$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa File: 849f8645-e463-3c64-a0a0-fb03b27e32a3.roa (raw, json) Hash identifier: yhnhAKHQtGN8ddSYnCT32DI5Iiu7Kv8tP5KQLfo0ZY4= Subject key identifier: 64:E4:8D:6D:A4:60:AC:29:EA:CB:CC:48:EE:15:1F:F5:D8:65:5B:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA4897D423C65DD497B080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8e:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:48:97:d4:23:c6:5d:d4:97:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0575dd37-3a4d-4887-8b44-a3b9decbaa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:a7:65:a6:3c:79:17:09:43:05:00:8e:48: 94:ff:8e:cd:46:25:4b:a9:3b:99:b4:79:61:16:3f: d6:75:c5:d2:78:0c:58:8e:d4:6d:19:7f:81:29:98: 43:65:21:82:72:73:3b:b9:b8:29:81:78:99:34:ea: 6a:56:9e:23:82:11:5a:90:55:1f:42:24:22:ad:5c: d6:b8:08:f0:b9:a4:55:94:dd:17:e2:11:87:b0:c2: aa:1c:ff:e7:78:90:bd:b4:22:ad:f2:57:d3:cf:59: 8d:97:c1:aa:47:3b:b6:6b:86:7f:4a:6a:a4:dd:91: 15:cb:3c:84:7a:37:93:5d:b0:db:f0:c7:b8:33:73: cc:ec:9d:de:a5:1b:03:21:ad:83:e0:59:0f:2a:b2: a3:d9:58:9a:aa:14:1a:66:69:91:31:8a:aa:46:37: 46:9a:37:d4:78:02:ab:c1:a4:ee:f4:0d:c2:d9:2b: e5:61:40:7c:3f:9d:48:ff:34:40:b1:74:06:aa:5f: cb:2c:5e:16:9a:e3:e5:ed:18:f1:b9:df:b7:c2:f4: 3d:df:f9:57:2a:bc:d1:95:54:7f:1b:e9:6f:a5:f2: 75:6d:8c:b6:c0:89:60:e8:21:79:73:13:fa:28:bc: a8:56:73:9d:26:ba:40:1f:06:01:a3:3f:bb:fc:59: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E4:8D:6D:A4:60:AC:29:EA:CB:CC:48:EE:15:1F:F5:D8:65:5B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:01:39:56:a0:26:d3:b3:88:40:23:8a:f8:9d:73:dd:b6:1a: c8:a4:0e:b6:9d:3d:0a:5a:65:97:bf:32:a4:5e:c3:92:72:3c: 72:4c:42:21:bb:ca:da:c3:c4:28:35:de:b2:3d:10:51:db:0f: dc:6c:58:76:5d:ee:6f:55:3f:e4:6b:c7:1e:7e:61:91:3b:69: 0f:c7:c3:0e:b0:ca:11:4e:bc:6d:fe:7a:42:47:a2:84:e4:46: 4b:3c:3a:d8:7f:f2:31:93:fe:bd:81:aa:aa:73:34:f5:3f:63: 4f:51:d2:1f:2f:df:54:f5:6e:28:33:95:59:b9:e5:e3:fc:18: be:86:c8:71:05:68:2a:d4:fc:61:53:0b:a4:d1:9b:a3:1d:16: 4a:56:cd:5c:97:a7:1d:0e:43:f8:20:de:67:94:69:eb:66:b4: 34:19:5a:e4:20:bc:ef:8c:6a:1e:97:66:91:22:08:64:51:13: a5:5e:f6:66:ea:e4:b3:ea:35:a8:f5:43:11:bb:1f:a7:1c:42: 71:60:2e:03:d8:b0:18:b2:92:7f:f1:9c:1b:bb:7a:71:40:a3: 38:36:07:95:72:2e:4b:5e:33:ad:48:30:ad:54:a1:59:a8:ce: 25:ce:3c:a6:d2:8a:bc:17:22:d7:12:18:b9:60:39:75:10:40: ae:a1:4b:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukiX1CPGXdSXsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDU3NWRkMzctM2E0ZC00ODg3LThiNDQtYTNiOWRlY2JhYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0anZaY8eRcJQwUAjkiU/47NRiVLqTuZtHlh Fj/WdcXSeAxYjtRtGX+BKZhDZSGCcnM7ubgpgXiZNOpqVp4jghFakFUfQiQirVzW uAjwuaRVlN0X4hGHsMKqHP/neJC9tCKt8lfTz1mNl8GqRzu2a4Z/Smqk3ZEVyzyE ejeTXbDb8Me4M3PM7J3epRsDIa2D4FkPKrKj2ViaqhQaZmmRMYqqRjdGmjfUeAKr waTu9A3C2SvlYUB8P51I/zRAsXQGql/LLF4WmuPl7Rjxud+3wvQ93/lXKrzRlVR/ G+lvpfJ1bYy2wIlg6CF5cxP6KLyoVnOdJrpAHwYBoz+7/Fn7RwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGTkjW2kYKwp6svMSO4VH/XYZVvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQ5Zjg2NDUtZTQ2My0z YzY0LWEwYTAtZmIwM2IyN2UzMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiwE5VqAm07OIQCOK+J1z3bYayKQOtp09Clpll78ypF7DknI8ckxC IbvK2sPEKDXesj0QUdsP3GxYdl3ub1U/5GvHHn5hkTtpD8fDDrDKEU68bf56Qkei hORGSzw62H/yMZP+vYGqqnM09T9jT1HSHy/fVPVuKDOVWbnl4/wYvobIcQVoKtT8 YVMLpNGbox0WSlbNXJenHQ5D+CDeZ5Rp62a0NBla5CC874xqHpdmkSIIZFETpV72 Zurks+o1qPVDEbsfpxxCcWAuA9iwGLKSf/GcG7t6cUCjODYHlXIuS14zrUgwrVSh WajOJc48ptKKvBci1xIYuWA5dRBArqFL8g== -----END CERTIFICATE-----Generated at Sun Apr 27 02:36:45 2025 by rpki-client