$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa File: f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa (raw, json) Hash identifier: 3MZgJuDWbY6aqLm2KANMAWY8pw5cw6auzvJ7uzhTE7M= Subject key identifier: BC:D9:AF:17:E4:2E:0B:35:61:84:EE:8B:EE:AB:C6:5B:15:96:B7:8F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B737E125D5A303E052BE5540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa Signing time: Thu 30 Jan 2025 11:12:24 +0000 ROA not before: Thu 30 Jan 2025 11:12:24 +0000 ROA not after: Wed 30 Apr 2025 10:12:24 +0000 asID: 30036 IP address blocks: 2604:2d80:4900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:e1:25:d5:a3:03:e0:52:be:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:12:24 2025 GMT Not After : Apr 30 10:12:24 2025 GMT Subject: CN=353d4561-a2e2-41c6-a1b4-230f4528de92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:8b:ca:b6:99:50:b0:40:6f:0d:57:3f:67: 29:f1:eb:bc:2b:af:92:bc:dd:05:f9:33:ca:6b:df: 25:66:fd:6c:42:6b:20:c0:66:24:f7:12:50:4c:87: 5e:ea:fa:70:dc:3e:d1:61:2d:65:27:cc:8b:2e:25: e7:3d:64:e6:17:95:80:3f:b8:42:39:3c:a3:ae:94: 26:e9:e7:18:b4:60:7d:74:02:49:42:96:98:ea:2a: cd:e4:2c:53:2b:b0:c1:d8:15:9c:51:31:56:39:5d: 00:c7:21:cc:52:e9:3e:7e:b4:ef:62:14:f6:3a:00: cb:83:87:b3:e5:b6:0c:ee:4c:b4:0e:a0:12:0f:e2: bf:08:ad:cb:ad:8d:77:24:49:a3:8e:bb:77:c7:e4: f8:e2:d5:97:3c:b6:6b:5c:b6:43:10:c1:c2:74:9f: 21:54:be:e5:bb:2f:d5:57:3a:ce:7c:85:e3:eb:83: 4a:8d:cf:1f:27:04:1c:74:03:56:ad:7c:ee:20:11: 3c:30:b2:30:e4:64:be:1f:f6:30:d0:97:35:86:aa: b7:92:10:a3:53:52:4e:d9:c9:0a:ab:94:5c:96:61: db:ee:ef:a8:33:d0:09:81:1b:f2:fd:b6:b7:c7:28: d9:aa:33:f1:94:8a:a4:22:89:4a:91:31:ca:fc:51: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D9:AF:17:E4:2E:0B:35:61:84:EE:8B:EE:AB:C6:5B:15:96:B7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a0:fd:cd:26:b6:9d:b5:a2:e1:5b:e1:8d:8b:3b:13:a1:03: 10:61:0d:1e:ce:34:4e:16:1d:58:73:27:cb:84:b0:5f:c6:74: 31:1c:b7:62:1c:46:ab:29:9f:a9:b4:3c:b6:cc:ce:19:a4:7a: 26:c6:54:e2:5b:46:73:da:0f:4e:17:8f:7e:e8:c3:cb:e1:8a: 73:ed:d8:5d:74:65:fd:6a:20:3f:c1:15:e2:c7:bc:7e:9e:8f: 03:34:d4:45:4d:7c:52:c9:e3:c9:46:11:de:60:a6:11:4a:7f: 6d:7a:6b:a3:d0:00:95:a4:b4:52:0d:56:ca:e9:29:30:33:b2: 0d:40:12:8d:c1:d6:b7:2a:dc:42:7f:12:5f:4a:ab:4a:ac:6d: 11:b6:a9:9a:d3:b3:3e:c4:cb:60:ef:44:97:84:50:77:5e:7e: ba:59:56:52:3d:29:27:a0:dc:d9:03:79:1d:17:30:73:81:81: 6e:ab:c7:97:96:74:de:af:0f:8b:f1:c5:28:27:c1:be:b3:e8: 21:fa:43:4b:d5:0e:16:25:b9:a5:56:04:52:a4:ba:ef:a4:fa: 5a:81:d8:4c:27:5e:e3:0e:0d:92:93:03:85:07:99:5d:b8:66: 4c:06:a4:3f:17:41:42:cc:f7:4a:99:04:ef:cf:fa:c6:d0:b5: 86:69:f5:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3N+El1aMD4FK+VUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTIyNFoXDTI1MDQzMDEwMTIyNFowLzEtMCsGA1UEAxMk MzUzZDQ1NjEtYTJlMi00MWM2LWExYjQtMjMwZjQ1MjhkZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YyLyraZULBAbw1XP2cp8eu8K6+SvN0F+TPK a98lZv1sQmsgwGYk9xJQTIde6vpw3D7RYS1lJ8yLLiXnPWTmF5WAP7hCOTyjrpQm 6ecYtGB9dAJJQpaY6irN5CxTK7DB2BWcUTFWOV0AxyHMUuk+frTvYhT2OgDLg4ez 5bYM7ky0DqASD+K/CK3LrY13JEmjjrt3x+T44tWXPLZrXLZDEMHCdJ8hVL7luy/V VzrOfIXj64NKjc8fJwQcdANWrXzuIBE8MLIw5GS+H/Yw0Jc1hqq3khCjU1JO2ckK q5RclmHb7u+oM9AJgRvy/ba3xyjZqjPxlIqkIolKkTHK/FELXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLzZrxfkLgs1YYTui+6rxlsVlrePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjlkNjMzNDAtOWFkNC0z MGMwLTljZjAtNmYwNTNjMzljZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeg/c0mtp21ouFb4Y2LOxOhAxBhDR7ONE4WHVhzJ8uEsF/GdDEc t2IcRqspn6m0PLbMzhmkeibGVOJbRnPaD04Xj37ow8vhinPt2F10Zf1qID/BFeLH vH6ejwM01EVNfFLJ48lGEd5gphFKf216a6PQAJWktFINVsrpKTAzsg1AEo3B1rcq 3EJ/El9Kq0qsbRG2qZrTsz7Ey2DvRJeEUHdefrpZVlI9KSeg3NkDeR0XMHOBgW6r x5eWdN6vD4vxxSgnwb6z6CH6Q0vVDhYluaVWBFKkuu+k+lqB2EwnXuMODZKTA4UH mV24ZkwGpD8XQULM90qZBO/P+sbQtYZp9Sg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:37 2025 by rpki-client