$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa File: 18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa (raw, json) Hash identifier: MOUNMlZYAQdFtiNVKvvqq3sjpZpypvd+gEWPdZ0QcoE= Subject key identifier: A4:6D:79:27:35:8B:26:DB:53:9A:C4:B2:A5:9A:30:5F:22:9D:38:4B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849F2E527E346BDCFFA33B91F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2e8e:5c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:27:e3:46:bd:cf:fa:33:b9:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=28c9b635-2e1f-4c3c-8561-63bcd10cb7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:40:7a:e2:00:aa:4b:36:4e:4e:1c:20:ca:ec: b1:ed:6e:90:9e:e6:4c:31:e0:2f:c5:f8:77:34:d3: 25:9c:6d:ab:19:12:77:06:d8:c0:69:5f:0a:b9:e8: 4e:8f:e8:0c:f8:c8:8e:a7:20:91:6d:3a:28:84:36: 50:b4:cb:5d:33:6b:6f:95:cc:07:58:ff:eb:30:4e: 3a:aa:02:ee:16:82:69:09:02:e9:7c:0e:12:ec:0a: 3b:1c:d7:55:7d:84:2b:12:ac:13:68:2d:07:92:af: ee:da:db:b4:d9:2c:85:e6:14:75:1c:7f:f6:76:7d: 45:fa:a3:35:13:4f:36:20:ed:84:20:fb:69:3c:9d: 55:66:61:19:13:4d:0d:a5:02:2e:38:2a:76:e0:64: 56:33:72:04:aa:65:ed:8f:bc:76:08:a0:3e:4a:35: 78:23:8d:55:5b:19:85:91:09:78:ad:d3:10:fa:74: b1:41:74:99:a2:ff:03:78:e6:12:12:05:32:73:98: 34:9e:86:23:15:40:44:86:b7:25:d7:ab:07:c1:0e: 5d:04:33:db:3c:0a:30:70:d8:78:85:3c:46:4c:5b: 47:90:7c:86:b4:f1:32:ff:81:bf:28:cc:30:c4:9b: 8d:a0:64:0e:6b:75:68:b3:57:ca:7d:82:8a:3f:3f: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6D:79:27:35:8B:26:DB:53:9A:C4:B2:A5:9A:30:5F:22:9D:38:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:5c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:03:17:32:e5:be:3e:09:11:04:be:a1:93:67:59:43:13:60: 5f:91:09:76:a0:86:4d:31:32:a2:08:46:a7:d7:49:6d:10:dd: b9:d2:fb:72:68:73:b8:f1:63:e5:2d:f1:c7:93:5f:b4:b7:27: 62:ab:c7:4e:63:9b:55:3d:3e:43:4d:8b:58:7a:ec:26:17:89: df:f7:6c:58:d1:76:0b:6c:02:2d:64:8b:97:2c:a9:14:e0:b3: 55:c0:f7:df:61:6f:b5:4b:43:4e:75:0c:64:62:81:2d:ca:e6: a8:18:28:da:c8:28:82:8d:ff:13:2d:76:2e:a6:e3:5c:13:61: 21:46:c5:ed:57:d3:23:95:b0:1c:df:97:4e:48:13:75:78:32: 55:59:ea:65:2e:3f:3b:9d:9e:ce:fe:85:36:ab:39:eb:fa:97: d0:ed:8b:f4:d8:93:54:3d:ee:cd:fc:01:0a:68:0d:29:7f:26: d2:4c:b2:71:6f:67:7d:e7:b0:c4:c1:03:b1:54:7d:d7:53:f0: 59:84:66:59:f4:ac:ab:cb:16:d0:8e:59:5f:d2:0b:62:dd:dd: c3:72:64:59:bc:bf:10:78:e0:0f:a4:e5:e2:29:04:8f:29:12: 9e:19:6c:88:23:b1:c2:6d:c0:d9:e6:f0:9b:98:aa:0b:02:7e: 2c:fe:48:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5SfjRr3P+jO5H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjhjOWI2MzUtMmUxZi00YzNjLTg1NjEtNjNiY2QxMGNiN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEB64gCqSzZOThwgyuyx7W6QnuZMMeAvxfh3 NNMlnG2rGRJ3BtjAaV8KuehOj+gM+MiOpyCRbToohDZQtMtdM2tvlcwHWP/rME46 qgLuFoJpCQLpfA4S7Ao7HNdVfYQrEqwTaC0Hkq/u2tu02SyF5hR1HH/2dn1F+qM1 E082IO2EIPtpPJ1VZmEZE00NpQIuOCp24GRWM3IEqmXtj7x2CKA+SjV4I41VWxmF kQl4rdMQ+nSxQXSZov8DeOYSEgUyc5g0noYjFUBEhrcl16sHwQ5dBDPbPAowcNh4 hTxGTFtHkHyGtPEy/4G/KMwwxJuNoGQOa3Vos1fKfYKKPz8sOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKRteSc1iybbU5rEsqWaMF8inThLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMThjNzlkMTYtMDQzYi0z YTBjLTg4OGItZjhlYmZmOGQ3NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujlww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmAMXMuW+PgkRBL6hk2dZQxNgX5EJdqCGTTEyoghGp9dJbRDdudL7 cmhzuPFj5S3xx5NftLcnYqvHTmObVT0+Q02LWHrsJheJ3/dsWNF2C2wCLWSLlyyp FOCzVcD332FvtUtDTnUMZGKBLcrmqBgo2sgogo3/Ey12LqbjXBNhIUbF7VfTI5Ww HN+XTkgTdXgyVVnqZS4/O52ezv6FNqs56/qX0O2L9NiTVD3uzfwBCmgNKX8m0kyy cW9nfeewxMEDsVR911PwWYRmWfSsq8sW0I5ZX9ILYt3dw3JkWby/EHjgD6Tl4ikE jykSnhlsiCOxwm3A2ebwm5iqCwJ+LP5IeQ== -----END CERTIFICATE-----Generated at Mon Jun 16 03:43:40 2025 by rpki-client