$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa File: b859d57b-c3f2-3630-a741-daa5b35886b7.roa (raw, json) Hash identifier: 4UNz6cyqG3xL2qVUIjsoYx6g3qgORteEzUyZSk7tioM= Subject key identifier: C4:77:42:CB:C9:BC:68:F3:52:0F:48:69:A4:D7:93:AA:B6:AB:E4:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA22ECEB9CD08277A41B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:3280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:22:ec:eb:9c:d0:82:77:a4:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bdaf7974-12b7-4f29-a297-82e4faf4d3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:29:b0:ee:49:df:4b:54:e0:d5:48:13:e1: 51:51:2f:be:64:4b:44:09:eb:1b:88:25:bf:1c:6b: cc:f1:f8:15:ce:2d:75:33:a5:e9:ea:61:a1:f4:2c: fe:ad:55:9c:88:10:db:27:75:14:31:a1:8b:e6:35: 29:b1:46:d1:cb:65:2b:10:6d:91:7b:74:b9:e0:78: 33:57:8f:18:55:65:b0:6d:18:24:97:85:4e:10:9b: 12:a3:7b:98:17:3d:e4:32:61:ea:9c:75:e3:92:c0: 55:60:d9:32:4b:cc:d5:b8:1f:d1:04:c7:85:9f:24: 4f:d8:48:3f:be:8d:4d:8c:a0:36:05:2c:6c:8b:3e: db:31:d1:db:26:df:1c:1c:53:ae:0d:8a:f3:63:61: 2e:cd:39:9c:f4:ed:cb:95:bc:4c:a7:c7:aa:f0:84: cb:40:65:f9:98:26:e1:14:2f:b1:d2:84:a6:03:d2: 7c:a6:f3:28:35:78:1c:fa:49:14:4a:ce:5f:97:2b: 3b:3b:d0:48:10:f4:be:eb:ae:6a:d1:22:d4:d9:c0: d7:28:a3:29:ae:94:c2:3f:d4:f8:01:ce:3b:1a:da: 40:05:62:1b:80:a5:35:22:57:ee:3b:99:89:bd:6d: 8c:f5:29:20:c8:49:70:ad:24:13:ff:b1:77:69:1a: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:42:CB:C9:BC:68:F3:52:0F:48:69:A4:D7:93:AA:B6:AB:E4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b859d57b-c3f2-3630-a741-daa5b35886b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:09:26:74:ee:87:18:6f:6d:11:dd:b2:7a:84:5a:dc:1f: a0:c2:97:00:9c:ed:ca:0b:e4:7a:87:27:ae:2c:d9:3f:07:f6: 51:73:9e:1b:35:7a:7c:70:5f:db:e6:66:7a:37:9e:f5:b6:2a: 81:5c:9d:1e:ec:33:c8:69:60:92:06:0a:4d:ef:b8:db:70:77: df:38:9f:41:c6:aa:ec:c2:4e:d6:e2:e2:4f:98:99:5b:5d:bc: cc:e1:2c:11:be:1a:fb:0c:a1:2d:0f:5f:df:61:01:41:25:47: cf:65:df:c9:13:b3:91:a4:fa:9a:fe:9b:70:2f:79:f9:b8:56: 32:55:60:f7:d0:7b:21:8b:de:63:bd:23:24:36:ad:73:7b:cc: 3f:98:75:c1:1d:ec:49:8c:87:94:8c:90:62:c2:fc:78:f3:5e: 0b:2e:d4:fd:07:35:b5:29:4f:c6:3e:48:6b:6d:41:c4:cf:56: 66:0f:61:0f:57:49:a9:9c:7e:3e:dd:13:01:0e:fa:37:9c:ee: 4d:c6:d4:ce:a9:9e:b7:9c:8e:e5:40:f3:27:89:9f:53:1f:33: 0c:d7:38:7f:15:f4:f1:12:f1:0f:27:e0:cb:0d:ba:92:1c:fc: 34:e1:c4:68:10:b7:04:c7:33:50:c5:20:6d:63:28:f1:7a:78: 05:62:10:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuiLs65zQgnekGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmRhZjc5NzQtMTJiNy00ZjI5LWEyOTctODJlNGZhZjRkM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlgpsO5J30tU4NVIE+FRUS++ZEtECesbiCW/ HGvM8fgVzi11M6Xp6mGh9Cz+rVWciBDbJ3UUMaGL5jUpsUbRy2UrEG2Re3S54Hgz V48YVWWwbRgkl4VOEJsSo3uYFz3kMmHqnHXjksBVYNkyS8zVuB/RBMeFnyRP2Eg/ vo1NjKA2BSxsiz7bMdHbJt8cHFOuDYrzY2EuzTmc9O3LlbxMp8eq8ITLQGX5mCbh FC+x0oSmA9J8pvMoNXgc+kkUSs5flys7O9BIEPS+665q0SLU2cDXKKMprpTCP9T4 Ac47GtpABWIbgKU1IlfuO5mJvW2M9SkgyElwrSQT/7F3aRoSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMR3QsvJvGjzUg9IaaTXk6q2q+TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1OWQ1N2ItYzNmMi0z NjMwLWE3NDEtZGFhNWIzNTg4NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACr3CSZ07ocYb20R3bJ6hFrcH6DClwCc7coL5HqHJ64s2T8H9lFz nhs1enxwX9vmZno3nvW2KoFcnR7sM8hpYJIGCk3vuNtwd984n0HGquzCTtbi4k+Y mVtdvMzhLBG+GvsMoS0PX99hAUElR89l38kTs5Gk+pr+m3Avefm4VjJVYPfQeyGL 3mO9IyQ2rXN7zD+YdcEd7EmMh5SMkGLC/HjzXgsu1P0HNbUpT8Y+SGttQcTPVmYP YQ9XSamcfj7dEwEO+jec7k3G1M6pnrecjuVA8yeJn1MfMwzXOH8V9PES8Q8n4MsN upIc/DThxGgQtwTHM1DFIG1jKPF6eAViEIw= -----END CERTIFICATE-----Generated at Fri May 9 12:15:39 2025 by rpki-client