$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa File: 32cf1c42-4bc7-304c-80fc-25ca24305072.roa (raw, json) Hash identifier: GsPiug+d01oJoryoAD3W1Fmh7ajqhjlW2Ci5YuGlKCg= Subject key identifier: 84:5F:A7:5E:80:44:B7:62:24:FE:72:1E:31:7C:0A:7F:4E:56:AB:67 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF64556553F7B455B7AF80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8e:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:64:55:65:53:f7:b4:55:b7:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d6677dd1-5b97-4324-b79c-9704015dcde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:14:bb:b8:72:c7:f2:cf:69:ca:58:66:cd: 41:e7:c1:67:35:26:76:ba:9f:c8:86:7d:76:b8:42: eb:3e:dd:23:56:40:6c:46:0b:50:c6:93:12:63:38: c8:ec:48:cc:5d:3d:1b:83:ce:62:8d:77:29:96:b3: c0:a1:eb:57:c0:53:4e:10:d5:33:e3:d4:3a:21:f4: 41:24:3a:8b:50:55:15:03:b1:e4:c0:d8:53:ca:a0: 23:58:69:2b:76:cc:98:19:2b:ae:76:80:bf:c9:a6: 12:83:1e:d6:05:be:25:34:6a:2e:72:84:fc:32:3c: 66:d5:0a:3c:3b:6a:a4:fd:08:2b:fa:41:e8:3e:6c: cb:5d:1f:d2:62:b4:00:7d:ac:8a:05:db:96:d6:f9: fb:ad:e9:ec:89:9a:96:8e:ec:85:1e:9e:f1:33:a8: 75:72:70:6b:35:1f:41:77:d8:ed:63:0f:80:51:f7: ae:b7:a3:e1:ad:93:57:a2:30:09:77:a1:b7:54:1a: 82:96:71:1d:b9:02:b5:2b:d5:9d:59:81:75:62:8c: a0:7f:0e:1d:1d:97:07:95:7f:7a:e8:14:b4:56:e0: e5:05:eb:bc:c4:e1:21:c2:7c:fc:5f:7b:98:ad:f7: f5:ea:5c:2a:0e:47:ce:41:91:5b:b7:b5:94:a6:c2: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5F:A7:5E:80:44:B7:62:24:FE:72:1E:31:7C:0A:7F:4E:56:AB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8a:ac:57:f5:f3:89:10:f9:69:bb:4a:ab:05:db:24:fa:c4: d1:e8:4a:74:65:5c:b9:25:93:c8:9d:b5:d6:c4:b9:2b:04:85: 69:8f:99:f5:5f:35:9b:3f:90:99:93:9a:9a:41:a3:5f:01:a0: 0f:68:44:de:13:76:45:d6:85:84:df:8c:80:18:d1:ef:ab:96: 74:07:76:ea:a3:dd:a5:49:d8:43:5d:1f:b9:41:2a:2b:d7:98: 3a:16:dd:63:16:de:0c:fa:78:cc:26:02:97:0e:da:38:e2:11: 23:0e:bc:40:15:b6:40:15:88:e7:3e:33:b1:56:b1:dd:9a:bc: f5:75:22:5a:6a:e2:31:7b:a8:6e:5f:34:f3:8e:71:1d:b8:11: b3:4b:58:fc:57:3e:35:5a:7f:bc:84:1d:44:37:11:26:2d:c0: f0:2a:45:5a:bb:b9:22:57:98:fa:e6:95:3d:16:da:e1:99:4d: 21:f7:19:f0:87:31:f9:82:fd:e5:c0:e3:51:58:94:71:21:da: ed:f2:ec:89:40:bf:4f:15:1e:41:10:f8:1f:77:13:e4:2e:03: 8f:48:7c:0e:2d:ad:b3:c7:49:87:76:82:e8:25:30:cb:ad:09: d3:16:23:e4:22:67:a3:3c:b9:eb:d0:e9:55:bb:01:0b:bc:41: 1e:e3:e6:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72RVZVP3tFW3r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDY2NzdkZDEtNWI5Ny00MzI0LWI3OWMtOTcwNDAxNWRjZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAEUu7hyx/LPacpYZs1B58FnNSZ2up/Ihn12 uELrPt0jVkBsRgtQxpMSYzjI7EjMXT0bg85ijXcplrPAoetXwFNOENUz49Q6IfRB JDqLUFUVA7HkwNhTyqAjWGkrdsyYGSuudoC/yaYSgx7WBb4lNGoucoT8Mjxm1Qo8 O2qk/Qgr+kHoPmzLXR/SYrQAfayKBduW1vn7rensiZqWjuyFHp7xM6h1cnBrNR9B d9jtYw+AUfeut6PhrZNXojAJd6G3VBqClnEduQK1K9WdWYF1Yoygfw4dHZcHlX96 6BS0VuDlBeu8xOEhwnz8X3uYrff16lwqDkfOQZFbt7WUpsKodQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIRfp16ARLdiJP5yHjF8Cn9OVqtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzJjZjFjNDItNGJjNy0z MDRjLTgwZmMtMjVjYTI0MzA1MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAYqsV/XziRD5abtKqwXbJPrE0ehKdGVcuSWTyJ211sS5KwSFaY+Z 9V81mz+QmZOamkGjXwGgD2hE3hN2RdaFhN+MgBjR76uWdAd26qPdpUnYQ10fuUEq K9eYOhbdYxbeDPp4zCYClw7aOOIRIw68QBW2QBWI5z4zsVax3Zq89XUiWmriMXuo bl80845xHbgRs0tY/Fc+NVp/vIQdRDcRJi3A8CpFWru5IleY+uaVPRba4ZlNIfcZ 8Icx+YL95cDjUViUcSHa7fLsiUC/TxUeQRD4H3cT5C4Dj0h8Di2ts8dJh3aC6CUw y60J0xYj5CJnozy569DpVbsBC7xBHuPmpQ== -----END CERTIFICATE-----Generated at Sun Apr 27 20:34:26 2025 by rpki-client