$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65ba44e1-585f-3faa-9b95-b107e2102ade.roa File: 65ba44e1-585f-3faa-9b95-b107e2102ade.roa (raw, json) Hash identifier: AX8FJgmZg138MHXxj9MjcQR21cy8ZPx0uo4nySSimxg= Subject key identifier: 4E:90:73:4F:53:2F:7E:FF:AD:84:58:DA:6D:00:3A:5A:E4:A2:01:2A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858499FC3A154594787CDF1DFEE30 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65ba44e1-585f-3faa-9b95-b107e2102ade.roa Signing time: Wed 23 Apr 2025 18:21:31 +0000 ROA not before: Wed 23 Apr 2025 18:21:31 +0000 ROA not after: Tue 22 Jul 2025 18:21:31 +0000 asID: 19905 IP address blocks: 2604:2e87:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:c3:a1:54:59:47:87:cd:f1:df:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 23 18:21:31 2025 GMT Not After : Jul 22 18:21:31 2025 GMT Subject: CN=b4ae1753-65cc-402c-942a-3dfc06acd304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:67:42:ae:80:02:14:41:0a:ec:ac:82:79: c9:d8:24:1c:46:83:12:75:ed:6c:63:0c:2e:06:b0: 89:4a:72:50:ac:5d:20:54:21:74:9c:25:e2:41:8b: 02:fe:fb:8b:d2:09:c3:ec:19:f6:51:55:80:a7:dc: 5f:64:7c:50:a0:c3:ef:05:74:70:b6:3e:8c:04:24: 95:22:99:78:ab:97:04:c6:ad:6b:83:84:c9:53:f7: 73:91:10:ff:ea:1a:f0:9d:a3:26:c4:0d:77:a6:19: 0d:5f:2f:98:17:ce:d1:b7:ba:3c:ce:d2:4b:a7:c0: ff:da:0f:a4:f5:fb:36:c5:0e:90:98:8d:2f:0a:61: 2a:9d:9d:24:89:b0:b3:d9:80:4b:44:fc:d4:5a:3e: 0f:bf:cc:72:c4:d9:da:3c:e5:28:c0:ed:46:8c:8f: 74:17:49:0b:9f:38:5b:b2:b0:fe:dd:c9:5c:40:2b: 8a:94:30:67:67:c3:9d:7e:cf:3e:f4:44:c8:03:6d: 1f:20:50:a6:06:63:2a:88:00:f0:a0:ae:4b:9a:8f: df:76:21:98:ea:8b:1b:ca:c0:0f:02:2f:0b:44:b3: d8:1a:99:6e:4e:b3:f6:3e:de:1f:db:94:4e:e7:5a: c4:87:3d:47:36:fd:3f:8a:da:66:ab:94:1f:38:e5: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:73:4F:53:2F:7E:FF:AD:84:58:DA:6D:00:3A:5A:E4:A2:01:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65ba44e1-585f-3faa-9b95-b107e2102ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:75:a1:35:d3:51:18:97:00:14:d3:01:eb:63:a5:b1:17:50: 64:7c:d5:56:a1:89:8a:91:3c:c7:d7:be:45:3c:6b:02:e6:0d: b0:ee:ef:5f:d8:f5:d6:ac:ef:b2:05:f8:f2:4d:80:a3:49:42: 02:e7:3d:77:9e:c6:52:68:37:c0:5f:dc:d1:a6:6c:ec:e5:0e: d9:17:5f:82:ea:ff:2f:e4:78:df:ad:3d:67:c7:f6:b6:90:e5: 9f:c3:ac:e5:83:0c:d3:e1:85:e0:e9:8d:91:e6:06:a6:9b:70: a1:86:05:ae:b8:e8:26:7b:0f:53:a4:d7:c0:42:d3:7f:81:5d: 4c:68:a6:cb:b7:c4:8f:d9:6a:2c:fb:57:a8:2a:7c:b8:98:ca: 21:fe:28:1c:95:29:22:26:2f:c2:1a:82:11:17:05:0d:74:2b: ed:ec:11:4f:f2:d9:c3:7a:18:86:6d:51:ba:b7:1d:89:71:03: ac:bd:d5:39:0f:fd:7c:31:6c:7e:27:db:64:ef:f5:67:1d:0a: be:3c:84:01:a8:66:37:b9:64:e0:66:43:c5:3d:ea:65:ba:ea: 87:58:a5:14:c9:db:66:40:41:f1:52:b2:9a:5c:47:92:b9:5e: 3f:e1:51:ad:ff:33:24:f2:af:59:07:8e:3a:3b:3a:88:c4:7b: 02:a0:e7:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmfw6FUWUeHzfHf7jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMzE4MjEzMVoXDTI1MDcyMjE4MjEzMVowLzEtMCsGA1UEAxMk YjRhZTE3NTMtNjVjYy00MDJjLTk0MmEtM2RmYzA2YWNkMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiidnQq6AAhRBCuysgnnJ2CQcRoMSde1sYwwu BrCJSnJQrF0gVCF0nCXiQYsC/vuL0gnD7Bn2UVWAp9xfZHxQoMPvBXRwtj6MBCSV Ipl4q5cExq1rg4TJU/dzkRD/6hrwnaMmxA13phkNXy+YF87Rt7o8ztJLp8D/2g+k 9fs2xQ6QmI0vCmEqnZ0kibCz2YBLRPzUWj4Pv8xyxNnaPOUowO1GjI90F0kLnzhb srD+3clcQCuKlDBnZ8Odfs8+9ETIA20fIFCmBmMqiADwoK5Lmo/fdiGY6osbysAP Ai8LRLPYGpluTrP2Pt4f25RO51rEhz1HNv0/itpmq5QfOOUhzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE6Qc09TL37/rYRY2m0AOlrkogEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjViYTQ0ZTEtNTg1Zi0z ZmFhLTliOTUtYjEwN2UyMTAyYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU3WhNdNRGJcAFNMB62OlsRdQZHzVVqGJipE8x9e+RTxrAuYNsO7v X9j11qzvsgX48k2Ao0lCAuc9d57GUmg3wF/c0aZs7OUO2Rdfgur/L+R43609Z8f2 tpDln8Os5YMM0+GF4OmNkeYGpptwoYYFrrjoJnsPU6TXwELTf4FdTGimy7fEj9lq LPtXqCp8uJjKIf4oHJUpIiYvwhqCERcFDXQr7ewRT/LZw3oYhm1RurcdiXEDrL3V OQ/9fDFsfifbZO/1Zx0KvjyEAahmN7lk4GZDxT3qZbrqh1ilFMnbZkBB8VKymlxH krleP+FRrf8zJPKvWQeOOjs6iMR7AqDnBA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:45 2025 by rpki-client