$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa File: dc3469f6-adec-3719-b049-257d25b1aec8.roa (raw, json) Hash identifier: nC0XLLZFKMCMf6bT7P7CYX7HWeuQdd2ZN9x+1cKqQ3Q= Subject key identifier: A6:16:1D:AD:F4:D8:85:C1:A1:C5:10:F6:33:4E:3B:8B:CE:EC:39:10 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C580FEB82D912A8A39FC7800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa Signing time: Tue 04 Feb 2025 14:01:02 +0000 ROA not before: Tue 04 Feb 2025 14:01:02 +0000 ROA not after: Mon 05 May 2025 13:01:02 +0000 asID: 30036 IP address blocks: 2604:2d80:de80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fe:b8:2d:91:2a:8a:39:fc:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:01:02 2025 GMT Not After : May 5 13:01:02 2025 GMT Subject: CN=50258982-a3a5-460d-8b6f-6e8e93fd4c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:a2:d2:13:a7:3e:f8:f5:ee:34:91:a3:55: a1:7d:b4:1e:79:72:45:f1:1c:bf:aa:51:c0:03:02: a0:b4:52:8c:58:52:e8:5c:9f:54:b8:4c:06:65:f8: 6e:48:a7:47:5a:b6:0b:8e:89:d4:84:5c:1c:83:b3: 9d:de:15:e1:7d:d5:90:41:96:8d:77:a0:2f:55:ec: ec:9d:3c:2c:88:d9:8b:2b:15:01:64:4b:a8:04:85: a4:47:7b:ba:b8:2a:01:61:81:95:b2:68:37:d3:a5: 4d:82:39:82:30:01:58:bc:51:33:12:5d:bf:a0:02: 66:7b:e9:be:22:b0:d9:1c:ec:d5:d6:66:e4:a4:9c: 89:76:fe:24:0e:aa:3f:78:26:bb:20:e3:aa:d1:c3: c5:59:79:97:d8:9c:24:8c:84:85:68:22:bf:2c:6f: eb:1a:ae:89:fe:4d:30:d8:c8:a5:7a:a5:27:85:9e: 58:ed:2d:58:a4:76:14:0b:22:31:f7:5e:a7:7a:e7: 81:a5:93:1c:60:8f:a6:6d:2e:cc:c4:90:6f:9a:b7: 6b:a2:d3:95:70:8d:a8:c8:46:4d:7f:25:74:52:68: b5:a6:f4:47:fd:09:ef:91:46:c0:58:a7:08:01:f6: c7:2c:4b:3a:43:ab:4b:a3:c8:8a:2a:9d:b2:73:b8: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:16:1D:AD:F4:D8:85:C1:A1:C5:10:F6:33:4E:3B:8B:CE:EC:39:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3469f6-adec-3719-b049-257d25b1aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:de80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:92:7d:38:7f:89:77:54:0c:db:ea:ae:aa:e3:8d:86:dd:84: 60:5d:c7:ad:36:10:7f:63:ed:24:5c:d3:35:ba:bf:ed:01:3b: a8:59:c9:20:4a:f3:ec:1f:32:69:cd:a4:7f:ec:00:25:2f:e2: e6:03:47:19:f6:c6:a3:53:55:6f:78:50:ff:b5:0f:14:f8:ae: 99:95:33:f5:93:1c:1b:11:b4:dd:43:84:85:f5:32:e0:bd:17: de:2b:8e:b0:ad:57:5f:48:95:f9:f6:0e:60:74:96:5d:c1:5f: ec:87:2e:d1:15:84:cd:92:0c:d0:be:b7:04:79:86:c9:6b:cc: 28:9b:a2:68:2d:be:49:bd:c2:01:cf:a4:4e:01:af:ff:ac:0a: 84:33:6c:a3:c8:b3:b5:53:2c:1f:e4:9f:55:0f:37:41:fc:78: 8e:bb:3c:a0:20:01:0c:39:39:33:f7:5e:12:82:35:56:b2:f6: 66:2c:fc:5e:bd:69:a5:07:fa:71:98:5e:85:8a:5c:66:c5:21: 4f:15:25:bf:3d:5b:b9:cf:80:9c:f1:da:17:da:53:1b:76:c0: 5c:08:a0:ba:49:2e:1a:cb:97:61:62:08:e5:a8:2f:c1:ad:cb: 9e:f2:10:06:92:4e:2a:69:a7:76:5e:2a:2a:fc:49:a3:a5:23: 79:3c:7e:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgP64LZEqijn8eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDEwMloXDTI1MDUwNTEzMDEwMlowLzEtMCsGA1UEAxMk NTAyNTg5ODItYTNhNS00NjBkLThiNmYtNmU4ZTkzZmQ0YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPmi0hOnPvj17jSRo1WhfbQeeXJF8Ry/qlHA AwKgtFKMWFLoXJ9UuEwGZfhuSKdHWrYLjonUhFwcg7Od3hXhfdWQQZaNd6AvVezs nTwsiNmLKxUBZEuoBIWkR3u6uCoBYYGVsmg306VNgjmCMAFYvFEzEl2/oAJme+m+ IrDZHOzV1mbkpJyJdv4kDqo/eCa7IOOq0cPFWXmX2JwkjISFaCK/LG/rGq6J/k0w 2MileqUnhZ5Y7S1YpHYUCyIx916neueBpZMcYI+mbS7MxJBvmrdrotOVcI2oyEZN fyV0Umi1pvRH/QnvkUbAWKcIAfbHLEs6Q6tLo8iKKp2yc7h5cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKYWHa302IXBocUQ9jNOO4vO7DkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGMzNDY5ZjYtYWRlYy0z NzE5LWIwNDktMjU3ZDI1YjFhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgN6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWSfTh/iXdUDNvqrqrjjYbdhGBdx602EH9j7SRc0zW6v+0BO6hZ ySBK8+wfMmnNpH/sACUv4uYDRxn2xqNTVW94UP+1DxT4rpmVM/WTHBsRtN1DhIX1 MuC9F94rjrCtV19Ilfn2DmB0ll3BX+yHLtEVhM2SDNC+twR5hslrzCibomgtvkm9 wgHPpE4Br/+sCoQzbKPIs7VTLB/kn1UPN0H8eI67PKAgAQw5OTP3XhKCNVay9mYs /F69aaUH+nGYXoWKXGbFIU8VJb89W7nPgJzx2hfaUxt2wFwIoLpJLhrLl2FiCOWo L8Gty57yEAaSTippp3ZeKir8SaOlI3k8fpg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:12 2025 by rpki-client