$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa File: 3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa (raw, json) Hash identifier: 5jiW0Xsdb1k3Yen4/KdCTSN7JSnTuGeeL8UhyVvax7Q= Subject key identifier: 63:CF:4E:2C:02:F3:7D:7D:86:38:24:E0:09:83:76:34:C1:01:BA:65 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849E0BF8B6EC61BFC73948C1000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 30036 IP address blocks: 2604:2e8d:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8b:6e:c6:1b:fc:73:94:8c:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=340d319e-0256-4867-9bc7-6ea653bacaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:d8:06:b9:f1:6a:e8:48:f6:98:5c:44:11: eb:b5:9a:cd:37:0d:31:33:67:4a:99:1b:3c:2f:b6: 88:70:06:75:f0:94:12:1a:dc:d3:6a:23:21:e4:d8: 7a:7a:a2:57:4b:b1:8c:c6:a9:17:9b:11:29:81:9a: 3a:0d:b3:ed:59:8f:f4:d6:9f:62:86:2f:8f:1c:3c: 0d:49:43:42:e0:b7:27:82:86:ba:3d:0f:92:b8:82: 28:93:85:35:9d:47:47:17:02:6a:93:32:57:e1:25: 5a:e2:51:a0:ed:2b:64:4d:89:ee:de:b3:de:b7:06: f7:96:a5:c6:c1:a2:3b:e1:9f:ee:a5:46:c2:3f:65: be:09:95:8d:0e:5a:a9:ef:a0:fd:b2:02:21:86:63: a8:7e:51:1d:76:11:2f:59:8c:30:de:51:07:00:94: 2a:df:f3:58:3e:3e:d9:10:d8:7c:ef:64:38:0a:3e: 43:59:06:2f:c8:ae:97:ea:d2:71:5f:5d:86:24:30: 3e:14:f7:68:39:61:5e:fd:e1:1f:43:04:ea:45:05: da:7a:31:2f:a3:41:1f:c6:eb:bb:42:ca:c8:72:1d: 53:ce:35:7b:82:26:a9:af:24:6b:da:cc:64:45:ce: 80:7d:46:12:3e:7b:ce:9b:d4:d3:8a:de:46:51:90: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:4E:2C:02:F3:7D:7D:86:38:24:E0:09:83:76:34:C1:01:BA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3a:47:08:cf:30:ef:fa:35:18:3e:96:49:bc:5c:36:36:a7: 92:65:8f:65:21:a5:61:a9:c7:2f:73:d7:c3:02:97:96:6d:b5: fe:c5:a6:22:02:16:5c:3d:b4:73:31:c0:43:9d:16:b3:d6:3b: 8b:78:ce:ab:4f:1d:8d:dc:c2:37:bc:4d:24:80:32:87:b9:7e: 22:83:e6:be:54:04:63:8e:63:27:a4:74:ef:d9:40:9a:54:89: 68:68:6c:33:71:fa:94:cf:21:5c:6d:b6:9a:a3:f8:04:ac:46: 64:d8:7d:a9:da:50:81:27:80:28:64:87:a5:6f:46:f0:ba:ed: be:01:94:b7:58:34:f3:1d:eb:20:67:ff:61:3e:37:26:09:24: d7:3b:9f:ff:e0:19:6c:95:e7:27:f5:80:3e:23:ef:d7:ab:e7: 3a:e4:85:22:c5:66:2b:9d:be:c4:0a:a0:c7:ab:33:56:a1:4c: fb:aa:2f:e2:cc:03:32:11:93:9d:01:cc:77:5b:46:ab:de:7a: cd:61:38:b4:7b:00:70:05:c9:e5:a4:b3:a8:46:76:0c:d9:77: c7:4d:14:41:f2:f4:69:4b:c3:24:64:ef:43:3c:98:53:94:37: d2:81:69:b7:5d:5f:79:6a:c3:f2:39:4b:8a:89:0a:b2:df:82: 7b:3e:c5:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEngv4tuxhv8c5SMEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk MzQwZDMxOWUtMDI1Ni00ODY3LTliYzctNmVhNjUzYmFjYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE/YBrnxauhI9phcRBHrtZrNNw0xM2dKmRs8 L7aIcAZ18JQSGtzTaiMh5Nh6eqJXS7GMxqkXmxEpgZo6DbPtWY/01p9ihi+PHDwN SUNC4Lcngoa6PQ+SuIIok4U1nUdHFwJqkzJX4SVa4lGg7StkTYnu3rPetwb3lqXG waI74Z/upUbCP2W+CZWNDlqp76D9sgIhhmOoflEddhEvWYww3lEHAJQq3/NYPj7Z ENh872Q4Cj5DWQYvyK6X6tJxX12GJDA+FPdoOWFe/eEfQwTqRQXaejEvo0Efxuu7 QsrIch1TzjV7giapryRr2sxkRc6AfUYSPnvOm9TTit5GUZDbvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGPPTiwC8319hjgk4AmDdjTBAbplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2EwY2RhNTktOTZjNS0z MDc0LWFmZGYtMTU0M2ExMWEwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujdgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADTpHCM8w7/o1GD6WSbxcNjankmWPZSGlYanHL3PXwwKXlm21/sWm IgIWXD20czHAQ50Ws9Y7i3jOq08djdzCN7xNJIAyh7l+IoPmvlQEY45jJ6R079lA mlSJaGhsM3H6lM8hXG22mqP4BKxGZNh9qdpQgSeAKGSHpW9G8LrtvgGUt1g08x3r IGf/YT43Jgkk1zuf/+AZbJXnJ/WAPiPv16vnOuSFIsVmK52+xAqgx6szVqFM+6ov 4swDMhGTnQHMd1tGq956zWE4tHsAcAXJ5aSzqEZ2DNl3x00UQfL0aUvDJGTvQzyY U5Q30oFpt11feWrD8jlLiokKst+Cez7FNg== -----END CERTIFICATE-----Generated at Sun Jun 15 21:49:08 2025 by rpki-client