$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa File: d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa (raw, json) Hash identifier: rNfE9msxyn3Cm24wninPsbi1/ksVOriXBsIwiLBxa30= Subject key identifier: C8:29:BF:E3:79:15:FB:44:D9:AD:47:05:CA:EA:2A:6B:82:23:16:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849BBAD0AC411CBAE921850FC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa Signing time: Sat 03 May 2025 18:18:39 +0000 ROA not before: Sat 03 May 2025 18:18:39 +0000 ROA not after: Fri 01 Aug 2025 18:18:39 +0000 asID: 30036 IP address blocks: 2604:2d81:780::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:ad:0a:c4:11:cb:ae:92:18:50:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 3 18:18:39 2025 GMT Not After : Aug 1 18:18:39 2025 GMT Subject: CN=492b44cf-9fb0-4267-8d8b-4e03df0e1734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:67:52:46:79:14:88:fb:cb:74:e8:33:52: fb:4d:84:2d:57:54:d5:99:62:c9:2b:24:33:e8:b3: e1:83:0d:50:b5:22:7d:57:4b:2f:07:9b:40:7b:93: 39:97:ce:2a:7c:66:45:6b:93:eb:4c:07:3e:1e:f9: 64:af:6b:d0:90:d2:0b:9f:18:39:f9:21:e1:22:cd: 26:c1:bd:21:f2:88:56:cb:bc:81:2a:b7:20:a9:4f: db:e0:a6:83:02:27:5b:02:67:c1:7e:f1:24:93:ce: aa:06:85:5f:af:a4:80:6c:23:4e:4f:87:f7:16:66: 4a:7b:4e:22:f1:3e:99:68:30:dd:b7:09:7f:9f:11: 3d:2a:a1:47:18:84:8a:53:79:d4:7f:77:63:b5:7a: e0:ca:0f:bd:44:c9:ed:13:9c:57:b4:78:2a:7a:4b: b1:b1:7a:02:a5:6d:dd:71:18:87:8f:00:8a:ba:ee: f2:df:d1:3a:66:6e:6f:51:67:b8:47:fe:de:a0:51: 6d:f9:22:1d:12:63:b7:85:f4:d2:94:1a:c3:6e:74: 34:4e:59:28:d6:cc:fa:03:93:33:a0:1d:06:5a:e8: bb:0b:15:f5:63:a4:db:0c:7f:54:90:7f:ec:97:09: 14:50:be:a5:5f:84:d5:18:42:ad:8d:30:77:48:e8: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:BF:E3:79:15:FB:44:D9:AD:47:05:CA:EA:2A:6B:82:23:16:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:780::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:68:dc:8c:66:54:9a:89:ca:bc:e2:7a:47:38:80:80:78:f9: f9:c3:14:8d:5c:c0:0c:fc:4a:c9:03:45:3e:dc:bc:c4:fc:ee: 41:d9:c8:7f:75:33:fc:7e:43:89:30:48:69:30:b3:44:35:bb: 4a:52:3d:7f:47:fd:ed:98:cb:ce:0d:61:4b:fd:f9:b6:aa:c9: 40:55:0f:d5:72:99:e0:e0:e7:33:29:22:a7:f1:f3:b3:ce:2c: 90:af:cb:fb:0e:8a:eb:f6:50:83:20:f5:b9:8f:1b:73:20:2c: 07:9c:8d:97:8f:89:79:2f:f1:da:98:cc:88:5b:4a:59:fe:f7: 43:08:64:ee:e3:a2:75:b0:70:0a:16:c7:d6:48:e6:4a:5f:30: ee:54:3a:93:13:25:cb:3c:3c:17:bd:08:34:4a:d1:d0:60:28: 30:b2:bf:d0:ac:9a:32:4d:49:2b:eb:3b:ab:86:22:5d:19:f2: 02:32:30:fe:43:e7:aa:98:5f:96:bf:bf:f9:40:7d:34:e8:9a: e0:a4:8e:fd:df:05:8b:39:1b:57:bf:02:e2:53:5c:58:f3:44: 0f:bd:24:f2:ca:85:27:b2:28:98:af:bf:af:36:f9:02:6b:31: 4f:01:4b:da:57:af:50:4c:63:77:c4:78:73:f2:93:93:aa:c0: 7e:57:0a:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm7rQrEEcuukhhQ/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUwMzE4MTgzOVoXDTI1MDgwMTE4MTgzOVowLzEtMCsGA1UEAxMk NDkyYjQ0Y2YtOWZiMC00MjY3LThkOGItNGUwM2RmMGUxNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfNnUkZ5FIj7y3ToM1L7TYQtV1TVmWLJKyQz 6LPhgw1QtSJ9V0svB5tAe5M5l84qfGZFa5PrTAc+Hvlkr2vQkNILnxg5+SHhIs0m wb0h8ohWy7yBKrcgqU/b4KaDAidbAmfBfvEkk86qBoVfr6SAbCNOT4f3FmZKe04i 8T6ZaDDdtwl/nxE9KqFHGISKU3nUf3djtXrgyg+9RMntE5xXtHgqekuxsXoCpW3d cRiHjwCKuu7y39E6Zm5vUWe4R/7eoFFt+SIdEmO3hfTSlBrDbnQ0Tlko1sz6A5Mz oB0GWui7CxX1Y6TbDH9UkH/slwkUUL6lX4TVGEKtjTB3SOiu6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMgpv+N5FftE2a1HBcrqKmuCIxaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDkxZjg3MzQtZmQwYS0z ZTU0LWIwNGMtZjdlYWM5ZTkwZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdo3IxmVJqJyrziekc4gIB4+fnDFI1cwAz8SskDRT7cvMT87kHZ yH91M/x+Q4kwSGkws0Q1u0pSPX9H/e2Yy84NYUv9+baqyUBVD9VymeDg5zMpIqfx 87POLJCvy/sOiuv2UIMg9bmPG3MgLAecjZePiXkv8dqYzIhbSln+90MIZO7jonWw cAoWx9ZI5kpfMO5UOpMTJcs8PBe9CDRK0dBgKDCyv9CsmjJNSSvrO6uGIl0Z8gIy MP5D56qYX5a/v/lAfTTomuCkjv3fBYs5G1e/AuJTXFjzRA+9JPLKhSeyKJivv682 +QJrMU8BS9pXr1BMY3fEeHPyk5OqwH5XCms= -----END CERTIFICATE-----Generated at Fri May 9 08:40:29 2025 by rpki-client