$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa File: 342a0229-47cb-3dad-968f-aea82e2e4558.roa (raw, json) Hash identifier: VDrbKywaf6y5tW+YS4DsyhnSbKADe/OWMKmTZ0BmN/4= Subject key identifier: 62:B6:19:C4:8E:34:57:79:AB:66:99:65:5F:AF:94:F7:C4:59:20:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA1AAF9A0E24D276AE5580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8e:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1a:af:9a:0e:24:d2:76:ae:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1aaa4db7-01b5-420b-88cf-5b70dff12671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:08:5d:15:24:1a:2c:53:1f:a6:cc:b0:f4: 9e:6a:68:b7:30:48:7c:dc:f8:8b:0a:04:45:91:77: 70:aa:f3:8f:d4:df:87:8d:b0:87:96:1d:a8:28:42: ff:81:e1:d6:12:a5:93:14:48:ab:a6:38:8f:31:c9: d3:b9:a8:6c:3b:75:fd:96:77:b8:13:53:55:16:b4: 93:ae:72:2c:72:12:43:6f:dd:da:7a:e5:d7:bf:0a: b6:6d:f2:44:b6:3a:31:87:44:13:3b:dc:ad:12:d3: 47:39:d1:5e:14:4e:7a:b8:e5:52:3e:28:1d:85:09: c8:f2:81:11:d6:88:eb:7d:69:ef:a9:87:71:87:f0: 19:4a:b1:1e:ea:30:1b:9f:25:fb:71:c4:0c:ae:da: 14:c5:89:48:dc:d5:ca:1f:b7:73:75:36:2f:46:5f: c4:3f:c4:18:1a:ed:3b:d4:d1:8c:be:7b:ec:7f:4a: c9:bf:b8:3a:17:d8:48:a0:c8:5d:d8:c9:d1:9b:05: ba:1b:8e:1d:26:c2:da:c6:df:ed:9c:07:31:e7:11: 8e:6d:4e:6b:7d:a0:20:62:6c:b7:ce:be:d2:b2:77: 61:da:55:ab:0e:16:12:0e:d0:57:80:fd:a6:97:e5: 93:bf:a9:eb:82:d1:93:e6:f8:b0:29:f7:55:4a:85: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B6:19:C4:8E:34:57:79:AB:66:99:65:5F:AF:94:F7:C4:59:20:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/342a0229-47cb-3dad-968f-aea82e2e4558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:35:b6:90:1e:2d:b5:6c:d8:95:26:66:b4:f4:c1:fe:46:10: 16:73:46:13:29:7d:11:44:68:5e:e0:1b:09:84:3a:63:ca:7b: 4a:19:41:a5:17:f1:c7:d1:a7:32:b2:39:5e:c5:48:cf:4e:21: aa:2f:01:5c:ad:54:85:e5:7e:48:ce:69:23:6d:51:08:49:77: 2c:dd:c9:40:97:3e:1d:b0:b5:1d:dd:10:6e:c6:8e:80:17:ec: 19:fc:de:63:8f:62:f8:b1:ff:2e:82:94:13:b5:65:a8:06:0d: a9:79:4c:f8:25:dc:bd:96:21:80:95:8b:29:0b:11:f6:94:d7: 49:60:ef:5f:8c:7f:72:63:f4:c4:36:fa:95:23:46:f1:54:25: b0:f5:d8:39:e2:9f:f5:1b:9f:18:2d:58:03:2e:00:f8:c2:4d: 52:b3:71:bf:b9:09:ee:62:66:60:cf:8e:d0:e8:8f:10:38:41: fb:77:7f:0f:75:a3:7b:c0:e0:b3:cc:06:7e:4d:d0:01:0b:b9: c3:ae:82:2c:8a:ca:a9:a0:3e:57:b4:d7:4d:f9:13:68:e4:5c: 38:72:b8:ee:12:4e:1d:f0:d4:e7:e1:ae:0a:d3:39:a9:29:5b: e6:5d:77:69:67:ec:4c:56:67:76:44:11:e2:42:23:31:c1:68: 46:83:21:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuhqvmg4k0nauVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWFhYTRkYjctMDFiNS00MjBiLTg4Y2YtNWI3MGRmZjEyNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8kIXRUkGixTH6bMsPSeami3MEh83PiLCgRF kXdwqvOP1N+HjbCHlh2oKEL/geHWEqWTFEirpjiPMcnTuahsO3X9lne4E1NVFrST rnIschJDb93aeuXXvwq2bfJEtjoxh0QTO9ytEtNHOdFeFE56uOVSPigdhQnI8oER 1ojrfWnvqYdxh/AZSrEe6jAbnyX7ccQMrtoUxYlI3NXKH7dzdTYvRl/EP8QYGu07 1NGMvnvsf0rJv7g6F9hIoMhd2MnRmwW6G44dJsLaxt/tnAcx5xGObU5rfaAgYmy3 zr7Ssndh2lWrDhYSDtBXgP2ml+WTv6nrgtGT5viwKfdVSoXviwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGK2GcSONFd5q2aZZV+vlPfEWSCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzQyYTAyMjktNDdjYi0z ZGFkLTk2OGYtYWVhODJlMmU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujoQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGDW2kB4ttWzYlSZmtPTB/kYQFnNGEyl9EURoXuAbCYQ6Y8p7ShlB pRfxx9GnMrI5XsVIz04hqi8BXK1UheV+SM5pI21RCEl3LN3JQJc+HbC1Hd0QbsaO gBfsGfzeY49i+LH/LoKUE7VlqAYNqXlM+CXcvZYhgJWLKQsR9pTXSWDvX4x/cmP0 xDb6lSNG8VQlsPXYOeKf9RufGC1YAy4A+MJNUrNxv7kJ7mJmYM+O0OiPEDhB+3d/ D3Wje8Dgs8wGfk3QAQu5w66CLIrKqaA+V7TXTfkTaORcOHK47hJOHfDU5+GuCtM5 qSlb5l13aWfsTFZndkQR4kIjMcFoRoMhmg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:07:52 2025 by rpki-client