$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa File: 3b98607c-312f-3adf-a754-290a30263a4d.roa (raw, json) Hash identifier: XLAjU3b2RxaSCgHTyHKkXBLv9bjsFXQ1mMr6lhM6QLI= Subject key identifier: C8:79:04:F6:3A:00:76:E3:6E:E1:57:8D:2F:98:A0:04:FB:B6:43:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584996C499265E5410332F2C02C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e88:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:99:26:5e:54:10:33:2f:2c:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=bc200224-6e1a-4e49-a67e-6b4f09255717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:e1:a3:2a:84:a4:bf:14:99:81:74:5e:88: 5e:c8:e6:83:05:72:8e:30:f4:84:14:6f:6d:c5:68: d9:d3:c3:67:e2:00:49:45:e3:bb:bd:b5:90:0a:04: 51:57:4e:7e:c3:5b:ca:41:99:30:59:0a:df:1b:5b: c1:8e:0a:36:65:dc:48:bc:86:7f:d9:4a:8a:38:17: 78:de:47:d9:5a:fe:8d:57:66:f8:29:3d:20:75:92: 55:f1:8a:91:eb:8c:1b:4f:99:72:e4:71:61:d4:fc: 9b:0d:d2:8e:f8:53:ee:89:a3:f7:85:f6:3d:e5:6c: ff:f9:82:e0:de:f4:0f:94:67:4d:2b:ae:87:38:1a: 98:7e:f4:89:2f:08:a1:21:a7:e5:85:fb:5f:10:01: 43:df:9f:64:8d:8e:b3:ca:dd:9d:e2:af:a8:fc:e9: ff:12:77:2e:5a:e0:18:b7:f2:d8:b3:e1:c5:71:e0: f0:2d:c7:11:24:e0:4e:00:7b:55:2d:a6:9c:5a:54: 0e:d5:50:6f:bb:4d:3c:3d:60:9e:25:d9:79:5a:5e: 40:eb:9d:e5:dd:a9:d0:4a:79:fa:0f:90:f5:8c:58: 03:e6:99:f8:6c:33:3c:07:56:15:6d:a0:c0:a3:53: b2:c6:d1:ea:af:8b:c8:bb:49:22:24:a7:40:43:05: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:79:04:F6:3A:00:76:E3:6E:E1:57:8D:2F:98:A0:04:FB:B6:43:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:29:99:ca:8f:f0:73:ca:05:e5:85:29:7e:27:97:c1:95:37: 69:a0:09:ec:69:ce:29:83:33:5e:06:78:5a:6e:da:7b:34:54: 3a:bb:0e:a9:27:3c:80:c7:d9:55:ae:74:25:f3:08:fc:6d:af: f2:b3:49:90:c6:5e:8f:d0:d2:72:98:ff:23:7b:11:26:a1:b8: 5d:3f:37:e5:7b:04:d2:2e:cd:2d:c0:6f:26:79:56:61:44:a1: a7:55:00:cc:5d:c0:a4:b6:67:5a:bc:78:17:58:61:55:fa:bf: af:78:a5:aa:5b:cb:2a:b9:53:77:e1:1f:78:ec:99:b3:58:c6: 94:06:a8:aa:af:a9:bc:cf:28:88:33:00:af:8e:72:19:68:b6: 72:11:4f:c6:74:6d:d5:d8:69:a7:af:35:f7:20:9f:46:e3:c0: 18:9a:39:d4:02:36:3b:12:f9:d5:d2:21:21:b9:4b:8b:6e:8d: 4f:b3:6a:75:b3:74:e3:e0:f8:20:f3:96:05:57:5a:ed:04:27: b7:5e:41:72:66:b2:1f:25:b2:d2:a7:b1:3b:a9:0b:52:98:9a: 28:69:0a:db:99:38:49:55:30:b2:63:ed:aa:0e:61:a8:da:2b: 6b:23:f3:ca:1f:d4:b8:52:55:a4:14:fe:88:ee:9c:e3:95:16: 9e:50:23:8f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJkmXlQQMy8sAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YmMyMDAyMjQtNmUxYS00ZTQ5LWE2N2UtNmI0ZjA5MjU1NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafhoyqEpL8UmYF0XoheyOaDBXKOMPSEFG9t xWjZ08Nn4gBJReO7vbWQCgRRV05+w1vKQZkwWQrfG1vBjgo2ZdxIvIZ/2UqKOBd4 3kfZWv6NV2b4KT0gdZJV8YqR64wbT5ly5HFh1PybDdKO+FPuiaP3hfY95Wz/+YLg 3vQPlGdNK66HOBqYfvSJLwihIaflhftfEAFD359kjY6zyt2d4q+o/On/EncuWuAY t/LYs+HFceDwLccRJOBOAHtVLaacWlQO1VBvu008PWCeJdl5Wl5A653l3anQSnn6 D5D1jFgD5pn4bDM8B1YVbaDAo1OyxtHqr4vIu0kiJKdAQwUqCwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMh5BPY6AHbjbuFXjS+YoAT7tkOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2I5ODYwN2MtMzEyZi0z YWRmLWE3NTQtMjkwYTMwMjYzYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPCmZyo/wc8oF5YUpfieXwZU3aaAJ7GnOKYMzXgZ4Wm7aezRUOrsO qSc8gMfZVa50JfMI/G2v8rNJkMZej9DScpj/I3sRJqG4XT835XsE0i7NLcBvJnlW YUShp1UAzF3ApLZnWrx4F1hhVfq/r3ilqlvLKrlTd+EfeOyZs1jGlAaoqq+pvM8o iDMAr45yGWi2chFPxnRt1dhpp6819yCfRuPAGJo51AI2OxL51dIhIblLi26NT7Nq dbN04+D4IPOWBVda7QQnt15BcmayHyWy0qexO6kLUpiaKGkK25k4SVUwsmPtqg5h qNorayPzyh/UuFJVpBT+iO6c45UWnlAjjw== -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:36 2025 by rpki-client