$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/36cc3ec1-8b30-343d-a243-e7543b208d82.roa File: 36cc3ec1-8b30-343d-a243-e7543b208d82.roa (raw, json) Hash identifier: xzmEz019jqiyf4+YMtLNgqZzWy2cIRwW6CEiJ5jlPlU= Subject key identifier: A3:2A:25:27:49:32:13:3D:3B:76:5E:7F:AC:4B:E6:1C:BD:47:B6:42 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584972E2DD9D8B9C2B7B28A05400 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/36cc3ec1-8b30-343d-a243-e7543b208d82.roa Signing time: Mon 07 Apr 2025 16:33:05 +0000 ROA not before: Mon 07 Apr 2025 16:33:05 +0000 ROA not after: Sun 06 Jul 2025 16:33:05 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:dd:9d:8b:9c:2b:7b:28:a0:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Apr 7 16:33:05 2025 GMT Not After : Jul 6 16:33:05 2025 GMT Subject: CN=93400099-b751-4b81-990e-07b2ac1d75f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:7c:61:e8:15:e1:ff:09:d0:8e:02:a2:61: bd:a8:39:63:08:8f:cb:59:65:4b:8c:a0:69:e3:f2: b4:71:2d:d1:06:59:af:13:82:68:e4:53:7d:aa:54: 32:5a:c8:0c:cb:eb:fa:8a:ed:46:24:fb:b0:51:51: c7:6f:a3:a7:32:a5:b6:9f:3c:21:0d:03:49:bf:4e: 2c:bc:42:5c:25:3c:a5:79:f9:26:7a:65:17:0c:1e: 46:99:f2:a0:d0:6a:ff:45:19:f7:16:ec:80:28:d0: 85:06:74:f5:91:e2:bf:4f:42:ae:bf:03:5f:9d:d8: 03:06:3a:6d:b8:c7:c7:a0:b8:3b:70:22:06:af:61: 29:77:27:35:45:6f:cf:18:ce:e4:ad:28:df:92:25: a3:d7:c5:96:43:d1:d8:bf:33:20:38:cd:fb:f3:0a: 07:d2:c5:71:9f:46:8f:ae:4e:72:f5:31:15:35:b4: 9a:64:c3:1b:a6:af:f6:59:43:cc:6e:d5:05:0e:bc: 95:d4:d8:73:f5:2e:77:e1:2f:93:38:57:1f:95:ce: ec:ab:6e:1a:df:c6:11:1b:58:48:e9:78:1c:be:3b: 3a:19:aa:10:08:e8:98:56:dd:50:6b:05:06:2e:f8: 06:fb:a6:2a:41:7d:cd:20:b9:ca:09:f1:5c:e4:0e: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:25:27:49:32:13:3D:3B:76:5E:7F:AC:4B:E6:1C:BD:47:B6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/36cc3ec1-8b30-343d-a243-e7543b208d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:20:bf:9e:72:b7:49:0d:26:19:39:c6:10:7d:fb:d9:d8:6c: 50:e1:9c:c4:6a:13:45:df:9e:40:f6:17:2d:d8:06:43:44:5f: ab:2c:bc:87:66:2b:e4:ba:66:f0:5b:c5:d9:07:d8:1b:61:ad: e9:fb:19:6e:fd:b5:4f:78:09:22:2d:8f:d9:36:71:50:83:c0: 4e:19:60:0d:05:6a:e1:63:0c:97:c8:97:4e:65:a3:18:09:eb: 6d:f4:19:59:ca:bf:c9:04:17:44:e7:d0:c4:8b:11:ba:13:a7: ae:38:cc:a8:50:36:06:0b:2c:91:1c:61:06:99:c1:7a:e9:0d: 27:5b:83:7b:9e:b3:54:77:a0:dd:66:80:c3:33:2d:e6:21:6e: b5:75:7f:81:30:d4:66:73:4c:f0:89:c6:37:8c:4b:50:48:00: 51:44:c2:77:6e:f6:06:93:4f:2d:78:bf:81:5c:19:6c:b3:ee: c9:a7:0c:a0:94:12:f9:75:63:1a:ca:8a:75:ef:67:66:05:70: 0b:77:4e:fe:f6:23:b9:e6:bf:b0:a6:72:f6:81:1a:93:5c:fc: 2f:5a:50:65:7c:43:21:af:e8:eb:1e:0d:08:ef:65:ae:be:92: 47:21:33:2e:63:41:5e:54:99:2b:34:38:05:51:6d:5c:07:a4: e6:fe:a6:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEly4t2di5wreyigVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDQwNzE2MzMwNVoXDTI1MDcwNjE2MzMwNVowLzEtMCsGA1UEAxMk OTM0MDAwOTktYjc1MS00YjgxLTk5MGUtMDdiMmFjMWQ3NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhJ8YegV4f8J0I4ComG9qDljCI/LWWVLjKBp 4/K0cS3RBlmvE4Jo5FN9qlQyWsgMy+v6iu1GJPuwUVHHb6OnMqW2nzwhDQNJv04s vEJcJTylefkmemUXDB5GmfKg0Gr/RRn3FuyAKNCFBnT1keK/T0KuvwNfndgDBjpt uMfHoLg7cCIGr2Epdyc1RW/PGM7krSjfkiWj18WWQ9HYvzMgOM378woH0sVxn0aP rk5y9TEVNbSaZMMbpq/2WUPMbtUFDryV1Nhz9S534S+TOFcflc7sq24a38YRG1hI 6Xgcvjs6GaoQCOiYVt1QawUGLvgG+6YqQX3NILnKCfFc5A4MRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKMqJSdJMhM9O3Zef6xL5hy9R7ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvMzZjYzNlYzEtOGIzMC0z NDNkLWEyNDMtZTc1NDNiMjA4ZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0IL+ecrdJDSYZOcYQffvZ2GxQ4ZzEahNF355A9hct2AZDRF+rLLyH ZivkumbwW8XZB9gbYa3p+xlu/bVPeAkiLY/ZNnFQg8BOGWANBWrhYwyXyJdOZaMY Cett9BlZyr/JBBdE59DEixG6E6euOMyoUDYGCyyRHGEGmcF66Q0nW4N7nrNUd6Dd ZoDDMy3mIW61dX+BMNRmc0zwicY3jEtQSABRRMJ3bvYGk08teL+BXBlss+7Jpwyg lBL5dWMayop172dmBXALd07+9iO55r+wpnL2gRqTXPwvWlBlfEMhr+jrHg0I72Wu vpJHITMuY0FeVJkrNDgFUW1cB6Tm/qbH -----END CERTIFICATE-----Generated at Mon Apr 21 06:46:26 2025 by rpki-client