 2025 11:12:57 +0000 ROA not before: Thu 30 Jan 2025 11:12:57 +0000 ROA not after: Wed 30 Apr 2025 10:12:57 +0000 asID: 30036 IP address blocks: 2604:2d80:5f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:38:27:4f:43:af:1b:27:f9:aa:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:12:57 2025 GMT Not After : Apr 30 10:12:57 2025 GMT Subject: CN=e7ec0216-5675-42e0-a5b9-003b1f258213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:04:19:00:f3:1a:1b:64:40:ff:70:e4:33: c3:b8:de:3e:4e:bc:28:90:ef:65:31:04:1a:19:16: 15:a7:b5:98:80:55:aa:69:8d:c9:ee:3c:10:f4:d0: bc:fd:49:ee:98:42:a6:5e:7d:f3:b8:46:44:e6:6a: 6e:ec:61:de:ca:a9:35:bb:aa:07:d4:69:b7:18:fb: af:a5:0a:b7:83:4a:b8:76:59:7d:1a:c0:9d:ab:25: e4:b6:3a:eb:92:56:5b:fa:6f:42:9e:78:ae:0d:aa: f9:01:66:d6:5d:bb:4b:67:95:04:f5:a1:31:be:cc: f7:1a:5b:57:5a:43:e9:a8:31:a6:88:78:7d:10:e4: 40:04:10:10:07:0a:a5:7e:b0:51:d8:19:19:73:bd: 63:1e:bf:18:2c:33:c5:53:35:0d:d5:5d:e3:6f:69: ee:b2:c6:4b:0d:f5:1c:38:aa:9f:61:ba:55:b2:08: f1:a3:16:23:d6:1b:d6:d6:c6:ea:4d:f5:bd:78:38: e0:13:60:20:12:80:5d:d1:72:a8:44:49:9f:cb:24: b3:ef:85:47:e0:d3:e3:50:35:60:39:32:d4:5f:9e: 20:f3:b2:cc:ed:ea:95:1e:3a:20:62:8a:08:31:a2: 7b:d2:31:51:be:17:11:5a:40:b9:0c:69:41:c8:e4: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:EB:ED:70:0B:1D:EE:01:12:32:51:1B:D9:B6:80:FD:91:9C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d42ef95f-66c7-31f8-8318-c0c8e3128160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bb:17:fc:03:94:dd:d6:26:10:26:22:70:5a:7f:97:92:a9: 2b:11:cf:22:86:a9:b2:94:46:fb:65:2f:40:7e:40:8d:00:86: a4:2c:e6:26:d2:77:df:8c:2e:12:66:04:79:20:4f:b7:c0:18: d8:ad:31:50:9d:6d:bb:f3:7b:cb:e6:5c:86:cf:c5:e0:15:92: 37:7d:ca:52:2b:b3:f0:76:cc:f3:9e:30:58:fb:67:ad:b6:3a: df:ad:2a:d2:1b:f4:5a:2b:6e:5b:4b:61:29:0a:b0:9d:1f:30: a3:10:3f:4c:02:ed:ec:84:a5:81:2c:2e:bb:96:c1:0b:97:b7: fd:ba:e1:79:cf:2c:82:04:1e:b6:c5:93:64:95:42:29:02:d7: 9a:20:2d:47:7c:61:65:5f:b7:02:de:0b:26:42:81:55:0d:ef: fc:87:28:25:9d:1a:ff:7b:df:a3:ff:f8:6e:b1:35:38:e5:e4: f8:50:04:f4:20:2f:28:cc:7a:35:98:ab:1c:34:ae:34:74:14: b8:f8:4c:46:c0:81:66:5b:aa:a3:43:83:b2:36:44:57:ea:34: b7:17:bd:47:8f:7b:ca:14:66:6a:c5:71:22:86:9d:92:a5:be: e6:1f:9b:42:f8:0e:4a:19:ad:9e:f5:1e:3d:87:3c:a0:04:68: 66:b7:0c:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3OCdPQ68bJ/mqWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTI1N1oXDTI1MDQzMDEwMTI1N1owLzEtMCsGA1UEAxMk ZTdlYzAyMTYtNTY3NS00MmUwLWE1YjktMDAzYjFmMjU4MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwskEGQDzGhtkQP9w5DPDuN4+TrwokO9lMQQa GRYVp7WYgFWqaY3J7jwQ9NC8/UnumEKmXn3zuEZE5mpu7GHeyqk1u6oH1Gm3GPuv pQq3g0q4dll9GsCdqyXktjrrklZb+m9CnniuDar5AWbWXbtLZ5UE9aExvsz3GltX WkPpqDGmiHh9EORABBAQBwqlfrBR2BkZc71jHr8YLDPFUzUN1V3jb2nussZLDfUc OKqfYbpVsgjxoxYj1hvW1sbqTfW9eDjgE2AgEoBd0XKoREmfyySz74VH4NPjUDVg OTLUX54g87LM7eqVHjogYooIMaJ70jFRvhcRWkC5DGlByOTTiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZz6+1wCx3uARIyURvZtoD9kZzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQyZWY5NWYtNjZjNy0z MWY4LTgzMTgtYzBjOGUzMTI4MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgF8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEe7F/wDlN3WJhAmInBaf5eSqSsRzyKGqbKURvtlL0B+QI0AhqQs 5ibSd9+MLhJmBHkgT7fAGNitMVCdbbvze8vmXIbPxeAVkjd9ylIrs/B2zPOeMFj7 Z622Ot+tKtIb9ForbltLYSkKsJ0fMKMQP0wC7eyEpYEsLruWwQuXt/264XnPLIIE HrbFk2SVQikC15ogLUd8YWVftwLeCyZCgVUN7/yHKCWdGv9736P/+G6xNTjl5PhQ BPQgLyjMejWYqxw0rjR0FLj4TEbAgWZbqqNDg7I2RFfqNLcXvUePe8oUZmrFcSKG nZKlvuYfm0L4DkoZrZ71Hj2HPKAEaGa3DF0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:32 2025 by rpki-client