$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa File: 5cf95f17-3faf-3248-9bee-3e328e385d93.roa (raw, json) Hash identifier: Z9hDMScBCcS2YIs/qUQj8+MYNlM3zPY4/fjqYFnibHg= Subject key identifier: 8C:42:45:F9:A8:8E:B4:27:56:83:7E:30:5A:03:5E:43:C9:EB:B7:EE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF601B582A86F95E3322C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e88:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:60:1b:58:2a:86:f9:5e:33:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f85a1620-de65-4a77-8901-d07d1b584663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:2d:e5:fb:b0:00:2d:5e:86:b4:0b:33:3b: 08:03:4a:8f:b8:89:a4:a9:5b:da:5f:98:dc:32:14: d0:0b:33:9a:a4:a9:ca:1f:7b:1f:26:14:c6:48:5a: 88:7c:2e:fb:11:83:3f:0d:8a:c5:e8:f3:4d:87:67: ef:17:4a:ba:2c:9c:35:0f:65:ca:76:9d:54:85:7e: 80:02:af:75:33:6c:3b:27:11:9d:42:9e:1a:76:8d: a5:92:58:48:d2:32:71:91:77:af:3f:87:8b:85:80: be:07:0a:be:0e:25:3b:d8:6b:29:04:4c:f7:c5:89: 2c:84:80:a5:e1:b9:d9:aa:ce:bf:97:25:13:3e:a9: 5c:d3:b2:9a:d9:df:77:83:21:c0:52:1b:fc:e7:4c: 98:b3:74:bb:1a:f3:59:e4:97:a9:a0:7b:82:49:54: b3:18:ef:f9:9e:75:f0:97:12:c3:e1:83:35:33:ec: fc:65:14:e7:39:ce:20:33:f1:c9:52:4f:d3:cf:2f: e3:1e:77:29:a7:50:c4:47:46:d4:c8:2c:2b:18:21: 66:98:c2:a9:b7:f4:58:da:e9:35:67:d4:ee:95:cb: e4:23:80:95:bd:89:4e:a7:b0:08:b9:1f:ff:78:b0: 22:e7:59:2a:90:59:78:7e:19:59:ba:a5:cd:28:00: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:45:F9:A8:8E:B4:27:56:83:7E:30:5A:03:5E:43:C9:EB:B7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:77:e3:a5:31:e3:18:89:5c:6c:0b:ba:4b:c0:88:d6:6c:9e: ec:ab:67:f8:d0:08:c7:38:53:90:32:10:8f:78:53:e0:ca:87: 6c:e4:b2:51:25:29:d0:b8:28:77:04:d9:97:5c:35:05:cc:03: 7f:72:fe:e6:7f:d2:dc:fa:82:1b:b9:15:b7:01:09:01:02:81: 98:df:2c:a7:b3:fb:5f:05:bb:75:33:24:48:91:9c:e8:ec:27: 12:a5:b4:45:0e:d7:8b:b6:4e:e6:78:4d:c2:af:a5:76:2e:f1: e8:77:f1:9c:9f:ac:92:01:01:34:11:45:1b:28:00:38:00:95: 91:f0:41:06:3a:41:c7:59:38:f4:0e:af:2d:c8:3f:ed:d8:38: 25:31:65:39:6c:3d:40:9b:a6:f6:5c:59:a9:cb:bc:2c:74:9b: d2:08:de:81:11:5d:7d:f8:ed:07:c6:a7:6b:1c:1f:ca:63:f3: 46:8e:2e:c1:4d:65:9f:56:58:a9:c8:b9:11:43:2c:74:f9:23: 93:4d:a5:7c:ca:64:69:f3:9e:6c:2f:7c:cb:92:81:b3:88:8d: ac:3e:58:b5:db:57:0f:74:46:89:c3:e9:03:e2:45:90:32:ff: d1:38:ec:1e:9a:24:94:f1:b5:75:10:91:9d:13:16:ac:0e:8a: b7:e1:4d:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72AbWCqG+V4zIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Zjg1YTE2MjAtZGU2NS00YTc3LTg5MDEtZDA3ZDFiNTg0NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZYt5fuwAC1ehrQLMzsIA0qPuImkqVvaX5jc MhTQCzOapKnKH3sfJhTGSFqIfC77EYM/DYrF6PNNh2fvF0q6LJw1D2XKdp1UhX6A Aq91M2w7JxGdQp4ado2lklhI0jJxkXevP4eLhYC+Bwq+DiU72GspBEz3xYkshICl 4bnZqs6/lyUTPqlc07Ka2d93gyHAUhv850yYs3S7GvNZ5JepoHuCSVSzGO/5nnXw lxLD4YM1M+z8ZRTnOc4gM/HJUk/Tzy/jHncpp1DER0bUyCwrGCFmmMKpt/RY2uk1 Z9TulcvkI4CVvYlOp7AIuR//eLAi51kqkFl4fhlZuqXNKAD59QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIxCRfmojrQnVoN+MFoDXkPJ67fuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWNmOTVmMTctM2ZhZi0z MjQ4LTliZWUtM2UzMjhlMzg1ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR3fjpTHjGIlcbAu6S8CI1mye7Ktn+NAIxzhTkDIQj3hT4MqHbOSy USUp0LgodwTZl1w1BcwDf3L+5n/S3PqCG7kVtwEJAQKBmN8sp7P7XwW7dTMkSJGc 6OwnEqW0RQ7Xi7ZO5nhNwq+ldi7x6HfxnJ+skgEBNBFFGygAOACVkfBBBjpBx1k4 9A6vLcg/7dg4JTFlOWw9QJum9lxZqcu8LHSb0gjegRFdffjtB8anaxwfymPzRo4u wU1ln1ZYqci5EUMsdPkjk02lfMpkafOebC98y5KBs4iNrD5YtdtXD3RGicPpA+JF kDL/0TjsHpoklPG1dRCRnRMWrA6Kt+FNZQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:11 2025 by rpki-client