$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa File: a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa (raw, json) Hash identifier: hcn/5POInxlaS+n+GXpEQRcus6B4hAuIHng2YcylBA0= Subject key identifier: C2:79:9D:1C:47:71:68:27:7B:1A:04:19:81:0F:19:B2:81:CB:AE:44 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858499FC3A157197C886FF6D0FC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa Signing time: Wed 23 Apr 2025 18:21:31 +0000 ROA not before: Wed 23 Apr 2025 18:21:31 +0000 ROA not after: Tue 22 Jul 2025 18:21:31 +0000 asID: 30036 IP address blocks: 2604:2e87:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:c3:a1:57:19:7c:88:6f:f6:d0:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 23 18:21:31 2025 GMT Not After : Jul 22 18:21:31 2025 GMT Subject: CN=93c72846-9269-44b7-9a98-4c17a34a2c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:36:a9:ea:72:eb:2d:35:da:b0:e2:d2:fe: 74:1d:b5:fd:a8:0c:4d:7d:78:0f:c7:1b:82:42:f8: ef:8b:bf:21:a9:fb:9b:c3:d2:8e:d5:07:76:1d:b3: 09:40:fa:26:c2:08:0a:23:0a:5a:c7:f4:54:6b:b0: 90:3b:e4:6b:9b:5a:19:b6:59:85:4b:f2:f8:4a:9a: 5f:98:80:89:de:9c:79:61:68:5e:73:b0:f5:27:44: bd:38:67:e3:13:5d:ee:df:49:c2:dd:54:6d:de:8a: 17:18:7d:08:fb:af:cf:7b:99:ce:1d:4b:33:81:ca: 9f:b5:06:bf:31:1f:87:14:e8:76:4e:80:2d:a8:62: a5:1b:01:d5:95:0e:ed:f4:fe:49:82:5c:e5:cc:04: 55:96:32:33:7b:a5:aa:ae:25:7d:47:e1:fe:8f:cb: c5:a0:a7:0b:6c:5e:e9:9a:51:83:f2:7c:2f:f1:8e: bc:86:58:d4:7b:08:08:be:e0:0f:2c:f4:f4:c4:a3: 3f:bd:8e:d3:b8:30:e4:fa:c2:46:99:09:58:bc:83: f5:48:df:a8:c2:da:c0:95:77:2e:95:78:99:ab:09: 92:c5:7d:e4:f3:7c:06:01:ec:b3:86:2f:6c:95:c4: 11:88:04:26:12:42:fe:23:33:bf:7d:a2:99:c6:88: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:9D:1C:47:71:68:27:7B:1A:04:19:81:0F:19:B2:81:CB:AE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ca:ae:44:24:4b:d6:ec:4c:47:86:f9:51:a6:a9:fb:71:9c: ad:4f:d4:3e:d0:2e:ac:b2:81:ef:d3:e9:d6:f0:4b:9f:5e:95: da:f9:7c:ee:87:98:b8:6d:26:45:b2:0b:9d:91:1a:e3:84:d2: a3:1e:90:c0:dc:62:41:05:eb:7e:d8:51:be:b5:bd:1c:5b:88: 15:16:c4:bc:3c:14:d8:5d:1b:28:a8:32:d5:5b:d5:35:ef:b1: 0a:c7:0f:77:a1:ad:21:b6:53:c8:40:1a:2c:d6:48:c6:a7:cb: 18:83:28:92:aa:3d:a0:72:d7:e9:0a:cd:03:39:4b:15:45:8f: 4a:db:cd:05:f7:26:d0:66:56:ac:c6:84:22:03:76:0d:5d:17: 31:23:7e:e4:48:d7:3a:e8:d4:5c:96:65:71:a0:71:58:79:a1: 9a:6c:10:82:89:23:fd:39:76:2f:4f:27:4b:94:05:71:ed:71: 74:fa:46:2a:45:f1:99:a5:53:d2:b0:57:29:3e:82:b4:fd:e0: 4f:f9:f2:4f:3d:a8:b3:c1:3c:7a:cc:fc:93:c9:29:56:a8:9e: 82:bd:3f:41:d0:ee:03:16:3f:38:e2:36:4f:17:fc:ce:98:ff: 1d:02:5b:17:f2:3f:01:5d:24:38:71:56:a9:a4:80:85:51:0a: 0b:14:46:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmfw6FXGXyIb/bQ/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMzE4MjEzMVoXDTI1MDcyMjE4MjEzMVowLzEtMCsGA1UEAxMk OTNjNzI4NDYtOTI2OS00NGI3LTlhOTgtNGMxN2EzNGEyYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHg2qepy6y012rDi0v50HbX9qAxNfXgPxxuC Qvjvi78hqfubw9KO1Qd2HbMJQPomwggKIwpax/RUa7CQO+Rrm1oZtlmFS/L4Sppf mICJ3px5YWhec7D1J0S9OGfjE13u30nC3VRt3ooXGH0I+6/Pe5nOHUszgcqftQa/ MR+HFOh2ToAtqGKlGwHVlQ7t9P5JglzlzARVljIze6WqriV9R+H+j8vFoKcLbF7p mlGD8nwv8Y68hljUewgIvuAPLPT0xKM/vY7TuDDk+sJGmQlYvIP1SN+owtrAlXcu lXiZqwmSxX3k83wGAeyzhi9slcQRiAQmEkL+IzO/faKZxoiDNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMJ5nRxHcWgnexoEGYEPGbKBy65EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTMzYzc3YTItM2MxZi0z OGVkLWI3ZWItNjc1NmI5ZDA3NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfsquRCRL1uxMR4b5Uaap+3GcrU/UPtAurLKB79Pp1vBLn16V2vl8 7oeYuG0mRbILnZEa44TSox6QwNxiQQXrfthRvrW9HFuIFRbEvDwU2F0bKKgy1VvV Ne+xCscPd6GtIbZTyEAaLNZIxqfLGIMokqo9oHLX6QrNAzlLFUWPStvNBfcm0GZW rMaEIgN2DV0XMSN+5EjXOujUXJZlcaBxWHmhmmwQgokj/Tl2L08nS5QFce1xdPpG KkXxmaVT0rBXKT6CtP3gT/nyTz2os8E8esz8k8kpVqiegr0/QdDuAxY/OOI2Txf8 zpj/HQJbF/I/AV0kOHFWqaSAhVEKCxRGcA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:57 2025 by rpki-client