$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa File: e84b311a-4ce4-3516-884a-5bf515549f40.roa (raw, json) Hash identifier: LMs+6V6FmIMEljdct2i7eEf1BEItA+36DQ2Of7uvDG8= Subject key identifier: 0D:EB:32:31:64:22:C3:93:5A:40:FF:77:67:51:43:F5:C3:6E:6F:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F8542E285687D74104DD40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa Signing time: Wed 05 Feb 2025 11:13:06 +0000 ROA not before: Wed 05 Feb 2025 11:13:06 +0000 ROA not after: Tue 06 May 2025 10:13:06 +0000 asID: 30036 IP address blocks: 2604:2d80:2080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f8:54:2e:28:56:87:d7:41:04:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:13:06 2025 GMT Not After : May 6 10:13:06 2025 GMT Subject: CN=1b2f9eed-ae4e-4d25-8c47-7801cdf5eba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:e7:75:39:7b:53:d3:af:1a:58:4d:12:b9: 91:63:8d:a5:66:3c:18:ed:15:56:23:9f:5a:19:7c: 60:8e:67:89:8c:93:3d:08:87:52:73:e7:53:e8:ea: 1c:d5:a9:95:95:74:02:e0:8d:18:f7:78:6b:a9:35: e8:42:bb:b2:45:b1:09:64:a9:0a:62:d2:dc:06:59: 12:df:e0:04:12:8c:14:59:25:b4:2c:81:cc:61:cc: 18:32:49:54:38:ef:e9:4a:7e:2f:9d:2d:f8:8c:ea: 95:9c:f7:c7:74:38:bf:35:13:a1:4b:ea:c2:ba:f1: 54:a3:68:b2:b4:40:6c:e0:67:36:ca:ee:7f:46:de: 9d:f5:93:6a:ac:e0:00:0b:33:3d:e6:25:1e:83:c6: 7b:3e:25:44:3c:f7:84:95:01:d8:98:28:3e:b2:da: ea:37:cd:df:ce:10:f1:6d:72:2f:42:98:cb:ae:af: d5:31:69:47:09:28:c9:d0:69:80:cf:8c:93:79:a1: f6:95:ae:d5:5c:11:24:a2:f3:21:bc:44:6a:f2:a3: e5:49:ae:b2:e2:57:a7:91:84:cc:0f:30:2e:18:46: ec:8d:a3:d7:ff:71:c7:25:18:28:d9:89:04:39:2a: 92:8c:3c:00:ee:bd:2e:7c:3a:69:a6:9b:47:9b:be: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EB:32:31:64:22:C3:93:5A:40:FF:77:67:51:43:F5:C3:6E:6F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e2:3b:3a:3b:6a:12:1e:0a:8e:c5:f2:54:83:21:5c:b1:29: 5b:69:61:c8:52:d9:de:35:50:42:da:64:ae:1e:85:c7:ce:c3: 23:6d:ac:c9:e0:6b:ae:11:ad:d2:78:46:d1:12:e6:18:84:02: 24:7f:ba:49:34:06:ce:d8:b2:99:fe:0f:28:ef:6c:06:eb:db: f7:4e:57:90:5f:ae:d6:a2:bf:f4:c5:36:81:41:8d:d0:06:9a: 27:65:d3:f8:30:15:4e:d0:9d:ea:86:ec:9d:e3:d2:cb:84:fa: 93:df:fa:20:74:a8:d8:2d:65:12:ab:9a:5f:64:3d:27:c0:4b: 5e:23:20:17:8c:8b:5a:2a:e3:fb:e6:2d:9b:ab:3f:66:e1:e1: 44:83:d0:b9:2b:ff:44:9d:18:80:fe:18:88:bb:de:0c:bd:5a: 13:53:04:c5:be:33:35:40:78:a5:e2:7d:a2:a1:35:fb:33:ac: 29:33:04:ae:2b:75:eb:c5:72:d0:9b:4e:b9:cd:91:2d:a3:cb: fc:cd:b8:75:c8:9a:b9:e7:8a:ca:f8:99:d8:17:f0:aa:37:43: 41:c3:8e:31:f7:1c:7c:ed:cf:ba:8a:67:32:b2:bb:cf:03:c0: de:e8:97:c6:85:b9:e2:c2:3d:31:77:86:73:a5:00:35:0a:7a: 42:a6:44:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjH+FQuKFaH10EE3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTMwNloXDTI1MDUwNjEwMTMwNlowLzEtMCsGA1UEAxMk MWIyZjllZWQtYWU0ZS00ZDI1LThjNDctNzgwMWNkZjVlYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt7ndTl7U9OvGlhNErmRY42lZjwY7RVWI59a GXxgjmeJjJM9CIdSc+dT6Ooc1amVlXQC4I0Y93hrqTXoQruyRbEJZKkKYtLcBlkS 3+AEEowUWSW0LIHMYcwYMklUOO/pSn4vnS34jOqVnPfHdDi/NROhS+rCuvFUo2iy tEBs4Gc2yu5/Rt6d9ZNqrOAACzM95iUeg8Z7PiVEPPeElQHYmCg+strqN83fzhDx bXIvQpjLrq/VMWlHCSjJ0GmAz4yTeaH2la7VXBEkovMhvERq8qPlSa6y4lenkYTM DzAuGEbsjaPX/3HHJRgo2YkEOSqSjDwA7r0ufDpppptHm74R/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3rMjFkIsOTWkD/d2dRQ/XDbm+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTg0YjMxMWEtNGNlNC0z NTE2LTg4NGEtNWJmNTE1NTQ5ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfiOzo7ahIeCo7F8lSDIVyxKVtpYchS2d41UELaZK4ehcfOwyNt rMnga64RrdJ4RtES5hiEAiR/ukk0Bs7Yspn+DyjvbAbr2/dOV5Bfrtaiv/TFNoFB jdAGmidl0/gwFU7QneqG7J3j0suE+pPf+iB0qNgtZRKrml9kPSfAS14jIBeMi1oq 4/vmLZurP2bh4USD0Lkr/0SdGID+GIi73gy9WhNTBMW+MzVAeKXifaKhNfszrCkz BK4rdevFctCbTrnNkS2jy/zNuHXImrnnisr4mdgX8Ko3Q0HDjjH3HHztz7qKZzKy u88DwN7ol8aFueLCPTF3hnOlADUKekKmRMs= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:46 2025 by rpki-client