$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa File: 239849b7-f817-3a68-aefe-cc03f9cfbf15.roa (raw, json) Hash identifier: Y8YEQjNSthKIGiCuPB8uHMrrHdtWuijCqphqw/4I2P8= Subject key identifier: 63:FA:EA:77:4C:F7:72:26:A2:34:38:DF:97:23:CA:4F:BB:A5:DD:74 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849134FC26179AF06886ED01960 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa Signing time: Tue 04 Mar 2025 10:54:53 +0000 ROA not before: Tue 04 Mar 2025 10:54:53 +0000 ROA not after: Mon 02 Jun 2025 09:54:53 +0000 asID: 30036 IP address blocks: 2604:2e80:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:4f:c2:61:79:af:06:88:6e:d0:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 4 10:54:53 2025 GMT Not After : Jun 2 09:54:53 2025 GMT Subject: CN=ecc0f9f4-776f-46db-ba8e-b846af209bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:ce:f5:71:53:ea:fc:1f:64:7a:44:db:f6: a5:fc:94:71:b8:3b:67:39:c1:6d:cc:59:ea:7e:af: 48:08:df:15:15:80:9e:f9:f9:0f:92:20:f4:9b:bd: 24:12:8d:5a:0b:66:20:02:bb:f5:df:f0:34:67:8b: 54:b7:ff:52:7f:1c:5e:fc:e2:d8:3d:16:a4:5f:91: 37:f9:ad:1f:77:f6:d0:1f:2b:00:e8:13:b9:ea:02: 6d:e8:fc:fb:62:1b:f6:4f:af:86:81:d0:05:44:31: e8:66:5b:51:c3:44:cd:ca:83:d0:b2:d4:f8:1b:80: 06:59:15:26:03:b8:26:1f:80:17:7d:89:96:81:e5: 16:ee:22:37:78:01:14:09:77:7d:b6:a2:3d:df:65: 70:25:09:d2:c8:6e:9a:cc:96:55:7c:96:15:8c:4b: 27:ea:27:2d:8a:75:ca:a9:ac:ea:fa:a8:f4:17:9d: 75:92:ea:32:97:59:c8:73:7b:85:20:cb:d9:89:f9: f8:2d:27:ab:c9:8a:ab:78:61:90:db:f3:d3:3c:3f: 88:1b:eb:f3:de:a7:cb:e2:13:ec:59:0b:36:87:50: 82:a1:56:01:c5:ee:dc:e2:8b:ed:31:84:d6:ec:92: 73:7f:de:b9:46:80:75:fe:da:d5:1f:db:13:d4:2b: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:EA:77:4C:F7:72:26:A2:34:38:DF:97:23:CA:4F:BB:A5:DD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:1f:4b:e3:d9:cc:33:06:2e:30:18:d9:61:d5:3e:07:e2:f6: dd:f2:1c:f6:5a:81:50:63:41:6a:09:d2:3a:44:f6:b4:87:0c: 74:31:2d:d4:84:d7:57:a8:7d:4f:96:2b:1c:47:d8:a7:81:df: 1a:df:2d:f2:92:27:ea:8a:e7:47:7c:6a:37:7b:93:32:3e:37: ee:ad:87:ad:45:2f:7b:9c:d4:1b:69:72:be:64:ef:03:d9:36: 10:51:6f:1a:7b:42:a3:f1:00:c9:3c:2e:35:00:30:93:07:d2: 3a:5e:9a:a2:a6:a1:13:9a:7b:3e:10:94:de:c5:80:49:46:d1: 12:40:3f:b8:28:ba:98:9a:5a:0a:4d:1f:d8:6a:a4:19:93:45: e3:63:57:8b:6b:85:9a:d1:77:5d:3b:6e:f4:ad:e9:a7:29:fb: 14:a4:ec:ce:fe:b1:a7:c7:41:d5:5f:51:11:bc:a1:1f:f7:7c: 53:31:79:78:e2:bb:fa:fc:04:35:98:57:35:f3:ab:cb:86:cd: b1:41:33:32:32:9f:ec:64:e5:02:d5:01:ee:b0:ef:9a:05:bb: 1a:3c:f3:33:a5:54:76:09:d5:3c:93:8f:22:be:2a:ea:3d:9c: a8:ed:72:9a:45:d7:5c:bc:d0:56:35:01:07:01:11:35:e9:fe: 57:be:09:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT8Jhea8GiG7QGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNDEwNTQ1M1oXDTI1MDYwMjA5NTQ1M1owLzEtMCsGA1UEAxMk ZWNjMGY5ZjQtNzc2Zi00NmRiLWJhOGUtYjg0NmFmMjA5YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMPO9XFT6vwfZHpE2/al/JRxuDtnOcFtzFnq fq9ICN8VFYCe+fkPkiD0m70kEo1aC2YgArv13/A0Z4tUt/9Sfxxe/OLYPRakX5E3 +a0fd/bQHysA6BO56gJt6Pz7Yhv2T6+GgdAFRDHoZltRw0TNyoPQstT4G4AGWRUm A7gmH4AXfYmWgeUW7iI3eAEUCXd9tqI932VwJQnSyG6azJZVfJYVjEsn6ictinXK qazq+qj0F511kuoyl1nIc3uFIMvZifn4LSeryYqreGGQ2/PTPD+IG+vz3qfL4hPs WQs2h1CCoVYBxe7c4ovtMYTW7JJzf965RoB1/trVH9sT1CvStQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGP66ndM93ImojQ435cjyk+7pd10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjM5ODQ5YjctZjgxNy0z YTY4LWFlZmUtY2MwM2Y5Y2ZiZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQugBww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATx9L49nMMwYuMBjZYdU+B+L23fIc9lqBUGNBagnSOkT2tIcMdDEt 1ITXV6h9T5YrHEfYp4HfGt8t8pIn6ornR3xqN3uTMj437q2HrUUve5zUG2lyvmTv A9k2EFFvGntCo/EAyTwuNQAwkwfSOl6aoqahE5p7PhCU3sWASUbREkA/uCi6mJpa Ck0f2GqkGZNF42NXi2uFmtF3XTtu9K3ppyn7FKTszv6xp8dB1V9REbyhH/d8UzF5 eOK7+vwENZhXNfOry4bNsUEzMjKf7GTlAtUB7rDvmgW7GjzzM6VUdgnVPJOPIr4q 6j2cqO1ymkXXXLzQVjUBBwERNen+V74J/Q== -----END CERTIFICATE-----Generated at Mon Apr 28 06:46:05 2025 by rpki-client