$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa File: 5c693768-566f-3cb1-9ae0-9be4f12d911e.roa (raw, json) Hash identifier: djeZT2Edy67gqBFXTn3d70Uz28kModXuzsYK8m9tCdI= Subject key identifier: 73:50:69:53:9E:0E:32:56:D5:4B:C9:7B:9B:AE:FA:52:55:B6:BD:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1CDFC5887F4661425422980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa Signing time: Thu 24 Apr 2025 11:54:00 +0000 ROA not before: Thu 24 Apr 2025 11:54:00 +0000 ROA not after: Wed 23 Jul 2025 11:54:00 +0000 asID: 19905 IP address blocks: 2604:2e89:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:fc:58:87:f4:66:14:25:42:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 11:54:00 2025 GMT Not After : Jul 23 11:54:00 2025 GMT Subject: CN=5bb0d56c-b154-45d9-a8c4-b19a13196bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:85:0a:8b:60:28:e2:e0:f0:7c:ca:96:d7: 3b:1f:cd:92:50:58:f1:c9:65:64:90:4d:71:19:8e: 64:20:64:41:83:5a:69:fc:40:f5:6f:69:48:3d:c0: 3e:67:04:1b:c1:b8:43:5c:da:fd:38:20:b9:89:0e: e1:8f:74:c1:3e:49:7e:9e:78:fb:ad:c1:60:21:d7: 74:f1:07:65:67:c4:5c:c4:e7:75:ae:15:37:ec:23: 6e:1e:c6:14:3e:86:64:00:80:ba:7a:00:f0:ce:70: b3:13:c2:6b:f8:fd:1d:86:aa:4e:ac:1a:29:d0:67: 1c:f0:99:bc:b9:1d:3f:de:c9:2c:75:a2:af:5d:81: 47:ec:a2:1c:d9:7c:f9:88:f7:8d:d8:bc:fe:f5:e5: 14:7e:8e:43:8d:f6:89:9c:fd:6c:8c:7e:f4:76:1e: 20:07:4f:56:c9:96:2b:77:ba:6b:02:db:14:17:1f: 5d:7b:55:0c:73:b5:83:4f:37:e9:be:60:7c:35:6e: 64:d0:64:36:7d:22:59:ad:5c:e4:99:83:90:69:a4: b4:bf:b5:35:24:29:5b:00:ef:06:14:21:b0:ce:dc: d5:d4:d9:4c:0f:e9:22:0a:67:9a:ce:3b:6a:0d:99: df:09:3d:be:49:74:37:15:96:17:8d:7e:20:11:5a: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:50:69:53:9E:0E:32:56:D5:4B:C9:7B:9B:AE:FA:52:55:B6:BD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:9f:33:4c:04:71:10:ba:73:b7:a8:67:8f:56:e8:4b:33: 6e:1a:f8:50:b8:fa:fe:96:78:e8:d4:94:0b:72:cd:f6:2f:0e: 70:81:e1:28:01:3a:b4:50:29:23:c5:18:3a:97:2b:58:fd:8d: ae:78:bf:d8:56:9d:23:4d:0d:14:e9:7c:c3:2e:8a:03:ac:33: b5:dd:d5:0e:b7:a9:eb:79:89:84:26:01:2c:00:7e:df:d8:15: 8d:9f:6d:b0:66:81:1a:1d:b5:76:44:de:57:49:dd:83:e6:89: 31:2c:35:7a:3b:8f:6f:66:41:90:fc:12:75:02:37:d4:2e:cd: 4e:7f:46:1c:19:14:f9:5e:1d:d5:29:6f:80:66:d5:37:c7:0f: 48:f2:11:3f:f1:4f:09:c2:0d:02:07:83:38:61:2a:3e:d8:0e: bb:ab:a9:c4:96:7c:71:4a:a2:dc:0e:f8:66:48:f0:81:10:c8: a9:8c:1b:9d:25:56:54:eb:49:fd:85:6f:79:ec:a2:8c:72:a8: 7e:fa:20:96:1e:73:cb:38:90:48:c3:b6:3a:02:ce:3c:63:42: b4:40:14:bf:ca:f1:ed:a3:f1:3f:2d:47:93:cc:9f:68:f6:17: a2:b3:93:dc:e1:d5:89:2a:a6:70:c4:67:f8:bf:9f:6b:f6:f1: 52:5e:e8:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmhzfxYh/RmFCVCKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDExNTQwMFoXDTI1MDcyMzExNTQwMFowLzEtMCsGA1UEAxMk NWJiMGQ1NmMtYjE1NC00NWQ5LWE4YzQtYjE5YTEzMTk2YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTKFCotgKOLg8HzKltc7H82SUFjxyWVkkE1x GY5kIGRBg1pp/ED1b2lIPcA+ZwQbwbhDXNr9OCC5iQ7hj3TBPkl+nnj7rcFgIdd0 8QdlZ8RcxOd1rhU37CNuHsYUPoZkAIC6egDwznCzE8Jr+P0dhqpOrBop0Gcc8Jm8 uR0/3sksdaKvXYFH7KIc2Xz5iPeN2Lz+9eUUfo5DjfaJnP1sjH70dh4gB09WyZYr d7prAtsUFx9de1UMc7WDTzfpvmB8NW5k0GQ2fSJZrVzkmYOQaaS0v7U1JClbAO8G FCGwztzV1NlMD+kiCmeazjtqDZnfCT2+SXQ3FZYXjX4gEVp+qwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHNQaVOeDjJW1UvJe5uu+lJVtr0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWM2OTM3NjgtNTY2Zi0z Y2IxLTlhZTAtOWJlNGYxMmQ5MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuieAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhDefM0wEcRC6c7eoZ49W6Eszbhr4ULj6/pZ46NSUC3LN9i8OcIHh KAE6tFApI8UYOpcrWP2Nrni/2FadI00NFOl8wy6KA6wztd3VDrep63mJhCYBLAB+ 39gVjZ9tsGaBGh21dkTeV0ndg+aJMSw1ejuPb2ZBkPwSdQI31C7NTn9GHBkU+V4d 1SlvgGbVN8cPSPIRP/FPCcINAgeDOGEqPtgOu6upxJZ8cUqi3A74ZkjwgRDIqYwb nSVWVOtJ/YVveeyijHKofvoglh5zyziQSMO2OgLOPGNCtEAUv8rx7aPxPy1Hk8yf aPYXorOT3OHViSqmcMRn+L+fa/bxUl7oSQ== -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:04 2025 by rpki-client