$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628e35bf-7be9-3022-804c-beaed3d5aa6d.roa File: 628e35bf-7be9-3022-804c-beaed3d5aa6d.roa (raw, json) Hash identifier: twGq2QnDhZ6p7iRB9F7uZtIpc1ebJO6eFOKuAMtvdAc= Subject key identifier: CE:0B:37:EB:7A:40:43:2B:FB:8A:DE:25:45:B6:1F:09:88:CC:A0:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF676771DFD8B71FC32F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628e35bf-7be9-3022-804c-beaed3d5aa6d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:b000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:67:67:71:df:d8:b7:1f:c3:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8ecf9211-2d58-42ee-bc3d-7254b330684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:24:ce:f0:53:ff:7f:92:b9:a8:61:9e:92: 51:29:c5:8d:82:ec:32:ab:03:a1:cb:30:61:0f:a7: bb:d2:a9:51:26:6c:7b:97:48:5e:f6:13:01:fb:b7: 53:d5:a2:aa:e9:66:49:f4:69:a5:a4:bf:94:08:94: c2:8f:34:dc:e3:c4:f3:8f:7c:e3:ce:33:6d:32:6b: f6:38:35:77:67:8c:45:c4:c6:ce:0c:2c:6f:de:cf: cd:97:ac:2c:3e:b0:e1:1e:e5:06:26:06:4b:00:d5: 1b:8e:cc:2d:87:1e:47:8f:18:ba:c6:19:03:6b:27: ed:3d:46:60:d0:99:59:11:c7:5d:83:d1:99:eb:c5: 47:d1:b0:8e:08:ed:4d:c4:09:cb:38:99:68:9d:e5: 18:3b:5e:57:dd:ec:37:cb:38:fe:70:90:09:4a:bd: 7b:8d:29:ca:71:ee:ab:8a:2e:d8:75:6e:3b:33:49: af:34:88:48:59:00:af:0c:5d:83:39:ba:4a:93:c4: f0:8e:b6:83:02:b9:c4:45:03:e5:f8:65:fe:c4:90: 9b:9c:23:ab:cf:87:e4:86:98:83:8f:58:16:b7:8d: 5a:1a:a3:b8:9c:cb:71:64:ad:3a:d4:bd:0a:dc:f2: 52:71:a2:cd:53:d9:36:47:70:fc:95:4e:7e:46:42: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0B:37:EB:7A:40:43:2B:FB:8A:DE:25:45:B6:1F:09:88:CC:A0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628e35bf-7be9-3022-804c-beaed3d5aa6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:98:32:db:f4:e0:5e:0a:72:68:16:15:1e:f6:af:ea:aa:2c: cc:98:72:27:2e:a9:87:fa:8c:4e:44:55:82:d1:57:c1:16:65: f0:2f:37:ee:c0:db:88:74:ba:d8:b7:51:7c:56:11:ff:ca:05: 92:e7:81:34:ce:26:4e:04:1e:a3:5c:d4:2f:2b:19:01:e7:63: ba:63:62:ce:46:48:7b:44:fa:5c:bd:23:d9:02:47:cc:18:47: 54:f5:27:a6:b5:3f:49:96:31:3e:18:9c:e7:45:66:cc:32:69: 26:3e:f5:7c:6e:61:b8:f3:be:05:f2:7c:d4:c2:be:9c:8e:78: 3d:55:a5:5e:81:2b:38:d9:f5:d7:80:8f:2d:d9:f2:8b:78:81: a5:aa:7c:83:00:64:da:51:69:5b:e2:d2:9d:73:f7:1e:3a:99: 58:61:c1:4e:65:74:40:32:fd:71:7a:d3:d2:37:c1:a8:c4:fe: 3b:30:8e:14:e7:c5:b4:bc:16:96:89:89:0a:b4:e9:27:d1:e5: ff:1c:0e:16:53:b4:58:a6:00:7a:e6:5b:36:ff:4e:36:ac:7b: ba:f5:f2:0d:cd:89:7c:85:64:5a:48:58:9f:26:f5:26:d0:21: dd:d9:23:a6:ce:3d:48:48:86:00:05:57:41:45:68:32:c8:ef: a6:9b:45:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72dncd/Ytx/DLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGVjZjkyMTEtMmQ1OC00MmVlLWJjM2QtNzI1NGIzMzA2ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4gkzvBT/3+SuahhnpJRKcWNguwyqwOhyzBh D6e70qlRJmx7l0he9hMB+7dT1aKq6WZJ9GmlpL+UCJTCjzTc48Tzj3zjzjNtMmv2 ODV3Z4xFxMbODCxv3s/Nl6wsPrDhHuUGJgZLANUbjswthx5Hjxi6xhkDayftPUZg 0JlZEcddg9GZ68VH0bCOCO1NxAnLOJloneUYO15X3ew3yzj+cJAJSr17jSnKce6r ii7YdW47M0mvNIhIWQCvDF2DObpKk8TwjraDArnERQPl+GX+xJCbnCOrz4fkhpiD j1gWt41aGqO4nMtxZK061L0K3PJScaLNU9k2R3D8lU5+RkKJFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM4LN+t6QEMr+4reJUW2HwmIzKBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI4ZTM1YmYtN2JlOS0z MDIyLTgwNGMtYmVhZWQzZDVhYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAISYMtv04F4KcmgWFR72r+qqLMyYcicuqYf6jE5EVYLRV8EWZfAv N+7A24h0uti3UXxWEf/KBZLngTTOJk4EHqNc1C8rGQHnY7pjYs5GSHtE+ly9I9kC R8wYR1T1J6a1P0mWMT4YnOdFZswyaSY+9XxuYbjzvgXyfNTCvpyOeD1VpV6BKzjZ 9deAjy3Z8ot4gaWqfIMAZNpRaVvi0p1z9x46mVhhwU5ldEAy/XF609I3wajE/jsw jhTnxbS8FpaJiQq06SfR5f8cDhZTtFimAHrmWzb/Tjase7r18g3NiXyFZFpIWJ8m 9SbQId3ZI6bOPUhIhgAFV0FFaDLI76abRXk= -----END CERTIFICATE-----Generated at Fri May 9 08:40:28 2025 by rpki-client