$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f36e72d4-5b49-3239-8189-4dc355d90d0a.roa File: f36e72d4-5b49-3239-8189-4dc355d90d0a.roa (raw, json) Hash identifier: aKv3fM1t+p8SgEA7acWxUatb46Vq6jH8/N1mMo3DcYw= Subject key identifier: C5:63:15:EB:39:A5:88:61:4B:F0:EF:E0:0C:8E:09:B8:BE:16:B1:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF67C53667C2D215945E40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f36e72d4-5b49-3239-8189-4dc355d90d0a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2d80:d580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:67:c5:36:67:c2:d2:15:94:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=6b641514-472e-4458-b1ea-360d695ec129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:c8:31:d8:d4:80:ad:19:10:dc:5a:64:b9: 9e:82:2d:3b:38:61:20:50:c2:a6:29:60:7b:35:62: 20:c3:68:05:17:2c:b8:0f:0c:c7:c9:3e:16:9e:06: e5:0c:d4:04:40:19:ce:33:92:48:d7:1e:a1:15:df: b3:07:23:73:5d:c2:53:65:2c:1a:8e:28:9e:42:4d: f3:db:e5:4c:cf:91:7c:6d:a1:18:3c:04:bd:da:d9: 3a:52:7b:2f:56:66:e2:43:ea:74:cf:85:ac:a0:fa: 7d:d5:b5:5f:f1:25:1d:93:c6:0c:46:ac:f2:37:fe: 57:c8:3a:3b:04:39:7e:e0:65:80:99:92:a6:18:e6: e5:1a:3c:5f:a9:df:3a:dd:82:2e:d5:13:07:ae:0b: 30:3a:0b:38:04:53:b3:78:45:67:7a:63:04:93:b9: 58:ea:76:79:cd:b0:35:89:51:81:74:34:87:84:41: f0:7f:19:8a:e0:2d:e8:d3:2f:d7:3d:57:f5:af:1c: 4e:df:91:84:bc:3a:9d:58:9b:30:eb:6a:44:0b:cb: 65:87:00:a1:fd:3c:9d:76:3c:f2:b8:68:e2:f9:4a: fd:3a:d1:c6:ed:13:be:18:c1:60:89:a0:70:b8:9c: 53:7f:de:06:83:2e:c7:79:2c:72:3d:99:fd:da:2b: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:63:15:EB:39:A5:88:61:4B:F0:EF:E0:0C:8E:09:B8:BE:16:B1:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f36e72d4-5b49-3239-8189-4dc355d90d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2b:a0:28:45:f1:e5:52:c9:33:c7:f6:4d:27:80:b3:7c:84: ca:c7:af:6a:df:12:92:7f:7b:99:1a:14:5a:35:c4:f7:51:ca: 34:e4:8d:ea:dd:45:df:71:ba:85:17:4a:e3:30:d2:10:8a:97: 97:dc:a5:c1:44:43:0b:4f:09:21:62:95:b3:62:f8:f5:e7:8e: b5:87:ca:64:88:8a:7e:f3:bf:7c:cc:3f:93:4d:4f:0e:ad:97: 38:42:81:31:34:74:26:13:8d:3a:45:1a:67:aa:92:1c:b7:9f: 75:70:16:9f:0a:c9:07:d7:e4:34:05:cb:74:8b:2a:4f:51:6a: ca:64:f8:0a:20:d3:7d:2b:21:d9:be:b5:e2:22:3d:ab:26:06: a0:48:e6:fb:8f:b0:09:b5:e6:e2:97:84:26:1f:13:77:d3:13: fa:b4:e1:13:65:ff:59:f9:85:03:e7:d5:10:5a:b2:4a:92:75: 2d:cc:b9:5b:ac:41:da:54:6d:95:98:7c:4e:8b:e8:d8:e7:a4: 8d:51:2b:2e:f0:48:1f:10:24:eb:db:6f:e2:af:ef:cf:1f:d7: 9d:e8:74:b0:1d:0e:14:4e:f5:df:a3:9e:0d:c8:61:e5:e7:39: f9:d7:c7:79:4e:ef:b7:5a:78:d7:c6:5d:f5:78:f3:e2:e7:ca: c2:d1:ee:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72fFNmfC0hWUXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NmI2NDE1MTQtNDcyZS00NDU4LWIxZWEtMzYwZDY5NWVjMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFXIMdjUgK0ZENxaZLmegi07OGEgUMKmKWB7 NWIgw2gFFyy4DwzHyT4WngblDNQEQBnOM5JI1x6hFd+zByNzXcJTZSwajiieQk3z 2+VMz5F8baEYPAS92tk6UnsvVmbiQ+p0z4WsoPp91bVf8SUdk8YMRqzyN/5XyDo7 BDl+4GWAmZKmGOblGjxfqd863YIu1RMHrgswOgs4BFOzeEVnemMEk7lY6nZ5zbA1 iVGBdDSHhEHwfxmK4C3o0y/XPVf1rxxO35GEvDqdWJsw62pEC8tlhwCh/Tyddjzy uGji+Ur9OtHG7RO+GMFgiaBwuJxTf94Ggy7HeSxyPZn92iv1HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVjFes5pYhhS/Dv4AyOCbi+FrGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjM2ZTcyZDQtNWI0OS0z MjM5LTgxODktNGRjMzU1ZDkwZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAroChF8eVSyTPH9k0ngLN8hMrHr2rfEpJ/e5kaFFo1xPdRyjTk jerdRd9xuoUXSuMw0hCKl5fcpcFEQwtPCSFilbNi+PXnjrWHymSIin7zv3zMP5NN Tw6tlzhCgTE0dCYTjTpFGmeqkhy3n3VwFp8KyQfX5DQFy3SLKk9Raspk+Aog030r Idm+teIiPasmBqBI5vuPsAm15uKXhCYfE3fTE/q04RNl/1n5hQPn1RBaskqSdS3M uVusQdpUbZWYfE6L6NjnpI1RKy7wSB8QJOvbb+Kv788f153odLAdDhRO9d+jng3I YeXnOfnXx3lO77daeNfGXfV48+LnysLR7ts= -----END CERTIFICATE-----Generated at Fri May 9 04:12:05 2025 by rpki-client