$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa File: dcb72002-8047-3edf-a936-3dee6f950e1f.roa (raw, json) Hash identifier: KiZ0NH4tVgu55mAyYqmNex5i61xMdgEMKKbugvAqlYw= Subject key identifier: C2:A3:B6:5F:06:80:A2:F9:7E:67:95:30:70:99:FA:8A:2F:70:72:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55FFE63315123964D160980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa Signing time: Tue 04 Feb 2025 12:54:33 +0000 ROA not before: Tue 04 Feb 2025 12:54:33 +0000 ROA not after: Mon 05 May 2025 11:54:33 +0000 asID: 30036 IP address blocks: 2604:2d80:1f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:fe:63:31:51:23:96:4d:16:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:54:33 2025 GMT Not After : May 5 11:54:33 2025 GMT Subject: CN=f59a83e8-1fda-41ac-adca-8abef19879e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:b9:c1:5d:5f:38:05:7f:41:31:60:fb:3d: 21:47:8d:a6:ee:50:80:4d:ae:2c:33:0c:fe:56:da: 64:63:fd:80:e2:13:6b:7d:c8:bd:96:30:74:0a:fe: e7:e0:7b:31:a2:4a:d6:b0:19:17:a4:2e:97:0b:26: 4c:8b:f9:4d:8b:f0:03:94:77:0c:84:09:cd:14:ae: 04:d7:9c:e6:17:5a:c2:d6:a5:85:e2:ef:f9:72:7c: 4f:54:bd:3a:a9:25:76:f4:e0:7f:79:f8:e7:3d:d8: 92:fb:40:b2:9b:e8:55:4b:08:64:7d:fb:ac:27:17: 0b:af:99:1d:e4:e3:a8:8f:7b:0e:41:69:c2:53:4b: 35:d4:ab:3c:45:2c:b7:94:a1:00:20:d8:97:05:fa: 66:3f:53:54:ca:ba:20:76:37:50:88:54:e8:70:5a: 3f:e4:1c:b6:31:28:b4:02:43:56:6a:42:b8:ec:7a: 76:09:66:31:c9:fe:08:c9:04:10:84:f1:f4:e9:19: d5:f2:ac:29:75:3e:70:2a:9d:d4:20:30:86:9f:d4: 53:12:f4:94:a9:3b:12:55:67:64:f8:3f:f7:22:9b: 85:0b:3b:68:35:e8:c7:19:f4:f7:7e:7d:5a:85:01: 10:e6:d5:84:dc:a4:6f:84:8f:a2:7f:0b:79:c7:b6: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:B6:5F:06:80:A2:F9:7E:67:95:30:70:99:FA:8A:2F:70:72:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb72002-8047-3edf-a936-3dee6f950e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1f00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d9:99:32:df:3b:2e:00:9c:9b:32:f9:e1:8f:b2:65:9a:a4: fd:8e:6d:4f:65:6a:02:8f:f0:94:11:25:f2:8a:72:37:2f:8d: 6f:55:64:01:33:ca:93:7d:e7:34:3e:c2:df:0d:62:43:07:96: 64:da:a7:88:87:7f:e1:9f:58:1a:41:00:64:18:67:9e:cd:95: ee:a3:ac:80:d4:a8:da:3a:b2:0f:c7:16:db:86:e8:65:03:ba: ff:18:e4:96:c5:c5:eb:d6:fc:15:44:de:01:80:b3:6f:81:ee: 05:57:91:6a:cd:5e:08:f4:55:6e:73:f4:bc:0b:44:68:ac:f0: e0:8f:5a:19:cc:3b:46:ea:71:4d:d5:c3:31:8c:67:53:c7:67: 79:4c:cc:fc:46:25:92:91:8c:bd:a2:0f:e5:19:69:32:b6:15: e5:19:d5:9c:f7:2d:53:d4:cf:90:c2:5b:69:9f:fb:92:06:69: ad:d8:37:83:b6:ee:72:25:b2:da:0b:12:ec:39:53:cb:7d:72: 6a:4b:bb:88:ed:b6:f0:15:76:aa:ea:86:13:6a:da:4e:7e:13: ae:0c:62:45:78:3d:73:57:19:19:b6:38:fd:8f:4c:ab:11:58: 3a:2f:4f:08:fb:93:68:5d:f5:61:4a:67:c3:aa:42:54:4a:bb: fb:cc:f8:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFX/5jMVEjlk0WCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTQzM1oXDTI1MDUwNTExNTQzM1owLzEtMCsGA1UEAxMk ZjU5YTgzZTgtMWZkYS00MWFjLWFkY2EtOGFiZWYxOTg3OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphe5wV1fOAV/QTFg+z0hR42m7lCATa4sMwz+ VtpkY/2A4hNrfci9ljB0Cv7n4HsxokrWsBkXpC6XCyZMi/lNi/ADlHcMhAnNFK4E 15zmF1rC1qWF4u/5cnxPVL06qSV29OB/efjnPdiS+0Cym+hVSwhkffusJxcLr5kd 5OOoj3sOQWnCU0s11Ks8RSy3lKEAINiXBfpmP1NUyrogdjdQiFTocFo/5By2MSi0 AkNWakK47Hp2CWYxyf4IyQQQhPH06RnV8qwpdT5wKp3UIDCGn9RTEvSUqTsSVWdk +D/3IpuFCztoNejHGfT3fn1ahQEQ5tWE3KRvhI+ifwt5x7Y1owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKjtl8GgKL5fmeVMHCZ+oovcHIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNiNzIwMDItODA0Ny0z ZWRmLWE5MzYtM2RlZTZmOTUwZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgB8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLZmTLfOy4AnJsy+eGPsmWapP2ObU9lagKP8JQRJfKKcjcvjW9V ZAEzypN95zQ+wt8NYkMHlmTap4iHf+GfWBpBAGQYZ57Nle6jrIDUqNo6sg/HFtuG 6GUDuv8Y5JbFxevW/BVE3gGAs2+B7gVXkWrNXgj0VW5z9LwLRGis8OCPWhnMO0bq cU3VwzGMZ1PHZ3lMzPxGJZKRjL2iD+UZaTK2FeUZ1Zz3LVPUz5DCW2mf+5IGaa3Y N4O27nIlstoLEuw5U8t9cmpLu4jttvAVdqrqhhNq2k5+E64MYkV4PXNXGRm2OP2P TKsRWDovTwj7k2hd9WFKZ8OqQlRKu/vM+JY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:12 2025 by rpki-client