$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa File: a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa (raw, json) Hash identifier: wS0bSBIKUGc3ToEYDLjdEuZ5L5K2SHKBjfoXZQOSckY= Subject key identifier: C7:11:81:EE:18:A2:78:D8:94:72:14:58:03:5A:8C:19:24:99:B1:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49CE3B59F72329FAA3500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:2780::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9c:e3:b5:9f:72:32:9f:aa:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=b3ce0a38-fe8e-4a79-a856-a5aafd77e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:1e:67:d5:f9:e1:98:8e:99:20:f9:1a:79: 21:ba:a9:77:58:f5:a7:57:5b:7f:f9:5a:5d:4d:92: 70:07:bc:9e:5b:d3:53:c0:4a:be:c1:2a:e0:60:c5: ff:74:d1:0f:84:20:17:f5:e4:08:87:64:03:c3:54: 6f:4d:53:db:a7:38:bb:7f:bf:db:b2:98:8f:92:c4: f2:84:5f:79:32:7e:59:04:e0:d6:1c:46:60:b1:4f: 7a:74:01:a6:4f:c6:2a:b9:75:bd:9b:c1:3d:ae:04: 82:84:25:cf:b4:75:49:1b:97:e2:be:eb:24:cb:17: 47:5e:27:c6:72:79:ee:84:a5:ab:62:d5:be:bd:f0: bd:13:ea:69:6b:8a:7b:a3:57:ad:b4:29:67:64:88: 56:76:93:b6:e3:3e:da:ae:ad:9c:6c:66:bc:1c:8c: 53:01:75:db:22:1f:ca:d6:b2:79:de:8c:d9:fe:a9: 9f:57:68:1a:89:5d:09:b9:5e:92:5c:e6:04:19:5a: fc:25:df:9b:fd:28:28:3d:ff:f9:52:c5:34:09:b4: 98:d9:9a:0a:0b:94:b5:e4:4c:12:44:04:20:a8:0a: 4b:21:14:19:0b:cf:5e:b3:b8:8d:9b:83:8a:47:d0: d6:03:d2:bb:ba:63:7f:08:ee:5f:16:d5:bb:70:94: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:81:EE:18:A2:78:D8:94:72:14:58:03:5A:8C:19:24:99:B1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2780::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:45:2a:01:fc:e9:39:12:29:62:e1:01:10:ba:da:8e:dd:c4: b2:6c:62:1f:97:1e:b4:26:73:5c:de:ca:ea:92:11:7b:7b:8f: 24:cb:57:c0:c0:94:aa:89:08:ac:15:8c:61:1e:28:8d:0e:a5: 6c:c3:e5:0a:6e:cd:c8:9a:df:c8:7e:0a:30:3a:58:5a:10:43: 2e:24:53:aa:b4:21:d6:1a:40:38:9f:a1:39:4f:84:fd:35:b8: 5d:07:9f:d5:2e:2e:0c:dc:03:5b:4d:eb:e2:25:e5:cb:51:aa: 3f:ec:90:21:4b:d0:80:db:7a:09:90:20:22:21:8a:20:f4:06: 01:af:f7:cd:bb:15:f6:44:7f:ea:f2:55:66:b6:dd:1c:1f:12: b3:e2:45:ac:bb:c5:09:79:37:0c:e4:2a:55:fa:5f:7c:32:26: f5:6b:94:0e:e8:4b:ca:b8:3c:0f:8f:d3:84:9f:84:c8:6f:dd: b2:e3:d7:8b:cb:4f:48:41:10:e6:e0:c3:21:41:86:b1:9e:eb: 52:6c:72:dd:6f:d1:41:f8:b0:79:76:d5:fb:db:2b:16:85:38: f9:de:fa:30:11:44:93:49:84:74:c0:85:49:09:54:23:90:38: a7:84:de:39:e1:6f:cd:12:55:69:8b:30:71:b7:22:d6:f4:5e: 5f:d5:72:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJzjtZ9yMp+qNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YjNjZTBhMzgtZmU4ZS00YTc5LWE4NTYtYTVhYWZkNzdlMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiweZ9X54ZiOmSD5Gnkhuql3WPWnV1t/+Vpd TZJwB7yeW9NTwEq+wSrgYMX/dNEPhCAX9eQIh2QDw1RvTVPbpzi7f7/bspiPksTy hF95Mn5ZBODWHEZgsU96dAGmT8YquXW9m8E9rgSChCXPtHVJG5fivuskyxdHXifG cnnuhKWrYtW+vfC9E+ppa4p7o1ettClnZIhWdpO24z7arq2cbGa8HIxTAXXbIh/K 1rJ53ozZ/qmfV2gaiV0JuV6SXOYEGVr8Jd+b/SgoPf/5UsU0CbSY2ZoKC5S15EwS RAQgqApLIRQZC89es7iNm4OKR9DWA9K7umN/CO5fFtW7cJRE3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcRge4YonjYlHIUWANajBkkmbFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTljZDA5M2EtZDk2OS0z ZTBkLTlhMjMtYTJlMDE4YzdjMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVFKgH86TkSKWLhARC62o7dxLJsYh+XHrQmc1zeyuqSEXt7jyTL V8DAlKqJCKwVjGEeKI0OpWzD5Qpuzcia38h+CjA6WFoQQy4kU6q0IdYaQDifoTlP hP01uF0Hn9UuLgzcA1tN6+Il5ctRqj/skCFL0IDbegmQICIhiiD0BgGv9827FfZE f+ryVWa23RwfErPiRay7xQl5NwzkKlX6X3wyJvVrlA7oS8q4PA+P04SfhMhv3bLj 14vLT0hBEObgwyFBhrGe61Jsct1v0UH4sHl21fvbKxaFOPne+jARRJNJhHTAhUkJ VCOQOKeE3jnhb80SVWmLMHG3Itb0Xl/VcqI= -----END CERTIFICATE-----Generated at Fri May 9 01:24:01 2025 by rpki-client