$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa File: 5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa (raw, json) Hash identifier: 5LVvetSMrjAva9Bthre9ZFxjPvTAmt3kr97YBKp78NE= Subject key identifier: A9:EF:A7:D5:48:38:47:55:41:4F:14:34:20:15:8A:C6:31:D2:6D:E3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA48D2E020D1E92D869860 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8e:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:48:d2:e0:20:d1:e9:2d:86:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9e8ae508-abf4-4c14-b384-537f133cf3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:f7:0d:12:26:34:b1:b2:65:17:43:a2:0c: 3d:d6:c1:9e:91:cf:b8:2a:82:0c:6e:42:5d:a9:d0: b7:8d:e0:9b:5a:8e:cf:3b:5a:5e:d8:38:77:6c:f1: 42:80:19:e8:84:18:35:a1:8d:e0:a5:4b:8e:70:e1: 34:05:ca:91:4a:05:77:13:2d:6b:d0:af:37:6a:8b: 6d:13:a8:43:eb:fc:a5:a5:33:5d:38:69:53:6c:1e: 9b:23:a4:72:df:99:ce:7d:9c:90:c8:05:d6:54:a5: 84:1a:00:59:af:a1:5b:8a:03:e9:01:07:12:4e:fc: 85:33:74:f9:6a:17:c0:b7:7f:ec:d7:8d:05:37:f9: e6:42:aa:39:a7:15:9d:66:80:a2:37:35:e4:dc:b2: 76:9a:5c:7f:d9:06:86:90:48:05:88:43:df:29:ca: e7:a6:5e:33:e1:98:93:e7:5e:dc:06:c3:2d:d4:06: 20:57:f0:ab:f7:cc:60:68:0d:ac:66:33:8e:49:25: 32:59:05:d7:e2:d1:ea:46:f8:f2:07:e3:d0:01:ec: 44:0a:a8:99:e1:35:b0:71:e2:c9:40:5b:09:8d:03: 69:7f:e0:b6:7f:72:75:75:0c:e3:20:0f:bc:89:26: be:b3:25:ea:ae:56:39:8a:28:ea:b8:f8:0d:a2:b4: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EF:A7:D5:48:38:47:55:41:4F:14:34:20:15:8A:C6:31:D2:6D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a3:71:7c:d3:bd:c7:24:f3:77:96:bb:7f:e9:2c:fe:e4:ec: 1e:2f:bd:8b:b4:67:81:25:ab:c7:24:2c:08:cb:09:23:d3:b9: 36:70:93:e8:a2:7d:a0:ea:45:10:08:6d:b5:38:ec:8a:a9:45: 53:21:e1:31:d6:45:93:b2:7a:b1:fa:e7:d9:26:fd:3c:4d:df: 24:83:25:0e:42:c8:44:f1:45:da:d9:21:0b:07:cf:24:fc:e9: 33:20:44:ce:11:5a:b4:68:0e:35:9a:7d:a7:27:30:5b:03:11: d9:a4:d2:88:c1:ca:fd:c3:56:97:be:d4:f4:50:56:29:1d:fc: b8:26:fe:23:b7:a7:1f:19:d4:39:eb:69:59:0c:2b:9b:00:a7: 22:31:8a:7f:46:e5:09:fa:33:c0:8d:3c:65:15:6e:d6:97:d2: 48:53:f3:b9:91:87:25:89:d1:f8:80:27:bb:00:19:46:15:18: b1:88:af:33:10:00:c5:1e:de:7e:68:e2:6f:9b:8e:b5:cc:7d: b9:e8:c4:ae:01:9d:6d:68:d3:89:83:59:e0:fa:d3:ae:25:4e: b2:c2:49:78:57:70:f2:b3:2c:33:5c:12:d2:9a:c3:e0:85:fe: df:38:0a:b2:32:d3:e1:51:d0:4a:fe:ae:8a:08:26:18:38:34: a5:40:38:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukjS4CDR6S2GmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWU4YWU1MDgtYWJmNC00YzE0LWIzODQtNTM3ZjEzM2NmM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFb3DRImNLGyZRdDogw91sGekc+4KoIMbkJd qdC3jeCbWo7PO1pe2Dh3bPFCgBnohBg1oY3gpUuOcOE0BcqRSgV3Ey1r0K83aott E6hD6/ylpTNdOGlTbB6bI6Ry35nOfZyQyAXWVKWEGgBZr6FbigPpAQcSTvyFM3T5 ahfAt3/s140FN/nmQqo5pxWdZoCiNzXk3LJ2mlx/2QaGkEgFiEPfKcrnpl4z4ZiT 517cBsMt1AYgV/Cr98xgaA2sZjOOSSUyWQXX4tHqRvjyB+PQAexECqiZ4TWwceLJ QFsJjQNpf+C2f3J1dQzjIA+8iSa+syXqrlY5iijquPgNorRwSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKnvp9VIOEdVQU8UNCAVisYx0m3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWMxYzk0MzktZDNjNi0z NzlkLThhZjQtN2I3NDBjZjVhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujuQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOKNxfNO9xyTzd5a7f+ks/uTsHi+9i7RngSWrxyQsCMsJI9O5NnCT 6KJ9oOpFEAhttTjsiqlFUyHhMdZFk7J6sfrn2Sb9PE3fJIMlDkLIRPFF2tkhCwfP JPzpMyBEzhFatGgONZp9pycwWwMR2aTSiMHK/cNWl77U9FBWKR38uCb+I7enHxnU OetpWQwrmwCnIjGKf0blCfozwI08ZRVu1pfSSFPzuZGHJYnR+IAnuwAZRhUYsYiv MxAAxR7efmjib5uOtcx9uejErgGdbWjTiYNZ4PrTriVOssJJeFdw8rMsM1wS0prD 4IX+3zgKsjLT4VHQSv6uiggmGDg0pUA4YQ== -----END CERTIFICATE-----Generated at Tue Apr 29 09:02:02 2025 by rpki-client