$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa File: a9fed974-a199-3051-87f8-87f2db3f9c21.roa (raw, json) Hash identifier: Y+45qbnkq73hJKAzITayQbLdUcu2ExO43XyWoWssnMs= Subject key identifier: C1:9A:52:24:12:F7:90:9C:E6:FF:44:8D:EC:FA:A7:CB:90:26:37:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849BC74A6278775EF4762A9E880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 30036 IP address blocks: 2604:2d81:500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:a6:27:87:75:ef:47:62:a9:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=701cd3e9-1156-41f2-80e3-2fcea23a88d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:e7:b6:f0:86:92:43:2c:bc:3b:27:1e:93: fb:3e:6a:37:71:90:8a:d2:2f:85:ea:a8:5f:b8:af: 66:57:e1:d6:04:66:8e:ca:e7:39:88:76:34:5e:bb: 54:af:5f:11:5f:89:0f:27:d3:1a:72:5e:fe:e5:57: b7:aa:fb:d7:c6:df:c3:7f:b3:2f:a9:2a:38:1e:93: 02:37:af:cc:07:5f:da:46:f3:04:94:52:c5:1e:53: 56:0d:09:07:c8:e6:b4:41:91:93:ab:20:74:60:60: 58:3e:63:92:0d:06:e7:63:06:bd:10:cd:a2:11:96: f4:38:62:5d:23:4f:00:4f:d5:69:69:f6:88:2f:8f: 79:80:5d:d2:d0:a2:13:08:e5:b2:c0:d7:44:bc:aa: de:c6:6b:cf:4b:cd:a9:b0:2d:36:8b:68:8e:ba:9c: 7f:3a:10:af:6d:d0:d4:3b:34:b8:62:ab:df:45:82: ec:b5:fc:f0:bf:50:11:ec:53:88:f1:c2:ed:55:be: 71:35:ba:e2:67:f2:0f:9d:36:87:89:73:4a:07:ef: 9d:21:db:50:87:c6:46:73:b8:c7:1c:24:fa:cf:a2: bc:34:b4:f3:6b:36:9e:89:ca:e8:d4:93:9d:f4:d9: e2:33:49:50:b9:cb:46:b1:e5:87:ca:26:c7:28:eb: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9A:52:24:12:F7:90:9C:E6:FF:44:8D:EC:FA:A7:CB:90:26:37:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:58:ef:4f:a8:e9:98:ab:79:13:e0:ea:ac:50:4b:92:b9:c6: e6:d6:3b:68:32:7a:51:81:e5:93:57:10:6b:f1:63:b8:d6:11: 05:ff:b4:78:7e:ac:20:e8:b0:0e:df:b7:f8:71:2a:b2:d3:7e: 8b:15:54:9c:0f:48:97:03:63:04:ce:8d:99:cd:fe:ec:15:90: 23:df:36:e8:e8:ba:8f:5d:2a:37:8c:ac:5d:80:55:58:cb:50: 2e:a6:b0:3a:29:e1:59:5e:88:c0:a6:e4:71:e3:0c:2b:b7:96: bc:1c:76:8c:7e:e4:fe:80:04:8f:19:84:06:df:6f:81:0f:ce: 5d:ab:af:19:d2:60:4e:1c:b8:9f:5d:cb:dd:b6:55:95:72:e6: 29:41:43:b1:db:8d:97:15:83:cc:a7:94:d8:90:e7:87:72:c0: 87:1c:b7:1b:13:74:f8:0a:7d:c3:8e:7a:a9:7c:48:d8:c5:4b: c6:68:13:43:1b:98:80:17:6c:9e:8e:fb:27:17:1c:5d:a9:f0: f1:23:3a:9d:1e:a7:eb:84:6b:6a:8e:71:09:b1:64:d8:56:1c: 05:ae:c3:a9:38:b6:58:6a:4e:b6:06:0a:39:56:ad:e5:7a:49: 87:af:76:56:26:66:6c:3d:48:73:34:3c:89:2a:f5:69:75:7f: 9a:22:44:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm8dKYnh3XvR2Kp6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk NzAxY2QzZTktMTE1Ni00MWYyLTgwZTMtMmZjZWEyM2E4OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmebntvCGkkMsvDsnHpP7Pmo3cZCK0i+F6qhf uK9mV+HWBGaOyuc5iHY0XrtUr18RX4kPJ9Macl7+5Ve3qvvXxt/Df7MvqSo4HpMC N6/MB1/aRvMElFLFHlNWDQkHyOa0QZGTqyB0YGBYPmOSDQbnYwa9EM2iEZb0OGJd I08AT9VpafaIL495gF3S0KITCOWywNdEvKrexmvPS82psC02i2iOupx/OhCvbdDU OzS4YqvfRYLstfzwv1AR7FOI8cLtVb5xNbriZ/IPnTaHiXNKB++dIdtQh8ZGc7jH HCT6z6K8NLTzazaeicro1JOd9NniM0lQuctGseWHyibHKOtzPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGaUiQS95Cc5v9Ejez6p8uQJjdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTlmZWQ5NzQtYTE5OS0z MDUxLTg3ZjgtODdmMmRiM2Y5YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVY70+o6ZireRPg6qxQS5K5xubWO2gyelGB5ZNXEGvxY7jWEQX/ tHh+rCDosA7ft/hxKrLTfosVVJwPSJcDYwTOjZnN/uwVkCPfNujouo9dKjeMrF2A VVjLUC6msDop4VleiMCm5HHjDCu3lrwcdox+5P6ABI8ZhAbfb4EPzl2rrxnSYE4c uJ9dy922VZVy5ilBQ7HbjZcVg8ynlNiQ54dywIcctxsTdPgKfcOOeql8SNjFS8Zo E0MbmIAXbJ6O+ycXHF2p8PEjOp0ep+uEa2qOcQmxZNhWHAWuw6k4tlhqTrYGCjlW reV6SYevdlYmZmw9SHM0PIkq9Wl1f5oiRLQ= -----END CERTIFICATE-----Generated at Fri May 9 20:33:14 2025 by rpki-client