$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f56e89b-abca-3eb6-9481-f68e62638239.roa File: 2f56e89b-abca-3eb6-9481-f68e62638239.roa (raw, json) Hash identifier: YHnmWi0LxdXLzIzvpYHlNkmYTWK74sqB4n03vf0Z1xw= Subject key identifier: 4B:00:43:BB:7E:C5:05:FC:C8:A6:49:51:05:49:AB:7C:F5:BE:48:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA490D6CAB6A0B93DB9740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f56e89b-abca-3eb6-9481-f68e62638239.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:1000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:49:0d:6c:ab:6a:0b:93:db:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ff833cfe-64ec-4716-8de3-920abfa77b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:f2:aa:09:e6:7d:ce:c3:de:55:56:83:75: 03:65:56:5c:5c:34:0d:9d:a8:d4:4c:70:25:fe:92: 69:fc:8a:f3:7f:eb:ce:5a:e0:9e:a8:2d:56:82:14: 02:c7:d2:97:40:33:30:30:4c:e4:4c:7d:f7:7c:ad: 37:0d:4f:4a:5d:6f:f9:6c:8b:ef:c9:54:c1:ee:59: 6d:3b:a6:6e:3b:dc:04:1a:00:8e:14:10:d6:b0:fe: 56:5c:b2:26:7d:39:17:8b:4e:a6:ba:e0:7e:62:96: 9f:e8:90:12:24:fe:bf:44:fc:34:ac:fd:51:ed:b6: 0e:a3:34:1a:7a:44:cf:0a:46:53:3e:5a:c2:37:27: 1e:6b:e9:77:0a:68:c8:93:4f:c2:ea:71:ea:15:78: af:0e:b9:c0:a5:3b:38:e5:c6:00:5a:ba:98:e1:c7: 1b:45:6d:7f:60:83:71:84:e5:8a:57:40:29:cd:ac: 33:ee:52:5f:73:54:4b:0e:48:cc:9f:8d:9b:2c:c6: fa:ae:c8:a6:a0:06:f4:31:28:d2:7a:63:6a:35:44: ad:b2:99:32:df:5b:79:2d:a7:a9:da:d2:ce:ac:f2: 0a:6c:f9:a7:c6:11:c7:cf:09:e0:63:c7:8f:06:c9: e8:04:a6:06:16:15:97:45:49:f6:fc:07:ef:d9:fb: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:43:BB:7E:C5:05:FC:C8:A6:49:51:05:49:AB:7C:F5:BE:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f56e89b-abca-3eb6-9481-f68e62638239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0a:e2:99:bf:73:65:2a:01:0a:02:21:ab:c9:73:21:7e:6d: 7c:93:21:d7:7f:13:9f:7c:a3:ea:35:8e:c0:ee:b5:c7:e7:d8: 47:0b:05:e6:08:3c:8e:43:62:54:8d:fb:f6:9e:20:f1:10:f0: db:8c:98:c0:7b:ba:63:b2:1c:2f:8f:7a:7f:fd:38:87:8d:38: 1c:84:c8:85:a6:80:b6:96:77:8b:49:16:14:43:6e:79:a6:45: 5a:d0:9e:bb:9a:b2:d0:59:fd:1d:78:47:ef:01:5e:a8:a1:1c: d2:d1:54:1f:e3:88:dd:af:a9:b4:4f:19:c5:80:a9:97:e8:2e: f8:36:d1:74:bf:66:37:45:53:00:ca:cf:b6:9e:04:68:a4:d3: b4:32:a2:32:49:77:a6:32:64:8a:0a:c4:14:b7:f3:b7:6f:a1: 97:65:d1:83:57:b9:6d:d8:71:c1:ab:40:2d:88:40:05:3c:a7: 98:1a:ec:d4:5d:8a:06:fb:b6:09:6c:06:f0:0e:5b:21:89:1e: ba:10:1c:71:eb:59:bb:7f:61:be:72:0b:23:f4:61:e1:1c:0f: ee:bb:d6:fa:43:20:5d:0f:4c:fb:8f:cc:8c:34:a8:77:6f:26: d7:90:71:1b:2f:f9:fb:2b:54:37:cd:5a:f6:a2:8a:77:ad:28: 85:68:22:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkukkNbKtqC5Pbl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmY4MzNjZmUtNjRlYy00NzE2LThkZTMtOTIwYWJmYTc3YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjvyqgnmfc7D3lVWg3UDZVZcXDQNnajUTHAl /pJp/Irzf+vOWuCeqC1WghQCx9KXQDMwMEzkTH33fK03DU9KXW/5bIvvyVTB7llt O6ZuO9wEGgCOFBDWsP5WXLImfTkXi06muuB+Ypaf6JASJP6/RPw0rP1R7bYOozQa ekTPCkZTPlrCNycea+l3CmjIk0/C6nHqFXivDrnApTs45cYAWrqY4ccbRW1/YINx hOWKV0Apzawz7lJfc1RLDkjMn42bLMb6rsimoAb0MSjSemNqNUStspky31t5Laep 2tLOrPIKbPmnxhHHzwngY8ePBsnoBKYGFhWXRUn2/Afv2fuPQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsAQ7t+xQX8yKZJUQVJq3z1vkiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmY1NmU4OWItYWJjYS0z ZWI2LTk0ODEtZjY4ZTYyNjM4MjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYK4pm/c2UqAQoCIavJcyF+bXyTIdd/E598o+o1jsDutcfn2EcL BeYIPI5DYlSN+/aeIPEQ8NuMmMB7umOyHC+Pen/9OIeNOByEyIWmgLaWd4tJFhRD bnmmRVrQnruastBZ/R14R+8BXqihHNLRVB/jiN2vqbRPGcWAqZfoLvg20XS/ZjdF UwDKz7aeBGik07QyojJJd6YyZIoKxBS387dvoZdl0YNXuW3YccGrQC2IQAU8p5ga 7NRdigb7tglsBvAOWyGJHroQHHHrWbt/Yb5yCyP0YeEcD+671vpDIF0PTPuPzIw0 qHdvJteQcRsv+fsrVDfNWvaiinetKIVoIl4= -----END CERTIFICATE-----Generated at Fri May 9 11:53:47 2025 by rpki-client