$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa File: a228e266-954a-3bcb-9a5b-521e8e8bb852.roa (raw, json) Hash identifier: 5pwzAxO8RssKRaji0jHneYTlKwR8pBxS8FURue1SrAc= Subject key identifier: 8C:98:49:1B:25:55:65:33:05:D9:CF:F2:E6:31:90:B6:B4:AF:0D:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858494BADBB37B98FFDBDCAE16680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa Signing time: Mon 24 Mar 2025 15:29:30 +0000 ROA not before: Mon 24 Mar 2025 15:29:30 +0000 ROA not after: Sun 22 Jun 2025 15:29:30 +0000 asID: 30036 IP address blocks: 2604:2d80:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:ad:bb:37:b9:8f:fd:bd:ca:e1:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 24 15:29:30 2025 GMT Not After : Jun 22 15:29:30 2025 GMT Subject: CN=ff3f1ca8-8869-4992-b430-b40491204732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:95:8c:25:3a:d3:ad:ef:a1:51:c8:72:4a: ce:3a:a3:da:bc:6f:8c:36:12:d5:20:05:b3:98:0c: 78:5c:74:3a:93:01:f8:11:8e:d4:17:d4:bd:85:32: 9a:ae:1d:a4:d9:59:ef:66:34:52:83:07:73:1c:02: 84:ca:e9:57:35:b5:33:fa:c6:02:9f:bd:1c:f4:1c: 89:b3:9b:6a:eb:86:0e:c3:3d:04:10:e7:5c:34:ec: cf:7e:57:ab:91:57:75:ae:d6:44:a6:b0:9c:53:35: e3:fa:14:c1:39:75:54:c3:75:bb:26:61:f1:ba:5f: 8f:00:b0:6a:a1:91:c7:59:ef:75:93:31:4e:94:d8: 01:90:c2:43:3c:ba:da:b0:f7:81:fc:73:6a:25:2e: 10:11:c4:3b:f1:6b:d1:53:cd:88:a6:15:f5:f4:72: 2d:87:93:ee:7d:2b:d6:5c:cb:a9:33:67:a0:8c:60: 78:db:d2:6a:e7:c0:b8:6c:04:f5:86:12:99:6e:da: d5:97:0b:35:92:9d:96:31:9d:4a:42:0b:e1:ab:0f: 7b:b4:c1:4e:5c:0f:22:3b:4c:d7:d7:42:a5:f9:e1: 80:4d:bf:fa:52:72:05:1b:28:af:6d:07:9f:9b:1b: d9:b6:47:23:4b:c9:b9:4c:be:4c:91:f9:86:89:19: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:98:49:1B:25:55:65:33:05:D9:CF:F2:E6:31:90:B6:B4:AF:0D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ac00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d9:13:d7:e9:c1:e8:18:3d:6a:f9:64:f7:73:b8:d5:99:a7: 1a:0d:c6:4a:a6:11:21:48:b6:96:b1:5f:0d:21:06:7e:3e:e5: f6:a0:2e:91:fd:8c:b7:82:46:5f:de:a9:35:35:45:7c:d0:71: 63:ed:99:fa:da:01:a1:b7:c7:cb:58:42:09:01:19:34:74:0f: bb:a5:6b:41:ab:cc:22:3f:19:8e:23:ed:e2:36:2d:2d:cd:c1: 7e:5c:b1:c1:2e:a7:b5:57:32:4e:d3:13:c8:40:23:77:ec:18: fb:5e:8e:5e:9b:33:04:b2:3b:4e:5f:08:63:a3:f5:5f:cd:f7: 66:23:33:7a:c2:7b:a8:97:93:bd:0b:ad:cb:16:cc:32:c9:4c: 99:0d:79:9a:b2:ed:51:7e:2e:b0:94:f9:2e:63:9a:a2:03:04: 3c:af:3f:15:58:4d:11:06:7c:90:b1:71:ce:aa:34:17:a6:70: dc:47:ce:ab:10:09:c6:04:91:63:19:d1:23:cc:52:5b:d0:cc: 48:0e:b4:de:fe:7f:57:e7:42:0f:a4:46:ec:6b:5b:60:2c:13: 3e:7c:67:33:cc:6f:1d:a4:86:e5:89:ee:42:a9:81:84:6d:9d: 19:f5:4a:66:d7:cf:60:32:38:78:a4:3d:2a:ba:64:25:81:68: a4:c4:74:a2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLrbs3uY/9vcrhZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMyNDE1MjkzMFoXDTI1MDYyMjE1MjkzMFowLzEtMCsGA1UEAxMk ZmYzZjFjYTgtODg2OS00OTkyLWI0MzAtYjQwNDkxMjA0NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKOVjCU6063voVHIckrOOqPavG+MNhLVIAWz mAx4XHQ6kwH4EY7UF9S9hTKarh2k2VnvZjRSgwdzHAKEyulXNbUz+sYCn70c9ByJ s5tq64YOwz0EEOdcNOzPflerkVd1rtZEprCcUzXj+hTBOXVUw3W7JmHxul+PALBq oZHHWe91kzFOlNgBkMJDPLrasPeB/HNqJS4QEcQ78WvRU82IphX19HIth5PufSvW XMupM2egjGB429Jq58C4bAT1hhKZbtrVlws1kp2WMZ1KQgvhqw97tMFOXA8iO0zX 10Kl+eGATb/6UnIFGyivbQefmxvZtkcjS8m5TL5MkfmGiRkwlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIyYSRslVWUzBdnP8uYxkLa0rw2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyOGUyNjYtOTU0YS0z YmNiLTlhNWItNTIxZThlOGJiODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgKww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAINkT1+nB6Bg9avlk93O41ZmnGg3GSqYRIUi2lrFfDSEGfj7l9qAu kf2Mt4JGX96pNTVFfNBxY+2Z+toBobfHy1hCCQEZNHQPu6VrQavMIj8ZjiPt4jYt Lc3BflyxwS6ntVcyTtMTyEAjd+wY+16OXpszBLI7Tl8IY6P1X833ZiMzesJ7qJeT vQutyxbMMslMmQ15mrLtUX4usJT5LmOaogMEPK8/FVhNEQZ8kLFxzqo0F6Zw3EfO qxAJxgSRYxnRI8xSW9DMSA603v5/V+dCD6RG7GtbYCwTPnxnM8xvHaSG5YnuQqmB hG2dGfVKZtfPYDI4eKQ9KrpkJYFopMR0og== -----END CERTIFICATE-----Generated at Fri May 9 06:15:48 2025 by rpki-client