$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa File: 9d23743a-b916-3509-ac6e-63615d63d932.roa (raw, json) Hash identifier: aNuxaGOHPJoovwQCOM1ajRKmYGdxLYaVeSlkiZjBsVc= Subject key identifier: 94:2D:6B:93:DA:92:0C:7F:3E:47:81:01:1D:A5:49:BC:55:BB:77:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA4868A1CE3F2FEB22D2C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8d:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:48:68:a1:ce:3f:2f:eb:22:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9e37bcb1-1f32-4370-bcdf-e5e8d0d61dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:48:d8:bc:b7:6f:40:62:29:36:11:7c:5d: b3:68:1d:9e:e6:18:da:77:df:b5:7d:b5:20:d9:ee: cb:bb:86:56:88:b9:fa:4f:fb:88:d2:7d:77:26:7e: ca:ee:0f:59:a4:e5:60:6f:29:fd:92:1a:96:3f:53: 46:67:6b:dd:82:49:dc:90:e4:a4:85:b9:2b:ed:17: 4b:f0:b0:fa:d1:08:6c:0b:0d:34:9e:25:cb:08:85: 58:4e:4c:71:68:30:46:d3:2b:9a:f7:27:7c:8c:dd: 9d:a0:ed:ef:7c:c7:70:4b:56:88:91:b8:71:8d:7d: 5f:00:70:ad:a8:9a:0d:c0:67:e7:22:75:b6:65:01: 1d:30:53:f6:8b:bc:a8:e8:0c:4c:1d:e5:05:fe:45: 2e:f6:00:6b:02:5b:aa:d0:be:93:29:ad:44:b3:d5: c9:29:22:b7:50:4e:c0:b9:14:44:1f:91:5a:1e:a4: 1c:6d:db:46:96:16:77:bc:7a:d2:18:be:61:3e:78: 38:b9:fd:37:16:61:a0:59:57:e0:43:40:7a:c0:00: 59:bc:e7:93:1d:ec:fa:2b:ce:63:b0:42:21:41:d0: d3:62:c2:79:05:5c:dc:7c:78:34:12:52:51:0d:83: cc:cc:71:dc:bc:be:0e:cc:c4:23:80:84:3f:e2:6d: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:6B:93:DA:92:0C:7F:3E:47:81:01:1D:A5:49:BC:55:BB:77:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3a:15:61:ee:c4:8c:7a:f0:c7:ad:d9:22:fc:63:67:23:89: 5b:a7:24:4d:a6:94:f8:7f:35:6a:72:85:73:be:77:c3:ae:d7: 48:ce:45:c2:00:1f:0c:3c:3b:3a:8b:b1:8e:df:97:f9:7a:cc: 23:e9:ee:80:24:d1:5e:b2:b6:0c:17:a9:20:98:80:ad:7b:54: 17:7a:c5:a1:61:85:c6:b1:4a:bb:b2:d6:f9:b1:cf:3c:4e:46: 64:3e:06:b3:6d:3f:9e:5a:a5:41:dc:9a:a4:94:d4:53:cc:75: ad:82:4b:1d:b7:73:f9:51:fd:e1:87:68:bb:b7:85:3e:4a:8d: 0b:7a:9e:20:da:12:05:1e:1a:59:4e:be:f1:41:09:cb:a7:0d: 48:7e:b5:6d:e9:c4:09:1a:a2:f8:8c:8a:ee:b0:f6:be:89:e0: a4:da:39:a9:60:75:e9:5b:d4:d5:f4:49:a9:25:f0:d3:21:c3: 38:23:9a:57:15:cf:bb:07:6c:1f:7b:eb:28:c0:10:42:87:e7: af:ce:71:97:43:a8:6a:f5:8e:c2:18:13:ea:18:ec:38:b2:7b: fc:70:20:4c:43:2c:61:49:8d:03:af:79:5f:68:02:e7:59:20: 2b:4b:d3:3c:7b:36:b2:e3:68:f7:d9:98:46:f0:cb:30:1f:64: 92:d1:d8:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukhooc4/L+si0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWUzN2JjYjEtMWYzMi00MzcwLWJjZGYtZTVlOGQwZDYxZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht9I2Ly3b0BiKTYRfF2zaB2e5hjad9+1fbUg 2e7Lu4ZWiLn6T/uI0n13Jn7K7g9ZpOVgbyn9khqWP1NGZ2vdgknckOSkhbkr7RdL 8LD60QhsCw00niXLCIVYTkxxaDBG0yua9yd8jN2doO3vfMdwS1aIkbhxjX1fAHCt qJoNwGfnInW2ZQEdMFP2i7yo6AxMHeUF/kUu9gBrAluq0L6TKa1Es9XJKSK3UE7A uRREH5FaHqQcbdtGlhZ3vHrSGL5hPng4uf03FmGgWVfgQ0B6wABZvOeTHez6K85j sEIhQdDTYsJ5BVzcfHg0ElJRDYPMzHHcvL4OzMQjgIQ/4m2w/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJQta5Pakgx/PkeBAR2lSbxVu3cwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQyMzc0M2EtYjkxNi0z NTA5LWFjNmUtNjM2MTVkNjNkOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjjoVYe7EjHrwx63ZIvxjZyOJW6ckTaaU+H81anKFc753w67XSM5F wgAfDDw7Oouxjt+X+XrMI+nugCTRXrK2DBepIJiArXtUF3rFoWGFxrFKu7LW+bHP PE5GZD4Gs20/nlqlQdyapJTUU8x1rYJLHbdz+VH94Ydou7eFPkqNC3qeINoSBR4a WU6+8UEJy6cNSH61benECRqi+IyK7rD2vongpNo5qWB16VvU1fRJqSXw0yHDOCOa VxXPuwdsH3vrKMAQQofnr85xl0OoavWOwhgT6hjsOLJ7/HAgTEMsYUmNA695X2gC 51kgK0vTPHs2suNo99mYRvDLMB9kktHYLg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:05:04 2025 by rpki-client