$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json) Hash identifier: YgrUB/JZP5/dv56zcXiDv/w/l4SqAlJ6aAxmoMqUsEE= Subject key identifier: 4B:6B:80:46:5F:D6:C0:7E:62:CF:69:CF:D2:FD:97:4E:FD:2B:1E:56 Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Certificate serial: 010D0C9F432858494B641B3647FF80E8172FE480 Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 399494 IP address blocks: 2604:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1b:36:47:ff:80:e8:17:2f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d990b2bf-40c2-460f-bf03-6aa2dd6321b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:45:cd:a7:0a:1d:85:a3:81:c6:c4:74:c0: 23:e5:5e:d2:cf:00:29:7b:5b:4e:19:5b:1b:cd:51: c0:91:d1:08:0d:40:7d:4f:06:27:e5:23:63:a3:fb: 86:a6:2a:8f:b7:91:92:ba:3a:06:dd:6f:aa:06:60: c9:fa:fd:d4:89:fb:95:9b:e5:d3:ed:91:59:37:63: 24:65:9c:a6:62:5f:b1:4a:7e:02:70:b2:7a:aa:1e: ca:6e:bf:f3:11:96:5e:52:60:08:06:31:2b:99:5d: 19:25:a4:1f:1d:0e:51:9a:9a:75:a9:9b:a3:d8:67: 23:f1:06:c0:cf:ae:5d:38:c9:ea:23:dd:d0:0b:90: 1e:50:2e:b9:59:a0:fd:87:21:ec:16:61:14:ba:0c: b2:20:e7:d8:f1:31:02:2d:e9:67:42:1e:62:b6:ce: c1:49:dc:9f:c8:0a:0a:38:03:68:f1:78:37:f2:9c: dd:e0:a4:3b:62:37:52:7b:eb:fe:9e:d6:56:7f:fb: 5d:ef:00:c0:65:ff:c2:a2:b2:bf:5a:8d:2f:eb:0f: c5:c2:dc:0f:82:9f:35:49:98:d6:cf:09:9f:f8:fd: a3:4a:f9:9a:10:c4:da:c7:f1:d1:ea:68:c6:3f:e8: b9:16:37:0e:14:79:de:1f:1f:8e:09:1e:92:e6:69: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6B:80:46:5F:D6:C0:7E:62:CF:69:CF:D2:FD:97:4E:FD:2B:1E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl X509v3 Authority Key Identifier: keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer sbgp-ipAddrBlock: critical IPv6: 2604:3b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f6:0c:33:04:1c:f5:fd:f5:71:4d:76:a7:40:76:da:c9:1e: f3:8c:32:6d:72:bd:c3:ce:bb:dc:9a:2c:12:68:10:54:a4:01: 4c:63:14:d0:30:9b:bc:b6:ba:f0:b8:04:85:eb:2d:0a:52:2b: 3d:24:24:fc:b1:c9:3f:de:6c:c3:3c:67:41:58:b4:1c:eb:d1: 32:ba:bd:7f:eb:8a:72:11:d6:ea:82:ac:7b:db:65:66:bb:eb: 67:68:ca:d2:70:9d:33:b8:27:83:1a:28:5d:ba:05:6d:c6:94: 9b:47:32:e2:54:13:0e:f9:a1:37:86:c8:9c:e9:45:ba:56:74: 93:bd:0d:48:53:d8:54:2a:41:56:03:ab:65:85:56:c0:a7:c4: 55:4d:f6:f7:d9:88:e6:b7:f2:79:fd:e3:77:43:84:62:49:43: 5d:68:99:4c:37:b3:45:13:6f:47:5f:a3:8b:01:f8:f5:d5:b0: c4:5b:8a:92:d3:37:ab:ce:0d:93:c8:ac:bb:60:a3:8b:91:ea: ea:6a:74:42:f7:f4:33:c7:91:1f:c8:cc:dc:a2:9f:5b:36:3e: 39:6f:82:17:10:1b:08:97:53:5a:0f:53:1d:79:44:31:52:48: 92:6a:8f:75:4c:bb:01:57:bc:63:2b:f6:b3:a5:53:58:93:ea: 4e:be:e5:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZBs2R/+A6Bcv5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYjM4OTctZmQxNC00OGVlLWFkODQtODEyYzQwOGNm NDZlMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDk5MGIyYmYtNDBjMi00NjBmLWJmMDMtNmFhMmRkNjMyMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg01FzacKHYWjgcbEdMAj5V7SzwApe1tOGVsb zVHAkdEIDUB9TwYn5SNjo/uGpiqPt5GSujoG3W+qBmDJ+v3UifuVm+XT7ZFZN2Mk ZZymYl+xSn4CcLJ6qh7Kbr/zEZZeUmAIBjErmV0ZJaQfHQ5Rmpp1qZuj2Gcj8QbA z65dOMnqI93QC5AeUC65WaD9hyHsFmEUugyyIOfY8TECLelnQh5its7BSdyfyAoK OANo8Xg38pzd4KQ7YjdSe+v+ntZWf/td7wDAZf/CorK/Wo0v6w/FwtwPgp81SZjW zwmf+P2jSvmaEMTax/HR6mjGP+i5FjcOFHneHx+OCR6S5mlPeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEtrgEZf1sB+Ys9pz9L9l079Kx5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Zi Mzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJjNDA4Y2Y0NmUvNDEwYjc0NjctOGRjMS0z NDNkLWJlNjItNmVjYTU5NTQxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNmYjM4OTctZmQxNC00OGVlLWFk ODQtODEyYzQwOGNmNDZlL2MzZmIzODk3LWZkMTQtNDhlZS1hZDg0LTgxMmM0MDhj ZjQ2ZS5jcmwwHwYDVR0jBBgwFoAUgZwK5yjcYjVE9BCFuNcSWRpX3fYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2ZiMzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJj NDA4Y2Y0NmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBW9gwzBBz1/fVxTXanQHbayR7zjDJtcr3DzrvcmiwSaBBUpAFMYxTQ MJu8trrwuASF6y0KUis9JCT8sck/3mzDPGdBWLQc69Eyur1/64pyEdbqgqx722Vm u+tnaMrScJ0zuCeDGihdugVtxpSbRzLiVBMO+aE3hsic6UW6VnSTvQ1IU9hUKkFW A6tlhVbAp8RVTfb32Yjmt/J5/eN3Q4RiSUNdaJlMN7NFE29HX6OLAfj11bDEW4qS 0zerzg2TyKy7YKOLkerqanRC9/Qzx5EfyMzcop9bNj45b4IXEBsIl1NaD1MdeUQx UkiSao91TLsBV7xjK/azpVNYk+pOvuW9 -----END CERTIFICATE-----Generated at Wed Apr 9 23:21:54 2025 by rpki-client