$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa File: 0cdccb18-47f8-3e17-afc8-8cda7c425886.roa (raw, json) Hash identifier: LVPlr9dobrgPBjJ2GIzJDUVJrs+2asp0fvX4peeF+iQ= Subject key identifier: 46:86:03:DF:9C:3C:8B:C2:4C:6B:0A:D9:51:50:F1:2B:18:5E:7D:83 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1CE1C746EDDACCB73EC0A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa Signing time: Thu 24 Apr 2025 11:54:15 +0000 ROA not before: Thu 24 Apr 2025 11:54:15 +0000 ROA not after: Wed 23 Jul 2025 11:54:15 +0000 asID: 19905 IP address blocks: 2604:2e8c:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ce:1c:74:6e:dd:ac:cb:73:ec:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 11:54:15 2025 GMT Not After : Jul 23 11:54:15 2025 GMT Subject: CN=7521b2ff-cf52-4c1a-977f-da3be4273460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:ca:1f:40:23:65:67:3d:bf:54:5f:f0:8b: 3c:c3:65:79:a7:d7:6a:83:6f:c0:1f:9e:b5:3e:66: 3e:4e:3f:15:6d:64:23:cd:bd:4e:4c:55:8b:61:17: eb:2d:86:75:d1:d4:c7:b9:71:4e:f1:3c:4b:17:b0: db:25:85:89:5c:12:a2:25:15:fc:1a:d4:6d:a1:7f: 1f:aa:bd:c2:cd:a1:14:e3:88:65:7e:82:4f:2a:49: c0:67:71:fb:7d:88:3f:5a:c7:50:b6:f8:43:fd:fb: 46:76:56:1a:96:0b:6c:03:af:36:86:2a:c2:9d:0a: 04:c8:7a:87:64:e9:a0:45:e9:c6:5d:ff:52:e4:3f: 9c:d2:8f:95:2d:80:2d:24:bf:c8:ab:26:91:ed:ad: 2a:81:af:5c:4d:48:83:6e:ec:70:9a:22:73:33:dd: 70:9d:41:91:e6:6c:82:1a:a5:82:a8:7d:85:1c:2b: 97:57:71:56:2f:f8:0d:d5:22:cb:9c:ff:00:69:2c: 3d:80:26:55:5f:b2:67:07:24:27:79:97:a5:73:5b: 63:5f:a0:43:40:4e:5f:74:2c:9b:3c:be:74:eb:db: d0:df:b6:54:12:50:31:67:f6:d1:be:4e:5f:9c:be: e2:c2:8a:37:37:a2:c7:ef:7f:0c:df:7d:95:bd:32: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:03:DF:9C:3C:8B:C2:4C:6B:0A:D9:51:50:F1:2B:18:5E:7D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cdccb18-47f8-3e17-afc8-8cda7c425886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c7:a1:3f:4c:04:31:48:a9:cd:cf:47:dd:12:a6:23:6d:a4: 64:30:95:5c:13:86:4e:8d:91:b5:a9:e4:52:16:2d:41:63:10: 2a:28:2c:db:ce:f9:86:ee:57:02:69:d9:76:96:08:71:4d:b2: f6:06:21:6a:b9:b9:41:b5:7b:b6:47:e9:f4:e0:14:2c:ac:6e: 71:1e:d7:4b:e2:a5:82:cb:cc:a9:9b:30:28:b7:af:04:fb:77: 16:24:6f:42:9f:3c:87:51:be:5f:3c:f8:cd:ed:f4:64:a5:ef: dd:9f:a4:58:fc:20:bf:6e:51:a0:4e:9d:81:59:a3:9a:54:4b: 25:5a:52:e7:29:d8:a4:bb:df:5a:f5:a4:00:de:78:41:f8:e3: 76:15:5a:be:eb:38:96:dc:f1:74:d3:23:84:41:4a:ac:7a:86: 98:e0:d7:28:0b:75:9e:6b:2a:01:5a:ea:57:d7:74:37:be:43: b8:68:7f:2b:7d:0d:b3:04:50:82:6b:04:2d:d8:06:ce:15:3b: ab:1d:07:71:c8:ba:79:d2:ce:df:32:13:cf:23:18:54:02:5e: 61:ad:51:c6:44:f2:8e:7b:cc:e7:31:ec:b8:ef:c2:0e:09:84: 28:a4:ab:26:29:44:78:36:6c:20:f8:c4:9b:85:c5:2b:05:a4: 01:f2:b4:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmhzhx0bt2sy3PsCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDExNTQxNVoXDTI1MDcyMzExNTQxNVowLzEtMCsGA1UEAxMk NzUyMWIyZmYtY2Y1Mi00YzFhLTk3N2YtZGEzYmU0MjczNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WDKH0AjZWc9v1Rf8Is8w2V5p9dqg2/AH561 PmY+Tj8VbWQjzb1OTFWLYRfrLYZ10dTHuXFO8TxLF7DbJYWJXBKiJRX8GtRtoX8f qr3CzaEU44hlfoJPKknAZ3H7fYg/WsdQtvhD/ftGdlYalgtsA682hirCnQoEyHqH ZOmgRenGXf9S5D+c0o+VLYAtJL/IqyaR7a0qga9cTUiDbuxwmiJzM91wnUGR5myC GqWCqH2FHCuXV3FWL/gN1SLLnP8AaSw9gCZVX7JnByQneZelc1tjX6BDQE5fdCyb PL5069vQ37ZUElAxZ/bRvk5fnL7iwoo3N6LH738M332VvTK4BwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEaGA9+cPIvCTGsK2VFQ8SsYXn2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGNkY2NiMTgtNDdmOC0z ZTE3LWFmYzgtOGNkYTdjNDI1ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAacehP0wEMUipzc9H3RKmI22kZDCVXBOGTo2RtankUhYtQWMQKigs 2875hu5XAmnZdpYIcU2y9gYharm5QbV7tkfp9OAULKxucR7XS+KlgsvMqZswKLev BPt3FiRvQp88h1G+Xzz4ze30ZKXv3Z+kWPwgv25RoE6dgVmjmlRLJVpS5ynYpLvf WvWkAN54QfjjdhVavus4ltzxdNMjhEFKrHqGmODXKAt1nmsqAVrqV9d0N75DuGh/ K30NswRQgmsELdgGzhU7qx0Hcci6edLO3zITzyMYVAJeYa1RxkTyjnvM5zHsuO/C DgmEKKSrJilEeDZsIPjEm4XFKwWkAfK0vA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:33 2025 by rpki-client