$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa File: 24d66b91-511e-326a-8078-7ea7d3a8534b.roa (raw, json) Hash identifier: TjCuLMlxTHapaAigRjxy9rb3Lba+VoY9v9Iiihz2IoA= Subject key identifier: 4F:6B:A4:8C:D1:85:9C:F0:14:71:42:2D:5E:CD:DF:BF:DA:5D:9A:42 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF637E2B8BAC2ABE9D1200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8c:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:63:7e:2b:8b:ac:2a:be:9d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=b86f68c2-f567-45b7-a7b2-5ad3474d2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:a7:03:f7:18:b2:01:51:7b:b1:5a:ec:f2: 2c:fc:42:36:99:11:c8:31:cf:a9:f6:82:19:6d:f9: a7:3c:be:1a:cd:f7:e3:89:1a:95:61:97:42:37:13: 16:a9:d4:79:68:9d:d3:ca:1b:3e:34:95:f6:b1:66: 64:65:28:dc:d9:e8:8a:56:04:68:6f:3c:54:ec:b8: 5f:35:cc:d2:de:7f:c2:7c:15:5c:af:5e:cd:2b:81: 2b:9c:84:35:a0:91:59:bc:9f:12:f4:cb:b4:3b:da: 48:e4:b1:d5:b0:65:25:a6:0b:3c:56:67:f0:c0:46: 8c:cc:28:ec:77:ba:cd:4b:16:14:4d:3b:09:69:12: 30:f8:6d:6f:5e:21:49:bd:f7:2c:4a:d7:6f:06:e4: b8:a9:f9:3d:cc:15:2f:8c:67:dd:63:bf:3c:0f:19: 3c:4a:77:cd:cf:c3:20:21:58:86:fa:c2:02:ab:0c: 93:af:9d:73:b3:9b:6d:c7:9e:73:c5:ac:37:63:d0: 5e:b3:37:d5:61:33:3d:82:08:6b:07:94:c6:64:d2: 3c:73:ce:c4:1a:a4:95:6c:3c:85:a5:8a:fa:bf:86: 01:7b:a0:85:2a:f9:f4:db:97:b6:2a:52:dd:ab:ee: c6:01:5c:26:b2:26:ab:cc:75:3f:2b:ff:01:9f:7c: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:A4:8C:D1:85:9C:F0:14:71:42:2D:5E:CD:DF:BF:DA:5D:9A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:18:84:f4:c0:44:28:52:ad:8e:a7:fb:ce:ae:50:a0:e9:04: 59:d1:21:b1:3d:fa:89:b3:23:ca:f5:3c:33:36:2a:4a:4b:ae: 79:4b:be:d5:1d:8a:ce:ff:89:66:c3:c1:5c:fc:12:3a:6c:31: 78:82:96:7b:1c:f5:27:8a:8b:7f:90:d2:94:a2:9d:2d:b9:a2: 10:69:b4:96:8e:de:48:9b:a1:84:fd:3f:d6:07:93:56:95:9c: b5:41:e5:19:99:c8:a6:b0:03:b5:09:32:58:d7:64:45:6b:7b: 18:2a:ab:31:de:fc:2c:54:54:d1:d8:d6:ea:f3:45:eb:1c:b4: 80:8c:6e:c0:cc:cf:d5:4f:de:1a:f4:fd:95:47:01:53:81:7d: bb:7d:63:15:b9:32:2e:1c:f6:da:2f:9b:bb:c0:d9:88:b4:9d: c7:e0:9b:6b:3c:57:5c:2f:18:bc:b3:55:56:90:d8:ac:01:82: 37:54:4a:b3:be:5f:84:b6:4b:85:d2:33:a0:58:50:cc:b9:a3: a5:9f:21:8c:1f:67:8c:55:d0:31:6e:10:be:0d:44:ed:08:77: a4:b4:68:7f:75:d9:24:a3:6a:b6:bc:d8:dc:65:95:a0:de:b9: 0a:a9:d2:e4:f8:30:6d:8d:7b:e7:16:8c:71:df:6f:29:56:63: ad:c7:08:2f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72N+K4usKr6dEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Yjg2ZjY4YzItZjU2Ny00NWI3LWE3YjItNWFkMzQ3NGQyMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZunA/cYsgFRe7Fa7PIs/EI2mRHIMc+p9oIZ bfmnPL4azffjiRqVYZdCNxMWqdR5aJ3Tyhs+NJX2sWZkZSjc2eiKVgRobzxU7Lhf NczS3n/CfBVcr17NK4ErnIQ1oJFZvJ8S9Mu0O9pI5LHVsGUlpgs8VmfwwEaMzCjs d7rNSxYUTTsJaRIw+G1vXiFJvfcsStdvBuS4qfk9zBUvjGfdY788Dxk8SnfNz8Mg IViG+sICqwyTr51zs5ttx55zxaw3Y9BeszfVYTM9gghrB5TGZNI8c87EGqSVbDyF pYr6v4YBe6CFKvn025e2KlLdq+7GAVwmsiarzHU/K/8Bn3zQswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE9rpIzRhZzwFHFCLV7N37/aXZpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjRkNjZiOTEtNTExZS0z MjZhLTgwNzgtN2VhN2QzYTg1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujNgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMxiE9MBEKFKtjqf7zq5QoOkEWdEhsT36ibMjyvU8MzYqSkuueUu+ 1R2Kzv+JZsPBXPwSOmwxeIKWexz1J4qLf5DSlKKdLbmiEGm0lo7eSJuhhP0/1geT VpWctUHlGZnIprADtQkyWNdkRWt7GCqrMd78LFRU0djW6vNF6xy0gIxuwMzP1U/e GvT9lUcBU4F9u31jFbkyLhz22i+bu8DZiLSdx+CbazxXXC8YvLNVVpDYrAGCN1RK s75fhLZLhdIzoFhQzLmjpZ8hjB9njFXQMW4Qvg1E7Qh3pLRof3XZJKNqtrzY3GWV oN65CqnS5PgwbY175xaMcd9vKVZjrccILw== -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:43 2025 by rpki-client