$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa File: a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa (raw, json) Hash identifier: XZ99LirG8Jb1TA9T6IS4F8tVcP5REOhyzSqN67odq9s= Subject key identifier: 7A:FF:21:41:D5:50:B9:30:F8:C9:04:66:66:E5:41:70:55:2B:C4:98 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA1A289A58AC09BE2CA6C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8c:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1a:28:9a:58:ac:09:be:2c:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d211fda0-22c2-4c9a-860e-7b424aeef77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:72:74:b4:79:55:d5:02:f7:af:61:27:1e: ea:dd:b9:04:2d:24:9f:9e:ad:ed:8b:6c:de:77:1a: 3f:ae:57:f1:7a:44:e7:3d:94:4b:f0:d2:87:52:1e: b2:00:a6:cb:7b:c1:b6:65:1b:d0:b7:ad:0f:82:35: db:a6:88:ba:dc:ff:7f:42:f0:df:28:e1:f6:23:b3: 82:50:0c:8d:2a:5d:c9:a9:ea:3e:4e:1b:ba:a7:94: 8d:bf:64:e3:f1:7c:56:ff:f5:98:a6:9f:74:51:72: 82:cd:c9:c8:c7:fc:a6:02:d4:18:46:a5:ce:ab:3a: 60:77:d9:12:32:2a:37:33:7d:b4:22:e3:a9:a1:e4: 03:4a:85:de:b2:3b:82:b6:58:90:b1:a4:b8:f3:fa: 8d:87:43:ec:ef:3d:8a:a9:e3:7c:f9:b5:41:ea:54: 96:ea:0c:91:47:26:e8:1b:c7:49:1f:ec:2b:38:4b: ec:00:54:35:0d:fc:6d:4d:f3:75:30:9d:f1:0b:50: 53:53:f8:b1:57:57:8a:99:86:28:02:5a:73:67:78: 53:5f:19:15:f9:74:5b:ad:ad:6d:b5:ba:67:c1:89: 9b:b6:dc:b7:54:2f:cd:c3:49:44:6a:5a:62:42:b4: 21:98:f5:56:bc:d5:68:df:54:a0:df:84:cb:51:4d: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FF:21:41:D5:50:B9:30:F8:C9:04:66:66:E5:41:70:55:2B:C4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5d:d4:9e:e4:64:cc:cf:60:06:86:44:9c:b7:c6:8d:08:07: 4f:cd:c6:c7:02:3d:ee:00:07:18:be:1d:ce:ad:62:52:a1:e9: c8:38:a1:ef:51:ea:5e:7a:87:d4:8d:71:0f:72:a9:bb:02:69: 60:94:04:c2:bf:e4:dd:f1:7c:5e:64:7d:6d:e5:40:0d:9e:32: f7:14:24:92:69:3e:8c:be:0f:c3:37:c0:77:0d:a9:ca:d4:24: 56:2c:82:80:69:92:85:82:e1:a4:ca:e8:85:f4:3a:f5:0e:e5: 46:4f:ba:57:70:91:09:4d:42:09:61:4a:ed:e0:80:67:49:0d: 7a:e0:d2:cd:90:7a:4b:27:77:2b:8e:2d:4a:a7:bc:a6:1a:1e: c3:f9:ab:0a:72:8b:4c:c4:30:d2:a5:5d:e2:a6:83:7b:56:44: 4a:fe:7c:04:da:21:15:4a:57:f0:94:2a:db:ca:43:f2:c8:c8: cb:80:9d:0a:85:a6:85:44:1b:0e:48:08:9e:49:ae:01:15:e0: 24:86:39:58:fa:0b:0f:35:7b:17:db:bf:04:ba:7b:43:b6:1e: b6:0b:31:40:72:db:4d:9d:41:39:b4:ae:59:52:36:56:c7:97: 86:4d:91:7f:8e:74:9d:3f:4a:55:15:a7:9d:6d:42:59:bf:00: 63:56:68:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuhoomlisCb4spsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDIxMWZkYTAtMjJjMi00YzlhLTg2MGUtN2I0MjRhZWVmNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HhydLR5VdUC969hJx7q3bkELSSfnq3ti2ze dxo/rlfxekTnPZRL8NKHUh6yAKbLe8G2ZRvQt60PgjXbpoi63P9/QvDfKOH2I7OC UAyNKl3Jqeo+Thu6p5SNv2Tj8XxW//WYpp90UXKCzcnIx/ymAtQYRqXOqzpgd9kS Mio3M320IuOpoeQDSoXesjuCtliQsaS48/qNh0Ps7z2KqeN8+bVB6lSW6gyRRybo G8dJH+wrOEvsAFQ1DfxtTfN1MJ3xC1BTU/ixV1eKmYYoAlpzZ3hTXxkV+XRbra1t tbpnwYmbtty3VC/Nw0lEalpiQrQhmPVWvNVo31Sg34TLUU1cowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHr/IUHVULkw+MkEZmblQXBVK8SYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTU2NDYzZTktYzUwZS0z YWVmLTgxNWItNTg5ZTBhMGJhNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH13UnuRkzM9gBoZEnLfGjQgHT83GxwI97gAHGL4dzq1iUqHpyDih 71HqXnqH1I1xD3KpuwJpYJQEwr/k3fF8XmR9beVADZ4y9xQkkmk+jL4PwzfAdw2p ytQkViyCgGmShYLhpMrohfQ69Q7lRk+6V3CRCU1CCWFK7eCAZ0kNeuDSzZB6Syd3 K44tSqe8phoew/mrCnKLTMQw0qVd4qaDe1ZESv58BNohFUpX8JQq28pD8sjIy4Cd CoWmhUQbDkgInkmuARXgJIY5WPoLDzV7F9u/BLp7Q7YetgsxQHLbTZ1BObSuWVI2 VseXhk2Rf450nT9KVRWnnW1CWb8AY1ZoAA== -----END CERTIFICATE-----Generated at Sun Apr 27 03:50:04 2025 by rpki-client