$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa File: d0a0fc8b-92d9-3b76-b756-796441d174fa.roa (raw, json) Hash identifier: ynnHadRcILmrB8NXOF/zraTQIuXIxB2uMmuDo3/4N/I= Subject key identifier: 9B:21:C0:2B:E9:9C:15:8D:51:26:71:AE:9B:C6:84:E6:BE:43:C9:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849C20A02263A4C7B07A92FC2B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 30036 IP address blocks: 2604:2d81:600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:02:26:3a:4c:7b:07:a9:2f:c2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=d60ca58f-acc9-4e04-a4e7-e3c3be097bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:a0:95:bd:4d:2a:ef:95:29:38:4d:23:4f: b7:dc:42:f4:a4:63:18:fe:8c:cf:76:1d:c0:6b:86: a5:39:4c:46:38:93:67:62:d9:26:f2:a7:7c:6b:fc: 83:8d:fd:b6:f5:24:88:0a:e7:2b:81:71:ab:5b:37: 8c:31:b9:6b:47:b7:eb:e2:3a:ec:00:4f:db:c7:c8: 80:ef:9a:a8:ba:61:f9:1b:3f:9e:22:7f:19:af:ff: 7f:d3:4a:c3:d3:8e:5c:31:c4:47:38:34:9d:d4:01: a2:5a:24:f6:b7:a0:ce:0c:69:1c:d0:37:ea:31:4e: 16:ac:85:26:37:ee:b5:82:ea:6c:a9:a3:06:83:7d: 72:9e:59:96:56:01:7a:2d:bc:c1:cd:59:a4:bc:79: e4:14:4c:48:79:1f:02:f9:6b:7e:c9:e9:ed:46:f1: 12:bd:68:35:83:94:32:88:e7:ec:c2:4c:3e:be:52: 16:c8:48:a1:2a:99:a1:bd:ec:b9:5f:78:c3:9f:bc: 99:0d:87:a0:9f:1f:64:82:5e:19:85:a5:c3:03:c2: 24:86:0d:78:d2:17:e7:68:d1:9b:fa:a0:19:7d:a9: 92:46:24:0e:3d:bc:c1:e8:3c:e6:b0:12:98:40:f4: 4e:c2:d7:47:45:f5:c0:bb:f6:c0:08:42:86:f0:73: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:C0:2B:E9:9C:15:8D:51:26:71:AE:9B:C6:84:E6:BE:43:C9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d1:56:ec:ca:0b:0a:73:ea:4c:55:2f:a0:9d:81:ba:04:99: d7:55:08:37:da:6b:ca:9d:e2:46:3c:da:2c:26:84:b2:73:45: be:f7:5d:f6:c3:5f:e5:5c:ba:19:be:62:c3:bc:ed:d0:86:2a: ed:b6:3d:ac:8e:cc:20:b9:eb:3d:95:ec:97:ff:18:32:20:13: 9c:56:98:2d:ea:89:07:dd:0b:e4:78:07:75:ee:df:7d:62:a8: 03:f6:91:89:c3:33:8b:51:51:da:26:a6:f8:44:78:38:5b:10: fc:b6:b8:e8:ec:4b:8c:92:2b:24:af:d3:96:d0:7b:7f:cd:5b: 32:72:4b:a8:8d:4f:e1:0f:09:18:9c:7c:11:b5:9c:11:aa:5e: ab:c4:21:f3:ec:9f:0f:1f:44:65:c0:b1:2f:4d:bb:0d:be:48: b9:63:eb:b5:07:22:b8:6c:b0:17:13:f4:af:50:11:8c:47:08: 38:6a:40:ea:d2:b4:ff:87:94:66:aa:49:04:f7:da:ee:4e:24: 30:86:94:26:ee:ae:a4:cf:f4:46:cb:11:bd:8a:bb:00:eb:77: 4f:69:58:32:93:9b:ff:36:ea:1a:4f:1d:7f:3a:d1:c9:4b:7d: 20:a4:9a:71:19:ff:69:e9:a0:0f:d4:59:98:02:74:6e:72:31: 9b:7f:37:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCgImOkx7B6kvwrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDYwY2E1OGYtYWNjOS00ZTA0LWE0ZTctZTNjM2JlMDk3YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyCglb1NKu+VKThNI0+33EL0pGMY/ozPdh3A a4alOUxGOJNnYtkm8qd8a/yDjf229SSICucrgXGrWzeMMblrR7fr4jrsAE/bx8iA 75qoumH5Gz+eIn8Zr/9/00rD045cMcRHODSd1AGiWiT2t6DODGkc0DfqMU4WrIUm N+61gupsqaMGg31ynlmWVgF6LbzBzVmkvHnkFExIeR8C+Wt+yentRvESvWg1g5Qy iOfswkw+vlIWyEihKpmhvey5X3jDn7yZDYegnx9kgl4ZhaXDA8Ikhg140hfnaNGb +qAZfamSRiQOPbzB6DzmsBKYQPROwtdHRfXAu/bACEKG8HNaDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJshwCvpnBWNUSZxrpvGhOa+Q8k4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhMGZjOGItOTJkOS0z Yjc2LWI3NTYtNzk2NDQxZDE3NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3RVuzKCwpz6kxVL6CdgboEmddVCDfaa8qd4kY82iwmhLJzRb73 XfbDX+Vcuhm+YsO87dCGKu22PayOzCC56z2V7Jf/GDIgE5xWmC3qiQfdC+R4B3Xu 331iqAP2kYnDM4tRUdompvhEeDhbEPy2uOjsS4ySKySv05bQe3/NWzJyS6iNT+EP CRicfBG1nBGqXqvEIfPsnw8fRGXAsS9Nuw2+SLlj67UHIrhssBcT9K9QEYxHCDhq QOrStP+HlGaqSQT32u5OJDCGlCburqTP9EbLEb2KuwDrd09pWDKTm/826hpPHX86 0clLfSCkmnEZ/2npoA/UWZgCdG5yMZt/N9o= -----END CERTIFICATE-----Generated at Sat May 10 13:17:19 2025 by rpki-client