$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa File: 7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa (raw, json) Hash identifier: aKkjUboCpzZMWp3mO910KFl45bM69j+jKLpthai1qFA= Subject key identifier: AA:89:EE:A8:57:F0:BD:E6:95:91:0B:1D:F4:17:FA:D3:BF:3D:15:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849955F120B1A6F022196B26F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 2604:2d80:3d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:12:0b:1a:6f:02:21:96:b2:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=337c88d2-9e3c-4300-af1d-01a90376a0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:16:91:8b:c9:5f:3f:20:36:9d:a6:e3:89: f3:1b:d3:44:26:ce:04:e3:49:7d:a8:41:2b:96:bb: 67:ed:26:de:8e:36:77:86:54:74:65:12:03:03:fe: f5:84:66:4e:ec:44:76:b8:e5:bf:c4:f8:1c:be:ea: 9c:f0:67:39:a8:fa:87:ab:14:be:38:c4:0a:a1:c4: f3:21:be:c3:ef:fa:88:55:8d:93:27:47:d3:5f:11: a9:c6:0a:95:a2:1d:f1:f4:73:0a:7f:3a:ad:16:61: 02:27:a9:cd:7f:ee:f4:09:5c:09:6a:8d:34:cc:f5: 88:fc:f8:64:39:cb:a0:98:30:e1:7e:56:a7:32:1e: b7:75:0f:56:de:da:c7:62:5c:36:e6:3d:35:25:16: a1:f5:76:1b:be:e5:e9:73:f8:30:7a:11:a6:e2:cd: 60:ec:6e:32:8e:9c:59:ff:13:c0:67:63:a6:97:2a: a9:d4:9f:c0:fc:5d:01:0e:0d:67:71:f4:3f:a6:a4: 6c:ec:a3:1c:da:22:05:43:23:85:2e:6b:6d:13:fc: a6:25:40:0e:66:72:1b:20:03:47:eb:07:79:73:f2: 96:fc:86:83:3a:d8:ff:0a:dc:90:d8:2f:5c:a9:d1: 3e:7a:94:33:5a:e4:52:e1:ae:32:ed:b9:72:7e:0c: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:EE:A8:57:F0:BD:E6:95:91:0B:1D:F4:17:FA:D3:BF:3D:15:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:37:2a:18:c0:2a:93:47:dd:4e:09:fa:14:b0:ca:96:4a:bd: b9:14:d1:87:67:43:13:3f:9d:52:8c:3c:30:c8:17:a6:4e:24: 75:00:6d:05:9c:87:04:78:ad:fd:98:e8:d3:ad:86:83:35:71: 34:2f:21:77:31:29:85:14:eb:8b:9b:91:47:47:c5:26:93:0a: db:27:c3:93:c9:93:45:8c:aa:0f:8b:52:29:03:a1:3d:d4:b2: 47:6d:00:b9:b9:35:84:4d:ca:34:c2:0d:20:33:f4:ad:06:35: a3:df:b7:4f:77:fb:45:25:67:73:1c:7e:ca:8c:2d:10:af:48: 49:55:12:d0:89:32:c3:7e:16:5d:77:f8:ba:ef:ef:05:d0:a6: 08:08:e9:7c:9f:aa:d7:6f:85:6c:10:c5:f4:24:d9:61:af:30: 6f:58:40:6d:e3:3f:da:5d:94:bb:9f:ad:e5:83:d0:68:e0:67: 31:7b:d6:96:bd:aa:fe:be:f8:c6:0b:06:a2:7b:9f:f2:aa:82: 9e:f1:7c:03:fb:d6:7f:3f:19:b0:4c:d5:ac:11:a2:e9:8d:3a: ee:97:c4:b6:52:d5:55:78:5b:98:22:ae:c7:ba:9d:79:37:eb: 5b:28:67:50:7d:86:0d:d7:7f:da:36:d5:34:eb:e3:f7:28:5b: e3:bf:06:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmVXxILGm8CIZayb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MzM3Yzg4ZDItOWUzYy00MzAwLWFmMWQtMDFhOTAzNzZhMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR8WkYvJXz8gNp2m44nzG9NEJs4E40l9qEEr lrtn7SbejjZ3hlR0ZRIDA/71hGZO7ER2uOW/xPgcvuqc8Gc5qPqHqxS+OMQKocTz Ib7D7/qIVY2TJ0fTXxGpxgqVoh3x9HMKfzqtFmECJ6nNf+70CVwJao00zPWI/Phk OcugmDDhflanMh63dQ9W3trHYlw25j01JRah9XYbvuXpc/gwehGm4s1g7G4yjpxZ /xPAZ2Omlyqp1J/A/F0BDg1ncfQ/pqRs7KMc2iIFQyOFLmttE/ymJUAOZnIbIANH 6wd5c/KW/IaDOtj/CtyQ2C9cqdE+epQzWuRS4a4y7blyfgwscQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqJ7qhX8L3mlZELHfQX+tO/PRVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2M3YmJjOGItNDNjOS0z ZDQ2LTgxM2ItNWM4MWM4ODcwZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADo3KhjAKpNH3U4J+hSwypZKvbkU0YdnQxM/nVKMPDDIF6ZOJHUA bQWchwR4rf2Y6NOthoM1cTQvIXcxKYUU64ubkUdHxSaTCtsnw5PJk0WMqg+LUikD oT3UskdtALm5NYRNyjTCDSAz9K0GNaPft093+0UlZ3McfsqMLRCvSElVEtCJMsN+ Fl13+Lrv7wXQpggI6XyfqtdvhWwQxfQk2WGvMG9YQG3jP9pdlLufreWD0GjgZzF7 1pa9qv6++MYLBqJ7n/Kqgp7xfAP71n8/GbBM1awRoumNOu6XxLZS1VV4W5girse6 nXk361soZ1B9hg3Xf9o21TTr4/coW+O/Bos= -----END CERTIFICATE-----Generated at Fri May 9 14:34:09 2025 by rpki-client