$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa File: 8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa (raw, json) Hash identifier: N2wpLLzU2J3E0/vNFYHKeiSAoL4hInr87h9eknIItmU= Subject key identifier: 61:90:00:35:54:5A:D4:73:81:83:DD:53:DA:B5:D3:C4:FC:FD:90:B0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF6962D2A57F8ED1A028A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8f:8380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:69:62:d2:a5:7f:8e:d1:a0:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=443aa44c-f8f6-45a5-b2c0-19be89790514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:8a:25:98:45:6b:c0:8d:46:31:cb:3e:85: 36:7e:3a:46:55:81:22:33:41:81:ef:4e:53:70:39: 1f:6c:ad:16:27:06:a8:37:45:63:1a:e5:f3:e4:7f: 85:aa:32:c6:c3:39:b2:4d:e0:71:cc:ee:7f:7c:9f: b8:fb:98:3b:62:32:d5:04:3e:52:c4:56:81:26:47: cf:d9:cd:ec:2d:26:08:99:00:53:e8:0c:67:3f:7c: 3b:4f:db:ad:22:85:df:99:ca:83:f5:2a:07:56:43: e2:d1:1a:a7:17:a1:d5:cb:9f:0c:b7:b4:09:da:10: 70:6d:03:10:e5:a5:53:27:3d:89:d8:44:62:c0:05: a0:0f:a9:e2:d0:45:24:91:ce:5b:dc:6a:7b:3d:c2: 96:75:1e:0a:7b:dd:1d:7e:c8:3f:5f:db:6c:4c:5d: 88:50:79:c1:d3:f2:78:b1:62:a2:9e:f1:b3:fc:20: 36:76:bd:75:2f:3e:8d:07:28:31:67:d2:ee:a7:1f: 48:1c:36:a7:1e:9e:8d:53:44:55:88:a7:08:8f:ed: d3:12:ec:53:ab:bc:76:df:42:d2:1b:56:90:6d:be: 88:bd:71:10:e7:ba:d5:c4:a8:f6:83:53:df:ca:ab: 40:1d:9d:fd:85:03:54:99:7e:5a:26:c2:29:14:fa: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:00:35:54:5A:D4:73:81:83:DD:53:DA:B5:D3:C4:FC:FD:90:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:8380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:92:39:15:e8:c3:ae:f7:26:6b:03:5e:dc:a0:b6:b5:39:22: 74:31:92:31:07:52:b3:c8:d8:b3:e5:7c:e9:e3:bf:a1:ab:86: 32:bd:7d:0c:09:bb:cb:07:75:ee:9f:87:13:f4:5c:57:99:ca: cd:cf:44:14:3d:20:73:bb:89:c7:58:11:e5:86:f1:24:d6:62: ea:bf:1b:fa:7f:ec:79:06:12:83:e1:92:6d:36:5a:51:97:b4: 73:95:45:09:1b:a5:14:5a:7c:28:50:92:a7:96:25:c6:99:b4: da:ee:39:bf:3b:e1:43:79:f3:d5:aa:f8:fc:2b:4d:4d:cd:6c: b9:c7:4a:21:fd:e3:5b:d0:5c:33:45:07:92:fe:94:3d:df:9f: 9d:d2:be:9f:d8:2b:91:0f:8f:86:31:0a:93:ad:ad:db:b2:e4: 6f:b3:67:22:12:de:01:1b:ed:5e:48:70:d8:a9:85:c2:50:07: fa:01:d7:41:81:25:ac:32:3c:38:49:cf:ea:ae:5d:40:89:42: 53:6f:e3:8a:fa:53:9b:46:9b:a3:8c:a7:dd:b7:3b:85:6b:74: 53:c3:f8:30:6d:4d:dc:f9:4a:56:0f:74:0f:03:9c:f4:b5:28: 9c:c0:81:74:3c:c0:26:95:db:84:45:35:25:dd:84:cd:ea:d1: bb:9f:c5:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh72li0qV/jtGgKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDQzYWE0NGMtZjhmNi00NWE1LWIyYzAtMTliZTg5NzkwNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+KJZhFa8CNRjHLPoU2fjpGVYEiM0GB705T cDkfbK0WJwaoN0VjGuXz5H+FqjLGwzmyTeBxzO5/fJ+4+5g7YjLVBD5SxFaBJkfP 2c3sLSYImQBT6AxnP3w7T9utIoXfmcqD9SoHVkPi0RqnF6HVy58Mt7QJ2hBwbQMQ 5aVTJz2J2ERiwAWgD6ni0EUkkc5b3Gp7PcKWdR4Ke90dfsg/X9tsTF2IUHnB0/J4 sWKinvGz/CA2dr11Lz6NBygxZ9Lupx9IHDanHp6NU0RViKcIj+3TEuxTq7x230LS G1aQbb6IvXEQ57rVxKj2g1PfyqtAHZ39hQNUmX5aJsIpFPojKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGGQADVUWtRzgYPdU9q108T8/ZCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI4MjY5OWMtZTUwZS0z ZGI2LThmOTItMzBhOGM5ZjVhYzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4OA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGSORXow673JmsDXtygtrU5InQxkjEHUrPI2LPlfOnjv6GrhjK9 fQwJu8sHde6fhxP0XFeZys3PRBQ9IHO7icdYEeWG8STWYuq/G/p/7HkGEoPhkm02 WlGXtHOVRQkbpRRafChQkqeWJcaZtNruOb874UN589Wq+PwrTU3NbLnHSiH941vQ XDNFB5L+lD3fn53Svp/YK5EPj4YxCpOtrduy5G+zZyIS3gEb7V5IcNiphcJQB/oB 10GBJawyPDhJz+quXUCJQlNv44r6U5tGm6OMp923O4VrdFPD+DBtTdz5SlYPdA8D nPS1KJzAgXQ8wCaV24RFNSXdhM3q0bufxQc= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:22 2025 by rpki-client