$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa File: e8cd78cc-e27a-36f6-8961-0d2f56670694.roa (raw, json) Hash identifier: 5KX/oPJz9Q8an7KvUsLZa/qDxcJWCIr1Fis0KUXMnfk= Subject key identifier: 66:95:62:9E:9F:23:09:AC:65:60:85:8C:01:29:62:B1:6B:47:33:C2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55FFBC7D479374D3B3EB2C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa Signing time: Tue 04 Feb 2025 12:54:32 +0000 ROA not before: Tue 04 Feb 2025 12:54:32 +0000 ROA not after: Mon 05 May 2025 11:54:32 +0000 asID: 30036 IP address blocks: 2604:2d80:1c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:fb:c7:d4:79:37:4d:3b:3e:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:54:32 2025 GMT Not After : May 5 11:54:32 2025 GMT Subject: CN=91269e2d-59a6-451a-bbea-badabc115e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:95:12:c7:88:65:1f:c5:17:9c:90:b1:6e: f2:7e:c2:30:22:d5:e5:0b:09:67:d1:76:66:06:41: 1f:00:7a:2a:3e:48:5e:29:b9:d9:d2:2f:43:a7:ce: 72:27:5e:ec:cc:f3:66:a8:6c:03:1f:e1:70:0b:8b: 3e:28:6a:f9:5a:fc:17:98:2c:c5:94:ee:f6:68:f9: 1c:1e:92:2f:75:32:0b:28:19:50:02:6d:c0:ed:36: 65:f0:d6:9a:ed:05:04:1f:a5:36:ac:dd:36:93:ce: 80:6b:70:57:de:3f:95:7a:77:70:ff:0f:0d:e9:99: 66:65:df:fe:7a:6a:2a:67:f5:85:31:77:ec:56:f0: 6b:56:11:89:26:cf:0e:ac:44:65:ee:ee:86:2d:eb: a0:67:09:9e:55:7c:f1:29:01:fb:16:87:d7:d8:f9: cd:d7:6a:6d:cc:cb:b5:40:04:c0:e0:a8:7d:05:71: 32:ee:3f:04:19:93:ee:a7:45:e2:99:f2:53:79:6b: bb:3f:ba:e8:a1:df:05:c5:fc:69:60:58:99:08:c7: d9:c4:84:41:b7:7b:a2:b6:86:01:0b:cd:9e:29:52: d3:21:d1:ba:65:29:48:b8:8f:4a:15:3f:29:df:00: 80:a3:84:29:12:86:d8:bf:09:46:a5:93:da:5b:01: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:62:9E:9F:23:09:AC:65:60:85:8C:01:29:62:B1:6B:47:33:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:81:92:1c:81:0c:19:ea:32:53:b5:3a:d5:c2:58:e2:67:50: f7:02:66:92:35:10:82:1f:79:fd:0e:3a:14:ff:24:f7:7f:e5: 99:8e:67:70:c4:93:f6:0a:a3:ac:0f:41:48:06:25:4f:87:3f: fb:ad:06:a6:a5:fa:96:70:41:e0:9f:f1:4b:ca:a1:1b:20:a6: bf:60:f6:9c:d9:48:b7:4b:ae:24:b7:04:f3:e9:92:d1:9a:3c: 11:b5:b0:72:3e:49:aa:0c:f2:7c:18:1c:55:37:d7:c2:af:73: 6d:3c:a3:28:9f:ad:41:82:af:6c:b3:2e:4a:ac:76:7b:41:5f: e1:9d:6b:e1:32:2f:cc:83:61:75:f5:0c:6c:99:c9:19:80:99: 10:ce:62:f5:ea:f5:83:07:79:c4:15:a8:e1:c8:e6:0e:e8:53: e2:22:0c:0e:ee:cb:11:4a:d2:99:cf:c6:25:ab:75:04:a8:9e: d2:fb:19:d4:4d:60:c6:01:0d:fd:5c:22:9d:11:3c:d5:57:a1: 07:ef:72:6f:3a:18:75:7a:40:1d:11:3f:ea:c5:58:91:7e:17: e7:bf:5b:df:df:cf:36:c7:32:75:e8:9c:c3:43:e8:57:c9:b7: d2:fa:f9:9f:3a:65:aa:96:39:aa:1a:64:d3:75:9f:28:d1:25: d3:15:ff:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFX/vH1Hk3TTs+ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTQzMloXDTI1MDUwNTExNTQzMlowLzEtMCsGA1UEAxMk OTEyNjllMmQtNTlhNi00NTFhLWJiZWEtYmFkYWJjMTE1ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeKVEseIZR/FF5yQsW7yfsIwItXlCwln0XZm BkEfAHoqPkheKbnZ0i9Dp85yJ17szPNmqGwDH+FwC4s+KGr5WvwXmCzFlO72aPkc HpIvdTILKBlQAm3A7TZl8Naa7QUEH6U2rN02k86Aa3BX3j+Vendw/w8N6ZlmZd/+ emoqZ/WFMXfsVvBrVhGJJs8OrERl7u6GLeugZwmeVXzxKQH7FofX2PnN12ptzMu1 QATA4Kh9BXEy7j8EGZPup0XimfJTeWu7P7rood8FxfxpYFiZCMfZxIRBt3uitoYB C82eKVLTIdG6ZSlIuI9KFT8p3wCAo4QpEobYvwlGpZPaWwG5PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGaVYp6fIwmsZWCFjAEpYrFrRzPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZThjZDc4Y2MtZTI3YS0z NmY2LTg5NjEtMGQyZjU2NjcwNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgByA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWBkhyBDBnqMlO1OtXCWOJnUPcCZpI1EIIfef0OOhT/JPd/5ZmO Z3DEk/YKo6wPQUgGJU+HP/utBqal+pZwQeCf8UvKoRsgpr9g9pzZSLdLriS3BPPp ktGaPBG1sHI+SaoM8nwYHFU318Kvc208oyifrUGCr2yzLkqsdntBX+Gda+EyL8yD YXX1DGyZyRmAmRDOYvXq9YMHecQVqOHI5g7oU+IiDA7uyxFK0pnPxiWrdQSontL7 GdRNYMYBDf1cIp0RPNVXoQfvcm86GHV6QB0RP+rFWJF+F+e/W9/fzzbHMnXonMND 6FfJt9L6+Z86ZaqWOaoaZNN1nyjRJdMV/1Y= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:19 2025 by rpki-client