$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa File: fece7d57-ff56-3db1-9e3b-3c77477b1772.roa (raw, json) Hash identifier: vS+gNKtP8BIstmkrQ9qD3F8L1xDXXBQV7NRTbSVAnmw= Subject key identifier: 8D:C2:0E:47:73:EF:4A:72:25:E5:3C:F0:10:4B:03:1C:04:D2:7C:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B737E3F2849A4E4A9C789B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa Signing time: Thu 30 Jan 2025 11:12:26 +0000 ROA not before: Thu 30 Jan 2025 11:12:26 +0000 ROA not after: Wed 30 Apr 2025 10:12:26 +0000 asID: 30036 IP address blocks: 2604:2d80:4980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:e3:f2:84:9a:4e:4a:9c:78:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:12:26 2025 GMT Not After : Apr 30 10:12:26 2025 GMT Subject: CN=2bc57db7-2bbb-4f65-98b9-fbdf94b66741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:bd:dd:6f:15:4c:02:6c:aa:10:37:36:e5: f6:50:5c:39:5e:fd:cf:cf:bc:4f:62:2c:43:8b:5e: cb:06:b8:86:69:87:57:b1:e3:dd:b0:1b:ad:7c:64: a8:29:a7:b9:e6:72:2c:ab:d7:a4:5f:92:d5:55:21: e5:e4:6a:76:9c:13:35:36:ff:2f:be:d0:90:77:aa: 5d:2c:b7:9e:1a:e4:76:b1:6b:d0:f2:b1:d0:23:23: 10:19:62:a4:1d:ef:17:59:a5:b2:16:29:49:e9:fd: 02:31:47:69:f5:52:c0:58:77:51:16:73:35:54:97: c3:52:50:34:87:a1:84:73:ee:ff:03:cd:a4:1c:52: 90:66:e6:ff:9f:34:d3:9c:6e:cd:de:21:b8:e6:41: 3e:2b:0a:e2:5a:2d:df:83:38:ed:9d:ea:2a:16:af: 4f:2a:f7:87:6c:3e:5c:61:ea:16:08:eb:62:07:38: 32:ba:dd:d9:b7:2a:7c:9e:0d:93:14:80:33:30:5f: f2:3f:63:d5:86:58:55:f1:e5:db:47:c8:87:6d:95: 4b:bb:b4:5e:4d:35:14:03:f2:fd:fe:a4:63:a1:e6: e0:f0:8f:76:8f:a1:01:9d:65:88:c0:67:ae:9a:19: 31:d1:29:3f:fb:84:71:b4:47:c2:ee:c5:92:c4:4a: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C2:0E:47:73:EF:4A:72:25:E5:3C:F0:10:4B:03:1C:04:D2:7C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fece7d57-ff56-3db1-9e3b-3c77477b1772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ca:53:76:79:1e:f2:78:f8:d7:02:5f:38:d7:0b:0a:c4:d5: fa:31:2f:a5:de:e9:ac:b1:fc:b8:1a:7e:51:21:14:65:7d:fd: 29:b3:47:8f:38:f3:1b:81:6b:ef:68:fa:26:f1:9b:45:73:0c: 9f:14:cd:32:c7:a9:14:d1:7b:ab:7f:bc:f1:30:57:f5:4a:4a: a9:f8:2f:42:29:e4:23:19:f4:1f:b2:af:c8:73:a7:61:58:e2: 48:1c:ce:ec:8f:ff:4f:b4:8f:a3:4e:de:39:3a:ea:fa:18:a5: 20:a2:8d:ae:ab:f9:e7:b9:49:03:ad:4f:2a:b9:d0:0f:8a:b4: 55:e7:87:e8:b7:2a:b6:f4:4d:fa:0c:ce:ea:a3:af:3f:81:87: 31:8f:f9:97:a8:dc:83:75:99:d0:50:4c:1a:f4:c8:94:e3:70: e6:01:01:e8:58:ab:31:61:19:1c:a4:06:1a:ef:77:ab:cc:d9: f2:94:03:25:4e:06:df:45:26:34:e2:a6:0e:91:64:51:75:81: 10:ea:8d:8b:5a:ca:8b:df:3e:6d:7d:dd:30:3d:99:85:cc:75: 83:03:ac:67:20:a3:2e:a9:16:a1:f6:d3:19:b6:c5:d0:b9:06: 9c:bd:bc:16:0b:f3:88:fe:04:3d:30:04:48:9f:78:86:dc:d0: 33:de:4e:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3N+PyhJpOSpx4mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTIyNloXDTI1MDQzMDEwMTIyNlowLzEtMCsGA1UEAxMk MmJjNTdkYjctMmJiYi00ZjY1LTk4YjktZmJkZjk0YjY2NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3293W8VTAJsqhA3NuX2UFw5Xv3Pz7xPYixD i17LBriGaYdXsePdsButfGSoKae55nIsq9ekX5LVVSHl5Gp2nBM1Nv8vvtCQd6pd LLeeGuR2sWvQ8rHQIyMQGWKkHe8XWaWyFilJ6f0CMUdp9VLAWHdRFnM1VJfDUlA0 h6GEc+7/A82kHFKQZub/nzTTnG7N3iG45kE+KwriWi3fgzjtneoqFq9PKveHbD5c YeoWCOtiBzgyut3Ztyp8ng2TFIAzMF/yP2PVhlhV8eXbR8iHbZVLu7ReTTUUA/L9 /qRjoebg8I92j6EBnWWIwGeumhkx0Sk/+4RxtEfC7sWSxEpn3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3CDkdz70pyJeU88BBLAxwE0ny0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmVjZTdkNTctZmY1Ni0z ZGIxLTllM2ItM2M3NzQ3N2IxNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPKU3Z5HvJ4+NcCXzjXCwrE1foxL6Xe6ayx/LgaflEhFGV9/Smz R4848xuBa+9o+ibxm0VzDJ8UzTLHqRTRe6t/vPEwV/VKSqn4L0Ip5CMZ9B+yr8hz p2FY4kgczuyP/0+0j6NO3jk66voYpSCija6r+ee5SQOtTyq50A+KtFXnh+i3Krb0 TfoMzuqjrz+BhzGP+Zeo3IN1mdBQTBr0yJTjcOYBAehYqzFhGRykBhrvd6vM2fKU AyVOBt9FJjTipg6RZFF1gRDqjYtayovfPm193TA9mYXMdYMDrGcgoy6pFqH20xm2 xdC5Bpy9vBYL84j+BD0wBEifeIbc0DPeTq0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:47 2025 by rpki-client