$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cf6df76-14e8-3517-bebe-826cf4e021b8.roa File: 4cf6df76-14e8-3517-bebe-826cf4e021b8.roa (raw, json) Hash identifier: ufAXwqIDu9gP1Ed0CBSzi76gfAQFSAgYAB3dzfxcwFY= Subject key identifier: 7F:FC:F6:65:7E:AE:27:46:0A:0F:7F:D9:D3:57:33:79:F9:AF:6E:D6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF60389CD9257A18029F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cf6df76-14e8-3517-bebe-826cf4e021b8.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e88:ec00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:60:38:9c:d9:25:7a:18:02:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=163b94de-cbb2-4fde-9c10-833afbff70a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:73:c6:bd:06:56:52:29:dc:6f:cb:c7:8f: 52:a1:7d:af:48:72:93:f3:b8:9f:be:e5:51:e2:33: 52:94:68:ef:6f:07:58:74:22:81:79:c3:4f:37:4f: 16:28:d2:30:b6:c5:0f:2f:c8:f4:a9:9c:5a:6c:a1: 54:65:0d:db:3c:71:74:2f:62:43:27:39:91:5c:ad: e9:b6:5e:f3:e2:60:49:24:ac:76:4e:8f:75:52:ed: e1:fd:98:3b:b4:d8:29:df:d3:b6:e6:49:c3:a9:91: 69:d7:11:ed:d0:57:15:71:3c:fa:ac:f8:de:60:1d: 7c:47:06:a6:d6:8c:b2:ec:f8:81:42:d2:0d:6a:63: 7b:97:f5:ad:41:7a:6d:49:85:0a:ef:16:9b:18:4a: c4:1c:24:6c:43:20:c9:b8:00:fa:9e:22:8f:7d:76: 10:54:b5:cc:69:b5:de:5d:1a:cd:2b:ac:a0:be:92: ab:b5:7d:01:c9:05:92:5b:30:5e:cb:de:8c:cd:b1: 21:7e:56:3d:65:79:5c:1b:aa:97:d4:62:16:cc:ea: 04:ae:4d:7f:a9:92:55:25:98:72:66:0a:cc:00:9f: 20:cd:a5:c1:e5:a0:69:9c:1b:f4:2c:d7:36:43:c8: e4:04:fc:b5:06:11:df:cd:b4:b5:99:4b:bc:bd:c0: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:F6:65:7E:AE:27:46:0A:0F:7F:D9:D3:57:33:79:F9:AF:6E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cf6df76-14e8-3517-bebe-826cf4e021b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:ec00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:df:7d:cc:99:b0:a0:15:b8:b7:e0:1e:5d:06:90:16:f9:cf: 54:ce:9a:01:92:ef:c9:f6:af:bc:ac:5f:8f:fe:85:f4:0a:2b: 74:2b:cc:a9:e2:78:33:7e:be:90:5b:51:6c:d3:1d:e0:fc:c1: 22:ec:a2:7b:d0:b0:3e:d4:55:7d:96:d1:26:bd:7b:a1:c9:09: 01:d8:4f:92:2d:04:78:d1:8d:76:80:d7:35:de:77:07:b5:d7: 79:9c:a7:65:4a:4e:a9:d3:e9:06:04:a4:6d:8c:e0:38:2e:f2: fb:bd:f6:fe:6c:b2:a5:3f:f0:92:88:c8:77:86:62:48:a9:d1: d8:ca:bf:44:11:04:03:b8:d8:73:05:29:dc:e3:24:e4:11:b0: 62:ea:ea:2a:88:86:37:60:4f:29:76:20:e2:fc:ff:31:dd:92: b0:ae:5d:e3:46:de:04:c8:1d:4b:04:83:90:56:7f:97:5a:89: b9:e7:0a:ae:49:03:15:c2:6b:59:a3:ce:64:e3:b3:44:1b:db: 4b:5f:d6:f6:e5:2b:77:5f:60:c3:7d:0e:6c:29:4d:2c:45:02: 53:f6:3d:52:3e:23:a8:e3:8c:9a:4d:86:58:1b:5b:dd:4c:0f: 26:dc:e4:fc:3f:c4:57:d7:79:22:00:4b:f2:49:2f:f5:51:59: ff:e9:fe:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72A4nNklehgCnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MTYzYjk0ZGUtY2JiMi00ZmRlLTljMTAtODMzYWZiZmY3MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtZzxr0GVlIp3G/Lx49SoX2vSHKT87ifvuVR 4jNSlGjvbwdYdCKBecNPN08WKNIwtsUPL8j0qZxabKFUZQ3bPHF0L2JDJzmRXK3p tl7z4mBJJKx2To91Uu3h/Zg7tNgp39O25knDqZFp1xHt0FcVcTz6rPjeYB18Rwam 1oyy7PiBQtINamN7l/WtQXptSYUK7xabGErEHCRsQyDJuAD6niKPfXYQVLXMabXe XRrNK6ygvpKrtX0ByQWSWzBey96MzbEhflY9ZXlcG6qX1GIWzOoErk1/qZJVJZhy ZgrMAJ8gzaXB5aBpnBv0LNc2Q8jkBPy1BhHfzbS1mUu8vcASBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH/89mV+ridGCg9/2dNXM3n5r27WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGNmNmRmNzYtMTRlOC0z NTE3LWJlYmUtODI2Y2Y0ZTAyMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV999zJmwoBW4t+AeXQaQFvnPVM6aAZLvyfavvKxfj/6F9AordCvM qeJ4M36+kFtRbNMd4PzBIuyie9CwPtRVfZbRJr17ockJAdhPki0EeNGNdoDXNd53 B7XXeZynZUpOqdPpBgSkbYzgOC7y+732/myypT/wkojId4ZiSKnR2Mq/RBEEA7jY cwUp3OMk5BGwYurqKoiGN2BPKXYg4vz/Md2SsK5d40beBMgdSwSDkFZ/l1qJuecK rkkDFcJrWaPOZOOzRBvbS1/W9uUrd19gw30ObClNLEUCU/Y9Uj4jqOOMmk2GWBtb 3UwPJtzk/D/EV9d5IgBL8kkv9VFZ/+n+CQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:05 2025 by rpki-client