$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa File: c39f5961-d370-3743-b3fc-bd13cbf77407.roa (raw, json) Hash identifier: 1/NVnDDUdxKfw8DoirtDgIpIMp/aQH5JcHbQjQ3n7w0= Subject key identifier: BB:04:15:54:C6:EC:8A:DC:B2:95:8D:90:96:AC:64:32:E7:E5:18:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA39DBE05F8CB1B0166880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:6b80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:39:db:e0:5f:8c:b1:b0:16:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a0ec7a73-6d21-45c1-9243-1363a7fbfd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4a:20:71:cf:38:26:1d:d4:2e:33:96:41:96: 44:84:b2:f4:cd:32:b6:ea:8f:8e:bd:14:d8:9e:cf: 7f:62:ac:f7:33:17:0a:c6:cb:a7:54:0b:15:32:15: 35:b5:00:a0:80:d7:90:b8:65:88:a1:7d:64:b1:95: cc:63:1e:9f:83:09:9e:92:09:8d:f9:12:cc:27:24: e4:d0:e6:98:d3:7a:2a:0c:c7:27:af:85:c8:3d:7c: c0:38:1b:59:e0:a8:26:dc:8d:86:19:12:3f:0a:98: 1a:82:4c:4b:c0:0f:1b:a1:6e:35:85:a8:65:6b:42: 52:4e:14:01:cf:58:1d:41:45:5b:26:71:b5:b4:94: 17:35:dc:c1:77:00:f2:1b:07:29:a2:3d:01:b0:44: 13:c9:71:da:fa:15:bf:03:5b:a2:f7:e5:fe:59:66: 46:b2:c4:af:f0:d3:d6:3e:39:1b:8a:9c:5f:7f:ab: f6:e5:ea:34:f1:15:79:8f:ee:7b:c6:b6:d5:65:4c: 91:a3:22:f1:dd:49:88:dc:90:1e:cd:cd:44:ab:15: e7:7a:d3:15:a1:e4:cd:c9:09:33:ea:a7:cb:41:5b: a8:7e:e8:3a:8b:ca:b9:e0:aa:14:53:af:38:5a:02: 12:95:73:5b:f5:49:04:66:d8:cf:ca:6d:41:e6:eb: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:15:54:C6:EC:8A:DC:B2:95:8D:90:96:AC:64:32:E7:E5:18:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c39f5961-d370-3743-b3fc-bd13cbf77407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6b80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6f:e5:19:c7:1c:4e:dd:1d:62:d9:02:0d:a1:23:b7:b6:5f: 1b:5b:8f:4a:3a:fe:f6:f4:a4:23:58:c6:3e:1b:1c:0c:19:ba: 0d:75:fa:4f:ed:1a:37:0f:78:54:ea:c3:0a:bc:37:77:5f:91: 39:58:e6:5b:de:4b:f8:2b:34:d5:b6:0c:e7:74:09:11:8d:7f: 34:86:da:47:66:23:05:fa:7c:70:ee:3e:04:2b:38:74:9d:15: ac:ec:9e:c2:ba:c6:ff:ae:95:ba:68:68:44:b1:c6:10:8c:6f: 45:72:2f:c3:25:51:ac:2f:0f:7a:82:37:ff:63:4f:08:f2:21: 9d:3b:7f:21:71:02:8c:81:3c:70:4b:13:9f:99:e7:c0:c3:79: b9:bf:14:85:0a:90:0a:6d:fe:37:74:44:f9:c0:d2:e2:1b:f3: 7a:e6:02:e7:af:16:ee:aa:b1:fb:ad:00:3d:5d:77:91:ee:66: 53:dc:ca:73:ce:15:b1:b8:07:54:e7:7c:1a:6c:e2:ad:b0:29: b1:e3:88:87:14:76:21:cf:25:31:d1:5a:4f:ee:fb:b6:fd:9d: 20:df:7b:37:9c:a1:62:41:dd:3f:4a:79:f5:9a:96:7f:6e:c6: 0a:0e:ab:27:3a:1e:05:1a:fa:3f:12:ce:f7:2d:0e:89:d5:8c: f7:2b:2a:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkujnb4F+MsbAWaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTBlYzdhNzMtNmQyMS00NWMxLTkyNDMtMTM2M2E3ZmJmZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkogcc84Jh3ULjOWQZZEhLL0zTK26o+OvRTY ns9/Yqz3MxcKxsunVAsVMhU1tQCggNeQuGWIoX1ksZXMYx6fgwmekgmN+RLMJyTk 0OaY03oqDMcnr4XIPXzAOBtZ4Kgm3I2GGRI/CpgagkxLwA8boW41hahla0JSThQB z1gdQUVbJnG1tJQXNdzBdwDyGwcpoj0BsEQTyXHa+hW/A1ui9+X+WWZGssSv8NPW Pjkbipxff6v25eo08RV5j+57xrbVZUyRoyLx3UmI3JAezc1EqxXnetMVoeTNyQkz 6qfLQVuofug6i8q54KoUU684WgISlXNb9UkEZtjPym1B5utSwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsEFVTG7IrcspWNkJasZDLn5Rh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM5ZjU5NjEtZDM3MC0z NzQzLWIzZmMtYmQxM2NiZjc3NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9v5RnHHE7dHWLZAg2hI7e2Xxtbj0o6/vb0pCNYxj4bHAwZug11 +k/tGjcPeFTqwwq8N3dfkTlY5lveS/grNNW2DOd0CRGNfzSG2kdmIwX6fHDuPgQr OHSdFazsnsK6xv+ulbpoaESxxhCMb0VyL8MlUawvD3qCN/9jTwjyIZ07fyFxAoyB PHBLE5+Z58DDebm/FIUKkApt/jd0RPnA0uIb83rmAuevFu6qsfutAD1dd5HuZlPc ynPOFbG4B1TnfBps4q2wKbHjiIcUdiHPJTHRWk/u+7b9nSDfezecoWJB3T9KefWa ln9uxgoOqyc6HgUa+j8SzvctDonVjPcrKhw= -----END CERTIFICATE-----Generated at Sun Jun 29 23:41:26 2025 by rpki-client