$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa File: 0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json) Hash identifier: xjUwVKkgxQOTuJwbz5yaJumy+9PdPiupKoe985h8K+4= Subject key identifier: 40:1E:CB:55:A8:DC:16:3B:CF:B1:29:E6:0F:50:19:95:0B:CD:12:8A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA2137FE059E02DE2CC580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8a:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:21:37:fe:05:9e:02:de:2c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=732a3963-19c6-4078-b9ef-b2ec10dc1e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:df:86:5d:3d:6f:6b:60:1e:7d:c9:cb:e1: 18:da:1d:d7:fd:e4:29:a3:ba:7c:a1:1e:d5:4a:2a: 8a:c4:37:4a:c7:d1:49:b0:da:ce:b0:d2:3e:2e:a9: fe:67:cf:32:05:24:d5:23:c5:8a:b4:39:a7:f2:d0: 7c:c0:6f:7e:2f:1a:fd:aa:6b:fc:94:86:f5:de:12: 2b:0c:e4:0d:62:80:b1:44:5e:cf:5c:eb:70:78:72: 2e:16:17:81:a2:02:af:f6:2d:87:11:91:b4:63:a6: cf:28:97:51:9e:53:8b:f0:bb:7b:4b:82:e6:26:bd: fb:82:51:6a:6c:97:00:50:a6:db:6e:0b:59:b2:c8: 4d:9d:31:04:70:ab:44:a0:a5:af:3f:1f:e7:f8:73: 65:51:e0:f8:0d:2c:c4:14:0a:ca:f3:a0:46:11:23: bd:54:eb:08:59:e8:e8:f5:dc:b7:91:f3:c2:de:7f: d5:e5:60:63:f2:05:f3:e9:3c:9e:92:27:50:ec:f9: e3:5f:51:49:3c:fe:33:88:7e:f1:8d:c4:17:2d:20: 1d:87:de:e6:d3:05:45:46:92:e1:42:58:29:54:e0: 93:49:83:0a:99:c4:c4:12:d1:5d:db:5e:6e:a6:9a: d2:73:d8:87:8f:9c:26:c7:88:67:4d:d2:64:d1:98: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1E:CB:55:A8:DC:16:3B:CF:B1:29:E6:0F:50:19:95:0B:CD:12:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b2:9b:16:a9:90:32:41:0a:f5:9a:ad:14:bd:e5:27:26:c7: 20:b9:1d:c3:17:6d:40:d7:9f:ec:99:41:25:9a:b9:31:88:74: 03:b2:3b:69:d3:38:b9:ce:cf:e8:63:9a:52:92:23:28:26:0c: d5:d7:6a:6c:c5:49:17:a6:77:83:82:bd:7b:b2:e6:11:2a:d5: 91:d4:c5:a7:75:bf:7e:8d:c3:d4:9a:70:33:4c:9f:41:a4:ad: 39:4d:b5:a5:9d:d9:64:ba:29:e5:24:7b:a0:b7:9c:12:54:52: 20:b3:4c:43:0f:a2:a2:50:f1:e5:b8:5f:e1:a7:86:22:a6:c0: 13:0a:75:0f:14:d8:5a:97:5c:b1:d3:0f:f6:45:88:26:a8:28: 60:2b:96:85:ca:fc:16:63:e8:81:7e:b6:5a:9d:cb:89:b8:86: 82:07:03:28:cd:c4:89:2c:4f:58:7a:8b:63:f6:41:41:9b:99: 2a:d1:0a:41:a0:c5:43:b2:2e:31:f9:dc:e2:9f:eb:57:95:11: a8:c9:7a:54:67:e3:f8:67:da:46:e6:f6:15:34:53:a2:ec:a5: 1b:f8:87:58:36:3a:a6:79:63:8a:7f:83:d1:37:ac:37:18:57: ba:85:31:c0:76:e0:73:30:d4:2e:e1:8b:6a:88:75:ad:e2:dc: cc:fd:c5:db -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuiE3/gWeAt4sxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzMyYTM5NjMtMTljNi00MDc4LWI5ZWYtYjJlYzEwZGMxZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp7fhl09b2tgHn3Jy+EY2h3X/eQpo7p8oR7V SiqKxDdKx9FJsNrOsNI+Lqn+Z88yBSTVI8WKtDmn8tB8wG9+Lxr9qmv8lIb13hIr DOQNYoCxRF7PXOtweHIuFheBogKv9i2HEZG0Y6bPKJdRnlOL8Lt7S4LmJr37glFq bJcAUKbbbgtZsshNnTEEcKtEoKWvPx/n+HNlUeD4DSzEFArK86BGESO9VOsIWejo 9dy3kfPC3n/V5WBj8gXz6TyekidQ7PnjX1FJPP4ziH7xjcQXLSAdh97m0wVFRpLh QlgpVOCTSYMKmcTEEtFd215upprSc9iHj5wmx4hnTdJk0Zhg2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEAey1Wo3BY7z7Ep5g9QGZULzRKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3ODg0YTYtZWQ1Ny0z ZmNlLWIyYzAtNWQ4YzY0ZTRhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFbKbFqmQMkEK9ZqtFL3lJybHILkdwxdtQNef7JlBJZq5MYh0A7I7 adM4uc7P6GOaUpIjKCYM1ddqbMVJF6Z3g4K9e7LmESrVkdTFp3W/fo3D1JpwM0yf QaStOU21pZ3ZZLop5SR7oLecElRSILNMQw+iolDx5bhf4aeGIqbAEwp1DxTYWpdc sdMP9kWIJqgoYCuWhcr8FmPogX62Wp3LibiGggcDKM3EiSxPWHqLY/ZBQZuZKtEK QaDFQ7IuMfnc4p/rV5URqMl6VGfj+GfaRub2FTRTouylG/iHWDY6pnljin+D0Tes NxhXuoUxwHbgczDULuGLaoh1reLczP3F2w== -----END CERTIFICATE-----Generated at Sun Apr 27 11:05:11 2025 by rpki-client