$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa File: a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa (raw, json) Hash identifier: iIsWSMhTbf01Zbc4gxinhxNvozNvbzOksuSzIXvj8bY= Subject key identifier: CC:18:12:2F:3A:EA:F1:3B:69:C9:32:34:A0:1A:5D:60:FF:7F:77:A8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA21DA0ED31F5C71F65C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8c:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:21:da:0e:d3:1f:5c:71:f6:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2a011760-83ae-4cd1-9e6a-55651126657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:22:ce:af:b4:4e:2b:4c:9b:f0:5a:75:e8: 2e:e7:23:9b:05:f3:c2:0d:4b:01:03:9f:30:5c:91: 79:5e:9c:60:88:14:a6:16:03:58:26:9b:52:dc:c9: 94:f5:71:ae:2f:81:09:e3:10:eb:d2:b5:6b:cd:b1: 40:11:d9:24:ce:e1:c6:07:63:c9:62:13:80:f9:72: bf:50:fa:90:a5:59:84:ec:87:7b:f5:67:1d:9a:b1: 89:bd:02:ce:51:0b:c6:e3:1c:08:c4:43:ec:9b:85: b0:30:76:5a:31:13:72:52:24:70:ae:62:8a:a0:fa: b6:b6:79:45:0b:38:2b:fe:8b:7c:cf:78:42:c2:d7: 6c:cf:a3:4f:08:5f:7e:09:b9:9a:86:72:8d:ab:d6: 60:47:0b:4c:a4:46:07:60:ab:30:32:22:97:f2:7a: 17:3e:b6:3d:11:50:78:ba:94:0c:f1:19:61:e1:9d: 18:c2:80:1c:62:10:48:fa:9e:d2:e7:97:34:6b:1d: 90:3e:14:fc:05:48:ac:ac:63:23:d3:55:9e:2b:18: 60:73:08:00:8b:15:5c:b2:e6:8d:3d:75:58:74:fd: b4:b9:41:51:a6:44:e3:2d:b0:fd:50:ed:86:ed:b3: 38:99:51:e2:42:c9:18:b0:86:05:a6:f1:f5:6b:17: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:18:12:2F:3A:EA:F1:3B:69:C9:32:34:A0:1A:5D:60:FF:7F:77:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:87:e3:a9:c0:92:40:53:de:87:b6:bc:0a:3c:65:f7:53:57: 61:8b:27:e4:10:9c:41:34:89:d1:90:6e:f2:18:57:da:ef:c2: 75:48:38:37:e3:c9:ec:74:fd:af:60:09:46:a1:eb:e5:a2:0c: 7b:83:e8:24:91:a2:01:3c:83:8c:bd:74:5b:ea:9e:de:07:fd: 36:58:bd:12:cb:f6:ab:a2:76:bc:47:81:fb:32:14:b6:63:b6: e8:ba:62:6e:6e:0e:47:65:f5:d5:c6:0f:a0:60:9a:36:85:a5: 77:8d:79:3e:ef:20:c1:4c:01:4d:97:79:aa:40:2f:05:a6:cc: 99:5b:d4:26:d2:c1:73:0b:77:5c:2f:d3:63:ca:db:77:9f:8e: 35:bc:2f:bf:2e:9f:2b:d5:5f:dd:23:c9:49:f7:f3:01:57:f1: ea:d1:69:27:84:aa:ee:cb:f2:6e:59:94:12:fa:4e:07:d9:9b: 65:c0:a6:99:ee:d7:ac:b9:fa:ab:f2:15:3a:fc:20:31:f8:0a: 2e:34:fd:e4:a6:d8:a1:db:9f:17:8e:ce:e7:43:c3:3b:47:28: 5b:c3:d0:c2:1a:dc:04:aa:6d:d0:26:ca:cf:b5:86:c9:db:77: f6:1e:18:57:ab:26:66:25:30:9b:97:f4:26:a0:cf:4e:66:52: d6:22:ef:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuiHaDtMfXHH2XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmEwMTE3NjAtODNhZS00Y2QxLTllNmEtNTU2NTExMjY2NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifcizq+0TitMm/Badegu5yObBfPCDUsBA58w XJF5XpxgiBSmFgNYJptS3MmU9XGuL4EJ4xDr0rVrzbFAEdkkzuHGB2PJYhOA+XK/ UPqQpVmE7Id79WcdmrGJvQLOUQvG4xwIxEPsm4WwMHZaMRNyUiRwrmKKoPq2tnlF Czgr/ot8z3hCwtdsz6NPCF9+CbmahnKNq9ZgRwtMpEYHYKswMiKX8noXPrY9EVB4 upQM8Rlh4Z0YwoAcYhBI+p7S55c0ax2QPhT8BUisrGMj01WeKxhgcwgAixVcsuaN PXVYdP20uUFRpkTjLbD9UO2G7bM4mVHiQskYsIYFpvH1axdxSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMwYEi866vE7ackyNKAaXWD/f3eoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmYzUwYTktMGIzMS0z YWRiLWIyMTctNzM0MGIwMjM3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAE4fjqcCSQFPeh7a8Cjxl91NXYYsn5BCcQTSJ0ZBu8hhX2u/CdUg4 N+PJ7HT9r2AJRqHr5aIMe4PoJJGiATyDjL10W+qe3gf9Nli9Esv2q6J2vEeB+zIU tmO26Lpibm4OR2X11cYPoGCaNoWld415Pu8gwUwBTZd5qkAvBabMmVvUJtLBcwt3 XC/TY8rbd5+ONbwvvy6fK9Vf3SPJSffzAVfx6tFpJ4Sq7svyblmUEvpOB9mbZcCm me7XrLn6q/IVOvwgMfgKLjT95KbYodufF47O50PDO0coW8PQwhrcBKpt0CbKz7WG ydt39h4YV6smZiUwm5f0JqDPTmZS1iLvSg== -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:44 2025 by rpki-client