$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa File: bda7199a-3f2e-35df-847e-f0a5ec44448e.roa (raw, json) Hash identifier: WEO7XC6/72Qkqd+s2v1AP+tR4YalAkcyhmLoWmvp92o= Subject key identifier: 5D:5E:74:E9:BF:4D:6F:82:7B:AB:FD:A8:A8:0E:FC:09:3E:06:CA:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1B31AE4A4F90466F8DE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:2200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1b:31:ae:4a:4f:90:46:6f:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=807b9729-9b2a-44f0-9638-e43103d3a7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:ea:2d:92:e6:47:4f:a0:67:7d:d1:b9:12: fa:ce:76:ec:b2:10:98:9d:77:10:c9:a1:cb:64:48: a1:55:9e:fa:94:86:24:75:72:3e:23:3b:b8:d1:3d: d8:59:c7:8b:82:17:4c:07:c6:a6:c6:20:39:56:5d: fc:5f:ed:65:d2:aa:8b:c2:e9:0f:c6:37:75:0e:21: 11:d6:c6:38:32:e1:8b:0a:1a:ae:5b:92:aa:88:f2: 59:20:a4:3c:a9:29:f3:f7:6f:72:fb:05:34:9b:6c: 76:66:7b:65:c6:9a:10:9d:31:e3:54:21:6e:43:a8: ee:c1:27:83:ec:9c:a3:78:87:a2:16:6f:43:7d:44: 7c:5e:b9:e7:c6:e2:d4:ea:16:85:ec:96:49:f2:79: 62:9f:d5:be:75:b4:6c:91:ab:87:51:d1:77:16:c4: d8:c6:a2:c8:83:5d:c9:a5:a2:ec:0e:7b:7c:f0:c6: 99:e6:9b:f4:75:6c:6a:d6:59:bd:fb:b2:41:06:49: 24:62:b1:68:cb:d0:5a:e1:2d:3f:b6:35:ad:76:c3: e9:47:c3:3e:f4:fb:71:30:f3:8e:63:c1:50:cb:15: fa:96:fd:8e:ed:16:5a:19:60:17:39:e2:bd:18:23: 4e:b4:03:00:43:90:34:c4:b8:73:34:b8:6e:1a:c3: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:74:E9:BF:4D:6F:82:7B:AB:FD:A8:A8:0E:FC:09:3E:06:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:90:f6:8b:fa:e0:3f:b8:e0:df:59:09:cf:f9:79:00:88:07: d9:e0:99:f4:0f:c7:bf:1e:bc:b5:89:c1:ca:31:dd:d8:48:a8: 5b:16:bf:13:e7:fb:f2:28:7e:0a:46:8a:48:4f:f5:76:e2:07: d9:d2:86:56:3c:fc:b3:1d:09:3e:5d:89:df:c6:cc:53:c2:5c: 8a:fe:90:6c:0f:b7:7b:34:d3:ba:9c:59:97:20:25:85:45:57: 8c:79:35:15:be:27:74:8e:ae:b6:0d:9a:09:65:94:ef:22:ac: 2d:d8:f6:2e:18:e6:7b:9f:6e:75:48:4b:9e:52:22:cc:96:2b: 2b:78:d2:e4:c9:57:e0:79:29:45:0c:4a:c0:55:64:32:93:a0: 0e:1d:39:81:3b:c4:18:6a:68:ce:6f:2f:0f:39:09:32:af:d0: dd:bb:b9:6a:b2:8c:31:21:a4:b0:a0:19:43:a6:aa:a0:96:63: 74:b5:b5:3e:6e:ae:06:8b:23:1c:c2:b1:29:6f:59:85:32:8b: d6:24:44:44:a4:dc:3b:72:74:36:59:5b:dc:54:a2:0f:5e:46: 23:50:ef:30:fa:a7:be:68:52:26:fb:91:4a:da:c3:6c:e4:5b: 00:73:e1:41:ef:e6:e5:55:2d:bb:69:3b:52:fc:a2:6c:18:c9: eb:2d:da:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuhsxrkpPkEZvjeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODA3Yjk3MjktOWIyYS00NGYwLTk2MzgtZTQzMTAzZDNhN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYvqLZLmR0+gZ33RuRL6znbsshCYnXcQyaHL ZEihVZ76lIYkdXI+Izu40T3YWceLghdMB8amxiA5Vl38X+1l0qqLwukPxjd1DiER 1sY4MuGLChquW5KqiPJZIKQ8qSnz929y+wU0m2x2ZntlxpoQnTHjVCFuQ6juwSeD 7JyjeIeiFm9DfUR8XrnnxuLU6haF7JZJ8nlin9W+dbRskauHUdF3FsTYxqLIg13J paLsDnt88MaZ5pv0dWxq1lm9+7JBBkkkYrFoy9Ba4S0/tjWtdsPpR8M+9PtxMPOO Y8FQyxX6lv2O7RZaGWAXOeK9GCNOtAMAQ5A0xLhzNLhuGsNGEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF1edOm/TW+Ce6v9qKgO/Ak+BsoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhNzE5OWEtM2YyZS0z NWRmLTg0N2UtZjBhNWVjNDQ0NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOQ9ov64D+44N9ZCc/5eQCIB9ngmfQPx78evLWJwcox3dhIqFsW vxPn+/IofgpGikhP9XbiB9nShlY8/LMdCT5did/GzFPCXIr+kGwPt3s007qcWZcg JYVFV4x5NRW+J3SOrrYNmglllO8irC3Y9i4Y5nufbnVIS55SIsyWKyt40uTJV+B5 KUUMSsBVZDKToA4dOYE7xBhqaM5vLw85CTKv0N27uWqyjDEhpLCgGUOmqqCWY3S1 tT5urgaLIxzCsSlvWYUyi9YkRESk3DtydDZZW9xUog9eRiNQ7zD6p75oUib7kUra w2zkWwBz4UHv5uVVLbtpO1L8omwYyest2g4= -----END CERTIFICATE-----Generated at Fri May 9 12:02:54 2025 by rpki-client