$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa File: 5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa (raw, json) Hash identifier: PTuNltCzua3Z6Rh15v95nzKrZROVzoYfBwC5YG+7yuQ= Subject key identifier: FF:F4:9E:D3:DA:28:D7:D6:53:69:AC:C5:D0:35:36:1E:E9:82:F8:20 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA3817C4556B6E71E44280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8a:6400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:38:17:c4:55:6b:6e:71:e4:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=48043829-53ea-4da6-9798-f3e60cd3a750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:c0:14:d3:cd:9a:d2:09:16:db:0c:49:c5: 62:ed:80:40:b8:1b:5c:17:17:b0:a9:a3:a1:9a:3c: 50:fe:de:6a:38:32:46:25:e5:04:bb:97:03:39:40: 91:32:23:a8:02:f6:4c:f2:3c:40:fc:42:3e:81:1a: 61:42:cc:60:71:55:e1:0e:82:85:c9:5a:a5:da:9c: 3f:b3:55:e1:12:d9:2b:a9:80:7a:b7:1e:f5:f0:e4: 4d:36:ec:6c:d4:9e:e0:49:dc:c7:68:0c:62:83:0d: 99:fd:7c:b5:dd:4b:ca:8d:df:36:c2:f8:0b:f4:60: 7b:8f:db:10:e1:76:cc:c8:c3:3e:ab:73:fb:76:89: 96:45:fe:6a:2f:5f:eb:bf:b2:5f:53:45:3d:66:00: 88:56:61:9e:4f:30:4e:26:60:6c:dc:2e:72:8d:f0: c8:a5:4d:f9:c2:c3:a8:80:e1:64:e6:0a:e6:93:41: 71:1e:1e:38:02:6a:00:2c:fd:f8:f5:48:b9:27:7c: 59:c2:6e:74:91:2f:7d:c3:ca:c7:d1:af:a8:b8:34: fa:7b:40:04:b5:18:66:04:c7:27:a6:8f:05:a0:fe: c9:35:f9:f4:fa:c4:4a:ec:3d:78:d7:05:bb:bd:bc: b5:d0:45:3d:e4:b9:e6:01:cf:a6:4e:4d:4b:d9:40: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:9E:D3:DA:28:D7:D6:53:69:AC:C5:D0:35:36:1E:E9:82:F8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:6400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4d:36:31:ff:10:b7:94:c5:e2:f0:98:43:19:b4:6c:64:dc: 74:c1:92:ea:80:cc:d5:71:91:58:cf:37:68:e5:dc:5f:2d:7b: f9:0a:92:a9:a5:12:d0:d4:e9:34:b2:08:9c:df:d2:ca:f1:2f: 7e:6d:54:2d:ae:95:8a:ae:7a:71:cc:20:9d:62:fe:ef:0a:c5: 24:ec:97:82:0c:4a:7f:cf:a6:c7:a2:4f:a6:9d:9f:5e:b0:bf: bc:4c:49:a8:20:bf:d7:d4:64:da:11:92:ae:7c:54:17:15:9b: da:17:59:dc:31:a5:6a:bd:65:03:2a:22:16:61:d7:2f:77:a6: fd:44:37:a6:f7:78:b7:68:3c:d8:e5:13:fc:f4:59:ef:83:4b: fd:53:25:97:d0:18:00:5b:65:62:65:b3:4a:ea:fe:cf:60:b9: 16:86:b5:b3:a1:db:4d:4f:ec:3e:14:46:73:19:77:9f:dd:c2: 64:03:df:69:b8:a0:03:9f:c2:32:cb:b4:5a:36:70:b9:09:16: ad:96:91:51:23:54:a1:36:ad:a0:90:a3:19:ca:40:f2:4b:0d: 98:ba:e8:f4:da:a3:f2:38:c6:1d:21:23:a9:23:11:59:51:b6: 33:85:e5:57:67:23:e0:91:23:fd:40:5b:70:1e:53:99:cb:42: d6:92:e6:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkujgXxFVrbnHkQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDgwNDM4MjktNTNlYS00ZGE2LTk3OTgtZjNlNjBjZDNhNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2fAFNPNmtIJFtsMScVi7YBAuBtcFxewqaOh mjxQ/t5qODJGJeUEu5cDOUCRMiOoAvZM8jxA/EI+gRphQsxgcVXhDoKFyVql2pw/ s1XhEtkrqYB6tx718ORNNuxs1J7gSdzHaAxigw2Z/Xy13UvKjd82wvgL9GB7j9sQ 4XbMyMM+q3P7domWRf5qL1/rv7JfU0U9ZgCIVmGeTzBOJmBs3C5yjfDIpU35wsOo gOFk5grmk0FxHh44AmoALP349Ui5J3xZwm50kS99w8rH0a+ouDT6e0AEtRhmBMcn po8FoP7JNfn0+sRK7D141wW7vby10EU95LnmAc+mTk1L2UAFowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP/0ntPaKNfWU2msxdA1Nh7pgvggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWMzYjg4ZDctZGQ4Zi0z NDU0LWJiOWEtZmM3OTliZTI3NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuimQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYU02Mf8Qt5TF4vCYQxm0bGTcdMGS6oDM1XGRWM83aOXcXy17+QqS qaUS0NTpNLIInN/SyvEvfm1ULa6Viq56ccwgnWL+7wrFJOyXggxKf8+mx6JPpp2f XrC/vExJqCC/19Rk2hGSrnxUFxWb2hdZ3DGlar1lAyoiFmHXL3em/UQ3pvd4t2g8 2OUT/PRZ74NL/VMll9AYAFtlYmWzSur+z2C5Foa1s6HbTU/sPhRGcxl3n93CZAPf abigA5/CMsu0WjZwuQkWrZaRUSNUoTatoJCjGcpA8ksNmLro9Nqj8jjGHSEjqSMR WVG2M4XlV2cj4JEj/UBbcB5TmctC1pLmvg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:38 2025 by rpki-client