$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa File: 75a1a9ea-eeef-32a5-834a-85792af13ea3.roa (raw, json) Hash identifier: g6NIz1pH/AgAZp9I+VnopgqxrTEglu7SrlW0xh0i5Js= Subject key identifier: 12:75:A3:37:2D:FF:9D:97:E9:E3:EA:4C:44:27:37:09:B9:07:FD:39 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF63309F64262C73347B0C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8c:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:63:30:9f:64:26:2c:73:34:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=dcad64cf-e677-4037-8b38-0348f0ff7b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:83:1b:b8:bf:97:70:4a:95:f6:cf:8c:5a: 99:ba:d9:0e:12:da:5e:06:5d:50:15:74:56:67:87: 29:83:8b:0d:b3:35:d6:a5:0f:0e:17:fd:0b:d5:a0: 0f:15:2b:97:8e:8a:1c:2b:0e:e4:ac:73:de:2f:17: 0f:00:d1:9b:9f:46:da:3a:90:90:61:8f:6a:96:7c: 70:94:ee:3f:79:3d:cb:93:ec:f9:9f:90:03:bf:47: ff:19:43:e4:2f:1a:57:87:f8:12:29:aa:75:a7:e7: f1:89:27:71:68:3b:39:8d:90:55:d5:cc:73:9c:aa: f2:3a:74:4b:59:7a:d3:95:29:31:d3:e0:62:7f:5b: 3a:8d:78:27:31:fe:84:a9:f7:6f:4f:1e:96:13:03: ea:99:db:88:ff:ac:0d:3a:72:e7:9e:7b:37:c6:0a: a6:6a:de:76:ca:72:98:72:89:3e:a9:a8:83:5a:19: 7e:85:5b:01:38:95:9c:0a:50:65:27:ce:39:b2:42: 5a:42:f0:8f:26:1e:f5:99:0d:cf:46:49:9e:1f:1e: 72:d3:8c:a3:06:be:47:9c:79:ac:00:03:30:9c:52: 13:43:5e:11:49:53:35:a5:4f:a7:46:ea:49:05:64: 4d:8b:26:53:6d:91:85:ca:87:d8:4a:08:72:51:6e: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:A3:37:2D:FF:9D:97:E9:E3:EA:4C:44:27:37:09:B9:07:FD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:80:ba:05:1a:8a:fc:ed:4d:a3:8c:9e:a8:7b:9b:96:9c:68: 9b:b2:c1:f6:b5:ca:32:82:86:ab:8a:4a:53:15:f9:4f:89:ec: b9:cf:74:67:c1:3c:ff:fc:63:94:be:71:f4:99:b2:9b:8f:55: a9:2a:6e:0f:4d:40:51:56:da:5b:bd:56:0b:df:a4:40:2b:85: f4:11:a6:f6:04:5e:64:f6:97:30:39:bc:7e:f0:8b:9d:3f:76: 9f:fb:06:39:12:e8:f6:90:d5:4d:98:ff:f1:47:19:24:82:21: c7:1d:4d:eb:b1:82:6e:03:d9:ad:08:5c:ce:79:bc:8b:00:bd: e2:10:aa:a7:53:aa:96:fa:69:a9:75:e6:63:6b:4d:7d:11:d2: fc:79:61:ad:48:cd:67:3e:c6:bc:8f:94:0b:bd:7e:b6:69:5a: 36:a9:75:10:7d:26:2e:c1:80:be:cb:44:40:66:a8:53:38:5d: 3e:a6:7e:89:fa:28:d1:e8:85:a7:51:b7:76:5c:8b:f2:f4:b2: dc:0d:fc:cc:b6:49:b9:33:14:ad:cf:5d:81:9d:2a:d1:a0:0b: 80:9a:46:7a:3a:80:dd:e8:86:a3:98:76:56:01:82:22:05:cf: 10:6d:11:9f:e7:5d:3f:e3:32:6a:d6:b6:c2:b0:84:95:5a:bd: d2:15:7f:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72Mwn2QmLHM0ewwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGNhZDY0Y2YtZTY3Ny00MDM3LThiMzgtMDM0OGYwZmY3YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKCDG7i/l3BKlfbPjFqZutkOEtpeBl1QFXRW Z4cpg4sNszXWpQ8OF/0L1aAPFSuXjoocKw7krHPeLxcPANGbn0baOpCQYY9qlnxw lO4/eT3Lk+z5n5ADv0f/GUPkLxpXh/gSKap1p+fxiSdxaDs5jZBV1cxznKryOnRL WXrTlSkx0+Bif1s6jXgnMf6EqfdvTx6WEwPqmduI/6wNOnLnnns3xgqmat52ynKY cok+qaiDWhl+hVsBOJWcClBlJ845skJaQvCPJh71mQ3PRkmeHx5y04yjBr5HnHms AAMwnFITQ14RSVM1pU+nRupJBWRNiyZTbZGFyofYSghyUW7o3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBJ1ozct/52X6ePqTEQnNwm5B/05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzVhMWE5ZWEtZWVlZi0z MmE1LTgzNGEtODU3OTJhZjEzZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujJww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADYC6BRqK/O1No4yeqHublpxom7LB9rXKMoKGq4pKUxX5T4nsuc90 Z8E8//xjlL5x9Jmym49VqSpuD01AUVbaW71WC9+kQCuF9BGm9gReZPaXMDm8fvCL nT92n/sGORLo9pDVTZj/8UcZJIIhxx1N67GCbgPZrQhcznm8iwC94hCqp1Oqlvpp qXXmY2tNfRHS/HlhrUjNZz7GvI+UC71+tmlaNql1EH0mLsGAvstEQGaoUzhdPqZ+ ifoo0eiFp1G3dlyL8vSy3A38zLZJuTMUrc9dgZ0q0aALgJpGejqA3eiGo5h2VgGC IgXPEG0Rn+ddP+Myata2wrCElVq90hV/CA== -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:09 2025 by rpki-client