$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa File: 4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa (raw, json) Hash identifier: gZk6D0gGuenEk0ji0jWEaPqKsoE2+9S93tmum9kWHxk= Subject key identifier: 14:47:6C:78:11:0F:C1:CA:3A:A2:A5:AD:CF:E2:31:E8:D6:9B:42:69 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA2119160C5DCD1BA28F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8a:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:21:19:16:0c:5d:cd:1b:a2:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3bf02e88-f59b-4842-ae98-c5a3775a57d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:a0:f7:dc:74:9e:cd:42:41:9b:66:92:70: e2:6c:e0:fa:f0:7d:ce:dc:d1:60:4b:7f:66:56:47: b9:cb:de:c4:e1:12:f5:0e:dc:db:34:80:7c:c9:c2: 90:c6:36:a8:41:31:5b:a0:03:a4:14:13:62:de:de: 2f:da:c1:f5:32:93:c4:22:34:cb:65:53:12:45:51: 5a:81:30:b1:7e:dc:d7:44:f6:1b:ec:b2:90:ce:75: 74:42:13:6c:bb:8d:6e:80:8a:cf:18:a8:93:b8:85: 62:b7:06:22:13:cf:d8:44:5b:9e:7f:94:d9:56:a4: 0c:3a:58:2a:2b:93:0b:cb:f7:b8:8d:ae:2d:77:5e: e9:fc:a6:40:8e:92:ff:e1:b8:86:90:d6:ec:bc:f2: c3:e4:d5:35:d8:81:e8:51:57:e2:9a:56:e4:4e:3b: ce:a9:9b:d5:f0:99:f7:e7:5b:f5:94:7b:25:60:77: ea:dd:c0:44:82:cf:f1:d6:ad:2b:f3:f9:f2:ba:88: 26:80:7c:1c:48:39:cb:a7:5e:e3:0f:a5:6d:34:44: e2:13:b6:84:05:63:ae:09:f2:8c:f2:51:d5:2c:ce: 72:9f:1c:36:1d:5a:8b:92:6c:6a:d5:bd:41:e5:55: ef:ca:d9:7c:9f:52:fa:7e:77:eb:65:42:70:ef:77: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:6C:78:11:0F:C1:CA:3A:A2:A5:AD:CF:E2:31:E8:D6:9B:42:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:97:03:15:51:b4:1d:e0:d9:b4:59:84:50:db:65:4e:c6:7a: 5d:42:ce:02:ba:5e:c6:aa:71:df:fd:00:92:d1:10:e6:36:5c: dd:d2:79:3d:72:97:0f:e7:b7:ae:de:22:30:c5:8c:8e:d1:5c: a4:0d:2f:bb:1f:00:c9:f1:a1:c8:da:27:3c:ea:7c:16:60:4e: f8:93:25:2c:6d:bc:1b:23:81:5a:71:81:c3:78:14:f6:ec:93: c8:1b:a6:51:16:6a:44:fc:93:85:33:44:fd:52:a9:dd:19:cc: 2a:9e:ec:75:5f:d3:fc:25:e3:26:0c:c3:f9:26:44:4f:69:f7: 81:71:37:af:29:1b:ae:0b:55:9b:b8:05:99:74:71:98:cc:84: 20:35:54:ce:61:6f:62:62:ca:55:64:ca:d6:b6:63:73:59:8d: 8c:d1:b8:80:31:7e:63:9a:95:62:e5:d4:b4:6c:50:4b:59:eb: b5:7d:83:ae:55:70:35:09:18:92:7f:25:9c:65:e0:70:7f:f3: eb:0b:9e:e6:30:e8:09:7e:98:b6:cc:2c:e3:89:e2:0a:2b:69: 57:1e:05:98:98:fb:1b:df:e7:c6:63:5a:63:43:16:01:5e:10: 74:50:37:39:ca:86:6e:6b:e4:e0:9a:46:a4:3b:a6:7b:1f:ec: 00:cb:2d:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuiEZFgxdzRuij4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2JmMDJlODgtZjU5Yi00ODQyLWFlOTgtYzVhMzc3NWE1N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSmg99x0ns1CQZtmknDibOD68H3O3NFgS39m Vke5y97E4RL1DtzbNIB8ycKQxjaoQTFboAOkFBNi3t4v2sH1MpPEIjTLZVMSRVFa gTCxftzXRPYb7LKQznV0QhNsu41ugIrPGKiTuIVitwYiE8/YRFuef5TZVqQMOlgq K5MLy/e4ja4td17p/KZAjpL/4biGkNbsvPLD5NU12IHoUVfimlbkTjvOqZvV8Jn3 51v1lHslYHfq3cBEgs/x1q0r8/nyuogmgHwcSDnLp17jD6VtNETiE7aEBWOuCfKM 8lHVLM5ynxw2HVqLkmxq1b1B5VXvytl8n1L6fnfrZUJw73clsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBRHbHgRD8HKOqKlrc/iMejWm0JpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YzNhYWUtN2U0ZC0z YjY4LWFiYmUtZTEyZmQyYzJmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWJcDFVG0HeDZtFmEUNtlTsZ6XULOArpexqpx3/0AktEQ5jZc3dJ5 PXKXD+e3rt4iMMWMjtFcpA0vux8AyfGhyNonPOp8FmBO+JMlLG28GyOBWnGBw3gU 9uyTyBumURZqRPyThTNE/VKp3RnMKp7sdV/T/CXjJgzD+SZET2n3gXE3rykbrgtV m7gFmXRxmMyEIDVUzmFvYmLKVWTK1rZjc1mNjNG4gDF+Y5qVYuXUtGxQS1nrtX2D rlVwNQkYkn8lnGXgcH/z6wue5jDoCX6Ytsws44niCitpVx4FmJj7G9/nxmNaY0MW AV4QdFA3OcqGbmvk4JpGpDumex/sAMsthQ== -----END CERTIFICATE-----Generated at Tue Apr 29 01:55:27 2025 by rpki-client