$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa File: ffa67dac-9013-3d2d-a4f6-1d307d212778.roa (raw, json) Hash identifier: 1yCyoFyA+b1YLDsUX0ld39ZbDkRTeXjJr6w6yvsgGpY= Subject key identifier: 58:38:C5:A9:D4:16:6C:87:8C:56:1F:E5:97:F2:E5:18:B5:7B:5A:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55921135FC75524AE975A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa Signing time: Tue 04 Feb 2025 12:40:43 +0000 ROA not before: Tue 04 Feb 2025 12:40:43 +0000 ROA not after: Mon 05 May 2025 11:40:43 +0000 asID: 30036 IP address blocks: 2604:2d80:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:59:21:13:5f:c7:55:24:ae:97:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:40:43 2025 GMT Not After : May 5 11:40:43 2025 GMT Subject: CN=3cabc5df-7fe1-446d-8ba3-71bde0ee6031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:49:05:be:ad:41:e9:1c:5a:3c:db:00:50: f9:d7:89:52:b6:cd:b8:05:b4:96:57:e9:9e:f9:08: 62:99:b2:27:a1:77:93:bb:8d:a8:47:bc:5c:65:76: 6b:9d:67:72:6e:e2:7f:35:1a:60:d2:35:82:ec:37: 9a:1d:1e:1a:74:ad:91:bc:52:1a:8a:ce:2a:b0:2d: 5c:00:f6:f7:71:c7:58:f2:5a:14:09:44:a1:30:a1: 87:58:a7:8f:80:02:42:73:22:65:05:69:60:86:8e: 92:09:06:19:2e:34:38:58:b3:e5:9b:f2:24:e8:ec: 1e:45:85:30:20:ec:aa:51:70:61:87:a0:82:be:83: cd:57:03:79:b4:05:7b:d9:4f:be:12:df:99:e2:aa: d0:94:18:41:3e:d4:13:97:d0:77:1c:5a:35:1b:a2: f7:61:2b:8a:72:16:de:4f:d5:87:f6:dc:65:09:0c: 74:ca:d2:f0:2d:5f:a7:5c:b5:06:36:68:3e:24:99: 44:30:f8:23:b1:36:77:c4:b5:5c:4c:57:e8:8a:96: 65:0d:8c:3b:96:99:2b:4f:2c:9a:59:27:a4:82:e6: 40:51:0b:70:ec:b9:0f:54:53:1f:e9:b7:26:90:e3: 9f:07:e9:4c:50:dc:ac:ea:ee:e7:09:76:57:26:f3: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:C5:A9:D4:16:6C:87:8C:56:1F:E5:97:F2:E5:18:B5:7B:5A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8d:ef:49:c8:bf:7e:7f:19:e9:17:04:cd:85:03:2e:07:1d: 21:6e:37:83:cc:90:59:37:8f:1f:76:e1:21:8a:2e:9b:53:9f: 1c:2a:ab:b5:57:5a:45:6e:2c:ba:9e:98:5d:cf:a3:7b:d2:6d: b9:70:99:0c:58:2d:07:0c:a1:cc:a5:25:3f:f4:20:ef:0a:7e: b8:12:38:4b:79:a8:56:65:e0:a1:3c:2c:19:4e:3a:a6:60:6d: 28:ce:10:96:d3:d3:f2:36:a2:a0:f0:95:bf:6f:7a:db:0a:74: a8:28:f8:78:d0:46:72:6c:90:b7:21:bd:0a:eb:24:c0:2e:aa: 2f:d8:99:9d:48:7d:2c:b3:6d:f0:0d:ce:83:3a:11:47:9d:c0: 17:1a:bc:73:ee:d8:d4:82:7a:3e:78:fa:7d:4e:4c:75:5d:13: 31:79:75:00:f3:02:12:81:86:ee:8b:bd:49:ca:f4:58:57:9e: 9c:da:22:1a:db:96:ee:f7:28:b3:48:3e:1b:80:32:b5:ee:60: 0a:64:9b:00:07:1f:7c:93:86:66:ff:1f:1e:5d:1a:a9:df:82: 71:c2:20:15:18:7e:26:1c:69:e5:e7:63:44:ee:b2:c7:70:aa: ba:80:ca:d7:17:92:0c:7b:a2:d1:26:f5:ff:77:ef:1b:d9:ee: c9:60:8d:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFWSETX8dVJK6XWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNDA0M1oXDTI1MDUwNTExNDA0M1owLzEtMCsGA1UEAxMk M2NhYmM1ZGYtN2ZlMS00NDZkLThiYTMtNzFiZGUwZWU2MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwRJBb6tQekcWjzbAFD514lSts24BbSWV+me +QhimbInoXeTu42oR7xcZXZrnWdybuJ/NRpg0jWC7DeaHR4adK2RvFIais4qsC1c APb3ccdY8loUCUShMKGHWKePgAJCcyJlBWlgho6SCQYZLjQ4WLPlm/Ik6OweRYUw IOyqUXBhh6CCvoPNVwN5tAV72U++Et+Z4qrQlBhBPtQTl9B3HFo1G6L3YSuKchbe T9WH9txlCQx0ytLwLV+nXLUGNmg+JJlEMPgjsTZ3xLVcTFfoipZlDYw7lpkrTyya WSekguZAUQtw7LkPVFMf6bcmkOOfB+lMUNys6u7nCXZXJvPiPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFg4xanUFmyHjFYf5Zfy5Ri1e1qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZhNjdkYWMtOTAxMy0z ZDJkLWE0ZjYtMWQzMDdkMjEyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHiN70nIv35/GekXBM2FAy4HHSFuN4PMkFk3jx924SGKLptTnxwq q7VXWkVuLLqemF3Po3vSbblwmQxYLQcMocylJT/0IO8KfrgSOEt5qFZl4KE8LBlO OqZgbSjOEJbT0/I2oqDwlb9vetsKdKgo+HjQRnJskLchvQrrJMAuqi/YmZ1IfSyz bfANzoM6EUedwBcavHPu2NSCej54+n1OTHVdEzF5dQDzAhKBhu6LvUnK9FhXnpza Ihrblu73KLNIPhuAMrXuYApkmwAHH3yThmb/Hx5dGqnfgnHCIBUYfiYcaeXnY0Tu ssdwqrqAytcXkgx7otEm9f937xvZ7slgjfY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:06 2025 by rpki-client