$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa File: fbaed3af-fe54-3716-ae66-d49a3b967675.roa (raw, json) Hash identifier: 528XgLw+sBYHvsmUsTw7k7EZrYAcDlzuAhlPpHqAy/k= Subject key identifier: D3:A7:9F:F7:CB:B0:30:21:B4:17:D0:27:88:2F:FD:B5:53:BF:FC:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849107D67A37C75935F51A09000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa Signing time: Mon 03 Mar 2025 10:39:26 +0000 ROA not before: Mon 03 Mar 2025 10:39:26 +0000 ROA not after: Sun 01 Jun 2025 09:39:26 +0000 asID: 30036 IP address blocks: 2604:2d80:2700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:7d:67:a3:7c:75:93:5f:51:a0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 3 10:39:26 2025 GMT Not After : Jun 1 09:39:26 2025 GMT Subject: CN=ce17a348-a788-432a-bb7d-d22b8a8295ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:68:10:7e:79:97:d0:d9:3c:b9:63:3b:b7: ea:45:50:5e:69:5e:5f:35:0a:cf:35:b0:82:38:68: 88:3e:a0:8d:c2:44:f0:79:ed:f8:fe:6b:74:41:26: 7f:19:20:5d:04:ed:b6:ed:a6:f2:c6:1d:a6:db:a2: 02:af:05:38:6c:6c:9e:3e:49:8f:e5:79:7d:62:19: d4:f5:3b:41:a4:8e:c0:d6:4d:c0:76:8a:27:4f:d7: 18:0c:c0:a0:b7:4a:70:79:5e:84:3f:b6:f2:28:1b: 98:56:ec:dc:63:e7:00:9b:67:6e:6c:ed:f5:0e:42: f6:72:ba:48:17:c9:45:9b:d7:6b:4d:45:7d:2f:0d: c3:0b:29:ac:dd:55:68:d5:a1:7b:13:3d:40:53:e8: ad:27:e8:17:d5:ce:cc:ed:2e:15:c9:31:9c:9f:73: da:f2:ac:6f:11:67:32:f0:e9:ef:5f:d2:5f:65:6d: 78:92:7b:8a:e7:55:dc:a2:a5:21:5e:7f:1c:ac:ea: 0c:02:81:26:c9:7e:5b:56:8a:bd:b8:67:47:04:ed: 92:5b:2c:88:3b:28:98:a0:4a:25:67:ca:c7:43:ca: 30:64:ef:d5:1c:77:d3:50:35:fa:c9:72:e9:0c:30: 1b:43:24:38:a1:18:4a:f9:83:78:83:43:a1:d2:a1: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:9F:F7:CB:B0:30:21:B4:17:D0:27:88:2F:FD:B5:53:BF:FC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:89:7c:03:8d:3a:cd:62:5c:32:e2:77:6f:d6:05:7c:5c:c2: f2:c2:08:9e:97:5b:79:f6:d4:cf:91:b9:ef:69:34:52:80:bf: 0f:d1:89:8c:ad:ab:34:6c:08:18:a5:36:76:6c:4b:0c:82:5c: 1d:cb:cc:55:4b:7b:a4:a7:a0:5b:fa:e8:9e:cd:1b:7c:2f:ab: f5:ba:b6:c8:f1:8c:31:2b:1b:f3:f0:86:2f:aa:77:10:03:b5: b7:93:5f:52:ff:13:d4:8e:69:60:4a:f7:a7:15:6b:d4:1f:25: f9:74:cd:1b:82:bf:3d:8e:bf:27:43:22:2d:2b:35:f9:e1:bc: 8f:2f:19:24:2f:f8:b7:70:78:13:27:17:d2:a0:a7:17:d6:32: 35:b5:5e:46:db:ba:d9:c7:09:10:26:b8:38:e0:3b:4f:a0:c3: 38:c0:92:1f:c0:d1:5a:f2:0f:5d:03:5b:ed:f4:35:92:dd:b9: ba:57:f3:c2:c3:5c:99:53:86:ab:6f:e3:63:4e:de:a9:d0:66: c9:da:c4:a3:18:77:c3:ce:50:ad:28:bf:f8:b5:af:9e:27:e9: e6:15:c4:69:b1:2f:26:e0:c0:8c:63:51:91:d7:73:a2:94:79: 81:8f:de:cc:75:f0:bc:12:4f:6f:66:dc:df:1c:35:ee:b2:04: d6:f0:80:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQfWejfHWTX1GgkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMwMzEwMzkyNloXDTI1MDYwMTA5MzkyNlowLzEtMCsGA1UEAxMk Y2UxN2EzNDgtYTc4OC00MzJhLWJiN2QtZDIyYjhhODI5NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEpoEH55l9DZPLljO7fqRVBeaV5fNQrPNbCC OGiIPqCNwkTwee34/mt0QSZ/GSBdBO227abyxh2m26ICrwU4bGyePkmP5Xl9YhnU 9TtBpI7A1k3AdoonT9cYDMCgt0pweV6EP7byKBuYVuzcY+cAm2dubO31DkL2crpI F8lFm9drTUV9Lw3DCyms3VVo1aF7Ez1AU+itJ+gX1c7M7S4VyTGcn3Pa8qxvEWcy 8OnvX9JfZW14knuK51XcoqUhXn8crOoMAoEmyX5bVoq9uGdHBO2SWyyIOyiYoEol Z8rHQ8owZO/VHHfTUDX6yXLpDDAbQyQ4oRhK+YN4g0Oh0qH0RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOnn/fLsDAhtBfQJ4gv/bVTv/wwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmJhZWQzYWYtZmU1NC0z NzE2LWFlNjYtZDQ5YTNiOTY3Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAaJfAONOs1iXDLid2/WBXxcwvLCCJ6XW3n21M+Rue9pNFKAvw/R iYytqzRsCBilNnZsSwyCXB3LzFVLe6SnoFv66J7NG3wvq/W6tsjxjDErG/Pwhi+q dxADtbeTX1L/E9SOaWBK96cVa9QfJfl0zRuCvz2OvydDIi0rNfnhvI8vGSQv+Ldw eBMnF9KgpxfWMjW1XkbbutnHCRAmuDjgO0+gwzjAkh/A0VryD10DW+30NZLdubpX 88LDXJlThqtv42NO3qnQZsnaxKMYd8POUK0ov/i1r54n6eYVxGmxLybgwIxjUZHX c6KUeYGP3sx18LwST29m3N8cNe6yBNbwgDQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:27 2025 by rpki-client