$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa File: e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa (raw, json) Hash identifier: VRURrJToapk4JfFee+L2iX68FN3gV1lf0IwRp5rpbVo= Subject key identifier: 42:A0:56:F9:C9:2D:E6:E9:A7:34:FB:3F:9F:B9:6F:FC:95:59:CC:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF6828F47FF6654D1A3600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:d980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:68:28:f4:7f:f6:65:4d:1a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=4202c70f-e89c-4d99-96e3-13114294d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:27:52:bb:2b:a6:11:e3:17:94:b5:3e:a5: fd:74:91:08:d8:15:8a:cc:d6:02:cf:75:c1:88:f3: cc:11:7a:2b:68:95:f6:ea:3d:e4:11:be:d5:80:d2: 16:d7:8b:67:1e:b2:71:ce:4d:0b:95:f1:24:85:da: 91:ac:d5:b4:bd:aa:6a:bc:8d:ff:2d:24:d8:29:ed: dc:a0:96:34:7f:12:5a:ad:87:7e:6e:11:6b:79:65: 50:78:5e:96:8e:55:7b:f4:fa:63:82:c9:0f:7d:dd: 1e:7a:3d:96:9c:f8:aa:85:e3:98:ba:b5:e4:6b:a3: ee:b4:a2:31:e6:45:be:1c:57:d8:05:6c:6e:fa:60: fb:6a:7b:17:e1:09:67:87:ad:2e:8f:19:28:4b:ea: 92:5a:ce:65:21:82:a2:d3:a9:84:44:a7:0c:f5:f2: c5:dc:47:11:a1:1d:96:f0:95:21:01:f7:ac:6f:d8: 75:24:92:44:03:28:b4:fd:f5:f2:d6:a9:0d:c3:25: 38:a1:f4:3e:35:40:f2:d3:f3:e4:e4:91:a6:a4:b9: 61:22:8b:c2:69:05:53:1f:b7:4e:84:79:8a:0a:f9: ea:a6:91:19:f8:86:b2:87:a5:45:09:7b:64:21:ab: b5:41:cc:c1:a4:42:6f:99:05:7a:bf:6b:90:84:a8: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A0:56:F9:C9:2D:E6:E9:A7:34:FB:3F:9F:B9:6F:FC:95:59:CC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1e:b7:42:67:38:d3:01:96:2e:0f:19:9e:3a:63:cd:09:8c: 40:a4:d2:3b:e7:25:b6:ab:34:27:3d:ad:58:dd:df:68:a1:f0: 67:16:a8:8c:9b:58:b6:a7:db:59:d3:7e:67:44:61:0a:ba:45: 38:05:0c:51:cb:d1:8c:12:b9:5e:ac:65:84:ca:3e:48:d0:2d: bc:88:a4:1d:9e:f7:0c:14:df:7f:d5:59:51:69:48:00:cc:5a: 4e:62:14:a9:c1:6a:0e:5c:e3:2e:70:dc:2c:49:0b:22:ee:12: b6:cf:7f:5b:48:58:2f:d1:8a:d7:6d:9a:e3:1e:1c:67:ea:85: 93:83:62:c0:c3:6a:cf:f8:4a:66:e6:f6:c8:16:e1:13:5c:fd: 77:00:7d:94:18:61:b3:cc:e3:f6:7a:8d:f2:95:70:cc:bd:8e: 6f:61:78:cf:b6:cd:1c:15:74:43:03:ed:9c:05:10:32:00:93: e9:57:9b:35:a8:7e:7a:4f:fe:8e:fe:d2:a8:95:ca:f2:cf:00: e2:31:83:b1:d7:82:d9:94:3f:45:1c:1c:b3:2c:c2:d3:6e:51: 99:80:d5:76:9e:e2:fc:b5:34:56:21:c2:8a:3a:03:7f:b3:90: 30:f0:56:3f:6c:aa:0e:d3:68:61:fa:fb:2e:5a:c8:c7:4d:af: 72:ba:8d:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72go9H/2ZU0aNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDIwMmM3MGYtZTg5Yy00ZDk5LTk2ZTMtMTMxMTQyOTRkMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx8nUrsrphHjF5S1PqX9dJEI2BWKzNYCz3XB iPPMEXoraJX26j3kEb7VgNIW14tnHrJxzk0LlfEkhdqRrNW0vapqvI3/LSTYKe3c oJY0fxJarYd+bhFreWVQeF6WjlV79PpjgskPfd0eej2WnPiqheOYurXka6PutKIx 5kW+HFfYBWxu+mD7ansX4Qlnh60ujxkoS+qSWs5lIYKi06mERKcM9fLF3EcRoR2W 8JUhAfesb9h1JJJEAyi0/fXy1qkNwyU4ofQ+NUDy0/Pk5JGmpLlhIovCaQVTH7dO hHmKCvnqppEZ+Iayh6VFCXtkIau1QczBpEJvmQV6v2uQhKhz8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKgVvnJLebppzT7P5+5b/yVWcw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTkxZmQwNDUtOTk3MC0z Y2Q3LWI2ODAtYWQ2NmIzYTJkM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUet0JnONMBli4PGZ46Y80JjECk0jvnJbarNCc9rVjd32ih8GcW qIybWLan21nTfmdEYQq6RTgFDFHL0YwSuV6sZYTKPkjQLbyIpB2e9wwU33/VWVFp SADMWk5iFKnBag5c4y5w3CxJCyLuErbPf1tIWC/RitdtmuMeHGfqhZODYsDDas/4 Smbm9sgW4RNc/XcAfZQYYbPM4/Z6jfKVcMy9jm9heM+2zRwVdEMD7ZwFEDIAk+lX mzWofnpP/o7+0qiVyvLPAOIxg7HXgtmUP0UcHLMswtNuUZmA1Xae4vy1NFYhwoo6 A3+zkDDwVj9sqg7TaGH6+y5ayMdNr3K6jQI= -----END CERTIFICATE-----Generated at Fri May 9 01:25:25 2025 by rpki-client