$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa File: a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa (raw, json) Hash identifier: G46o+9l4uncZSDqoOGJwTY6bUoPurjKb7E/EsE61pBk= Subject key identifier: 69:F9:05:F9:BD:7B:AD:25:BE:CF:B7:C4:6F:04:40:02:CE:9E:17:49 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA0CE8B3C3A4CE61F5D280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8b:c000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:0c:e8:b3:c3:a4:ce:61:f5:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1071081c-8d2f-4459-aad5-b16f760328c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:24:eb:fd:f2:cc:59:b0:c7:26:11:b0:e7: 2e:ac:d9:0c:5f:36:1d:4f:c2:3e:55:2a:da:95:20: e5:d4:8e:bb:91:1b:e8:38:f6:57:d1:8a:2a:f9:c8: 83:d9:2c:36:ff:f1:a2:b8:db:f9:a2:f5:a2:d0:d4: 3d:1e:57:be:62:bd:ac:97:96:9d:7e:1e:30:0f:9b: fe:5a:3e:8d:ab:bd:a2:32:7b:84:37:a3:38:45:cd: c0:fc:a7:25:08:6a:d5:de:ac:1a:8e:f3:e9:c1:68: 14:87:92:63:28:91:95:22:51:1d:67:80:4d:71:c6: 31:e7:7a:29:3f:fb:28:81:f5:65:62:a9:aa:03:17: be:da:34:c2:40:05:69:e4:a0:33:b0:98:68:1a:96: b5:f1:40:5c:be:3b:6c:50:dc:7f:d9:0e:c5:6e:43: e3:67:00:9f:55:d2:0e:5f:eb:fe:a2:a8:e4:b1:e5: 00:58:d8:1a:1b:ea:3e:43:09:86:14:23:8b:10:4f: fd:71:65:5a:0b:9a:15:6e:35:04:28:2f:44:ce:87: 44:d3:a3:4e:f4:1d:34:8e:ad:48:b8:e0:de:7b:f9: 15:64:de:d2:52:ee:a8:f1:67:a7:c0:aa:cd:42:05: 0d:11:8d:b5:1e:33:5f:e1:9d:bf:fe:d9:7a:4a:ca: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:05:F9:BD:7B:AD:25:BE:CF:B7:C4:6F:04:40:02:CE:9E:17:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:c000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1a:d3:f5:66:8e:a1:d3:5b:37:e7:66:e9:b4:34:51:35:1a: 28:62:b2:67:de:8b:b2:6e:e2:34:4d:6b:08:c1:e0:4c:3d:06: 9a:b9:b4:8d:fb:78:7f:e0:8f:2e:da:30:93:55:81:b8:7b:2a: 32:77:34:bb:a6:3a:e4:76:31:4b:1f:cf:6c:d1:e9:b0:f5:83: d2:5c:05:3b:4c:8a:45:64:ff:33:f6:0e:14:7d:91:7a:a8:c0: 76:79:43:ce:67:b8:0b:35:17:1e:96:9f:24:0f:a1:26:6c:7c: 2c:96:29:24:82:88:80:06:d7:c5:0e:8a:79:3d:1c:8e:7f:59: 02:6d:b9:63:a4:c1:56:14:1b:b2:6c:d8:9b:7b:5d:d7:ad:ba: ee:f5:95:81:62:77:7d:c8:ef:03:43:1d:0c:66:94:07:6b:f2: 56:95:76:57:30:65:62:6e:77:39:5f:b9:ef:cc:18:98:97:4d: b7:cc:dd:13:21:e0:60:66:40:70:51:1a:d7:fc:ae:22:c8:c0: cd:cd:67:e2:6c:30:ee:cc:39:43:67:f6:28:6f:e2:15:62:b9: a8:2a:a2:0f:ea:94:7d:e3:f7:02:ab:50:b3:6f:9a:4f:20:db: c4:fa:f6:62:b2:7d:ad:e2:00:e8:9a:82:b3:42:3a:08:84:60: 31:36:f0:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkugzos8OkzmH10oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTA3MTA4MWMtOGQyZi00NDU5LWFhZDUtYjE2Zjc2MDMyOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusYk6/3yzFmwxyYRsOcurNkMXzYdT8I+VSra lSDl1I67kRvoOPZX0Yoq+ciD2Sw2//GiuNv5ovWi0NQ9Hle+Yr2sl5adfh4wD5v+ Wj6Nq72iMnuEN6M4Rc3A/KclCGrV3qwajvPpwWgUh5JjKJGVIlEdZ4BNccYx53op P/sogfVlYqmqAxe+2jTCQAVp5KAzsJhoGpa18UBcvjtsUNx/2Q7FbkPjZwCfVdIO X+v+oqjkseUAWNgaG+o+QwmGFCOLEE/9cWVaC5oVbjUEKC9EzodE06NO9B00jq1I uODee/kVZN7SUu6o8WenwKrNQgUNEY21HjNf4Z2//tl6SsoTkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGn5Bfm9e60lvs+3xG8EQALOnhdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNhYmRjZTctOTM4YS0z MmIzLThmYTgtMmIyYjIwN2U1OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQBrT9WaOodNbN+dm6bQ0UTUaKGKyZ96Lsm7iNE1rCMHgTD0Gmrm0 jft4f+CPLtowk1WBuHsqMnc0u6Y65HYxSx/PbNHpsPWD0lwFO0yKRWT/M/YOFH2R eqjAdnlDzme4CzUXHpafJA+hJmx8LJYpJIKIgAbXxQ6KeT0cjn9ZAm25Y6TBVhQb smzYm3td16267vWVgWJ3fcjvA0MdDGaUB2vyVpV2VzBlYm53OV+578wYmJdNt8zd EyHgYGZAcFEa1/yuIsjAzc1n4mww7sw5Q2f2KG/iFWK5qCqiD+qUfeP3AqtQs2+a TyDbxPr2YrJ9reIA6JqCs0I6CIRgMTbwtA== -----END CERTIFICATE-----Generated at Tue Apr 29 08:28:10 2025 by rpki-client