$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa File: 45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa (raw, json) Hash identifier: Oxq+KfZ4SJHtPJ/nOi0wKacgZFnHyC9W0m7ORbgL464= Subject key identifier: 95:0B:86:7D:05:1E:0F:98:75:AB:B0:A9:CF:93:8C:DC:2A:7A:85:61 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584996C49B895089733CFB92E8C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e8c:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9b:89:50:89:73:3c:fb:92:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=fad2c5af-7058-457e-ba5e-d1e8b1aa89d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:87:0d:6e:5f:de:e9:dc:63:5f:16:53:51: 53:f2:ff:6e:51:fd:b2:dc:f3:62:c9:eb:68:48:36: 84:3f:c5:3f:c6:90:1b:29:ab:ee:c3:b4:02:df:6e: 37:01:36:9a:d8:47:d0:7c:99:e7:b3:08:b6:17:52: 6e:33:1c:56:82:1a:90:18:de:87:cf:0c:2f:42:d7: cd:4c:cf:2c:f6:e8:e1:dd:a4:6d:0b:26:04:29:83: 3d:6d:a2:53:a3:b0:18:13:ba:f8:78:43:56:e2:36: 1d:a7:35:f4:4c:87:d7:1c:3b:6f:8d:f6:ea:f4:05: 4f:c3:28:14:75:b4:94:f9:c5:1f:c3:b5:06:ec:b4: 54:fe:8e:d2:fb:f1:2e:f3:ca:be:28:0f:cd:39:37: 46:a0:67:c8:ff:cf:77:15:c6:03:23:5d:3e:c9:7c: 25:17:35:43:52:57:a0:a2:45:9d:8f:e5:23:0a:c0: 30:79:37:46:45:f8:33:42:8e:8f:9e:da:ad:99:e4: c9:90:45:f2:f9:f6:40:a9:2a:0a:2d:10:25:ae:4a: 73:e6:8a:d1:11:68:80:f6:73:1c:64:0c:70:4a:8e: 6d:bf:2d:fd:76:7f:30:c6:5f:48:ad:d1:1f:46:37: 8e:97:a8:67:5f:e6:47:b6:73:fd:a7:3f:c6:cc:9b: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0B:86:7D:05:1E:0F:98:75:AB:B0:A9:CF:93:8C:DC:2A:7A:85:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:49:ae:e6:6d:73:55:a8:c0:28:be:2b:1e:9b:8f:85:dd: d3:87:97:fe:fa:0d:ac:ed:5a:95:e5:5f:a9:61:75:6d:e0:97: ef:36:3b:ac:f2:3d:7e:5d:2f:aa:97:7e:bc:7a:92:7f:66:a1: 57:e8:eb:0e:c3:fa:3a:e8:9f:70:d4:60:20:06:87:5f:8a:97: f2:15:40:18:85:6b:6b:e5:eb:ee:b5:3c:10:1d:3c:1b:2d:b3: f0:ed:51:a4:97:9a:a2:ee:4d:73:72:b3:89:11:cc:db:d8:5c: 74:1a:a8:be:98:63:45:47:22:ff:a7:17:78:d3:7a:e8:11:3b: 93:82:c4:83:64:fe:8f:70:07:f6:e2:08:27:3c:34:63:e3:8b: 57:a2:01:58:9f:59:98:bf:f6:6d:44:f6:24:fb:21:0f:a0:aa: 24:5f:1f:9b:ee:48:65:f3:85:a3:58:e1:8e:c2:d4:31:5b:7f: e9:a4:c5:89:ad:fb:72:cc:e9:8a:cf:7e:30:2c:87:1c:37:25: b3:ca:ed:db:8b:61:59:4e:d5:2d:68:97:53:ba:4c:61:27:88: 21:98:24:44:80:7d:61:f3:1f:5b:4b:cb:5c:3f:e7:6c:0a:e0: a1:ce:f1:3a:63:ed:a0:21:bc:12:9d:41:4a:67:58:cc:0d:25: 2d:2b:e1:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJuJUIlzPPuS6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmFkMmM1YWYtNzA1OC00NTdlLWJhNWUtZDFlOGIxYWE4OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3mHDW5f3uncY18WU1FT8v9uUf2y3PNiyeto SDaEP8U/xpAbKavuw7QC3243ATaa2EfQfJnnswi2F1JuMxxWghqQGN6HzwwvQtfN TM8s9ujh3aRtCyYEKYM9baJTo7AYE7r4eENW4jYdpzX0TIfXHDtvjfbq9AVPwygU dbSU+cUfw7UG7LRU/o7S+/Eu88q+KA/NOTdGoGfI/893FcYDI10+yXwlFzVDUleg okWdj+UjCsAweTdGRfgzQo6PntqtmeTJkEXy+fZAqSoKLRAlrkpz5orREWiA9nMc ZAxwSo5tvy39dn8wxl9IrdEfRjeOl6hnX+ZHtnP9pz/GzJvwCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJULhn0FHg+Ydauwqc+TjNwqeoVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDVlOTk0M2QtNTY0MS0z OGExLWI4ZmEtZmUyN2Q2Y2MyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiOVJruZtc1WowCi+Kx6bj4Xd04eX/voNrO1aleVfqWF1beCX7zY7 rPI9fl0vqpd+vHqSf2ahV+jrDsP6OuifcNRgIAaHX4qX8hVAGIVra+Xr7rU8EB08 Gy2z8O1RpJeaou5Nc3KziRHM29hcdBqovphjRUci/6cXeNN66BE7k4LEg2T+j3AH 9uIIJzw0Y+OLV6IBWJ9ZmL/2bUT2JPshD6CqJF8fm+5IZfOFo1jhjsLUMVt/6aTF ia37cszpis9+MCyHHDcls8rt24thWU7VLWiXU7pMYSeIIZgkRIB9YfMfW0vLXD/n bArgoc7xOmPtoCG8Ep1BSmdYzA0lLSvh4A== -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:03 2025 by rpki-client