$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa File: a806a117-6302-390a-a964-5e7d12d399e1.roa (raw, json) Hash identifier: KnFITRtx15Lnfi7Q0F4zXeD7ybzQ+INmlUDs/0MOT0Y= Subject key identifier: 9F:B8:2B:A0:21:61:A6:22:D3:C6:9B:69:7C:A7:E9:0F:9E:24:D5:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA225DC664F6810BDEB690 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8d:9400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:22:5d:c6:64:f6:81:0b:de:b6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bc9c9c19-2c78-4935-8f82-4f692141e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:da:dc:20:11:1f:a6:57:77:77:64:73:7a: de:86:2a:1b:f1:e9:37:32:ba:2e:1d:da:9d:e8:bc: 54:47:c5:30:14:c0:43:e7:a6:ca:bf:79:58:dc:c9: 8f:1f:90:c6:4e:d9:8b:b0:0f:b7:7e:f8:51:c5:b3: 5b:75:1d:e5:7e:94:ea:9c:46:fa:9e:f9:2c:1d:5c: e5:8d:e6:2f:3b:5e:f8:25:7c:23:53:bc:c5:77:64: 75:4e:80:39:46:1d:17:62:02:55:b8:14:70:32:52: 09:ef:85:ee:a3:dd:59:94:4b:ab:c3:0e:58:19:b9: 45:e3:7e:19:13:45:39:5a:17:13:e5:70:f3:02:21: b0:c2:c1:ff:51:d8:6d:b8:da:b4:f2:01:2d:cc:4a: 4d:0a:f6:a6:80:92:a5:97:3a:04:9a:df:b8:25:44: 90:af:8c:4c:06:cd:05:19:78:81:8c:ce:e4:4b:87: 5d:32:a9:f2:f6:27:09:2d:8c:b2:07:65:60:ae:f9: 44:47:96:a9:02:23:bd:ef:bf:c7:7f:5a:5d:ce:2b: a6:9d:fd:41:f6:1a:02:55:0f:01:af:f2:2d:77:bf: 47:9a:94:d9:83:83:66:06:f6:ac:45:9f:21:cb:a6: 4b:c9:0e:57:51:e5:c6:e2:e0:fd:91:f0:0a:57:a0: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:2B:A0:21:61:A6:22:D3:C6:9B:69:7C:A7:E9:0F:9E:24:D5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:9400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:17:e5:3a:d6:e5:82:43:19:d9:d9:f4:49:e6:fc:47:d5: 02:86:37:e2:63:6b:ba:e2:05:b3:27:1e:d9:a3:13:2c:e7:1d: dd:25:ac:47:ac:34:e7:5d:d0:d0:61:db:5d:89:36:55:8c:d8: 9a:96:0f:01:20:50:6a:8e:38:82:43:29:61:2f:ba:d2:79:10: 63:05:6f:c9:df:7f:c9:a0:65:7a:e8:e7:2e:ef:d3:a9:de:2f: 4e:14:34:41:6e:4b:b2:6c:80:3b:a1:78:74:f4:df:15:66:18: 21:f8:65:2a:69:f9:11:b9:6b:0a:88:cb:cb:73:79:ad:72:e4: 4e:b0:46:f3:1c:04:76:76:3d:85:4d:4a:05:2f:ad:a9:57:94: 77:7c:8b:21:ab:a2:94:d5:eb:22:1a:63:6b:0d:ba:14:4f:8e: 1f:16:67:a0:be:d0:36:13:05:74:81:2b:12:8e:25:1a:c5:62: 7d:d5:0c:7c:ae:91:f5:4a:59:bb:d4:54:6a:b2:e8:cc:43:2e: 93:00:ae:41:54:8e:4f:d9:02:b9:e7:dd:04:8f:24:50:53:84: 5e:e6:a7:c6:98:7d:05:66:c3:2e:76:39:78:4d:17:72:88:bf: c9:14:59:bd:fb:55:3d:42:92:a2:f6:52:01:de:15:9c:bf:df: b9:ee:41:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuiJdxmT2gQvetpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmM5YzljMTktMmM3OC00OTM1LThmODItNGY2OTIxNDFlNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOna3CARH6ZXd3dkc3rehiob8ek3MrouHdqd 6LxUR8UwFMBD56bKv3lY3MmPH5DGTtmLsA+3fvhRxbNbdR3lfpTqnEb6nvksHVzl jeYvO174JXwjU7zFd2R1ToA5Rh0XYgJVuBRwMlIJ74Xuo91ZlEurww5YGblF434Z E0U5WhcT5XDzAiGwwsH/UdhtuNq08gEtzEpNCvamgJKllzoEmt+4JUSQr4xMBs0F GXiBjM7kS4ddMqny9icJLYyyB2VgrvlER5apAiO977/Hf1pdziumnf1B9hoCVQ8B r/Itd79HmpTZg4NmBvasRZ8hy6ZLyQ5XUeXG4uD9kfAKV6DedQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ+4K6AhYaYi08abaXyn6Q+eJNURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTgwNmExMTctNjMwMi0z OTBhLWE5NjQtNWU3ZDEyZDM5OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS4AX5TrW5YJDGdnZ9Enm/EfVAoY34mNruuIFsyce2aMTLOcd3SWs R6w0513Q0GHbXYk2VYzYmpYPASBQao44gkMpYS+60nkQYwVvyd9/yaBleujnLu/T qd4vThQ0QW5LsmyAO6F4dPTfFWYYIfhlKmn5EblrCojLy3N5rXLkTrBG8xwEdnY9 hU1KBS+tqVeUd3yLIauilNXrIhpjaw26FE+OHxZnoL7QNhMFdIErEo4lGsVifdUM fK6R9UpZu9RUarLozEMukwCuQVSOT9kCuefdBI8kUFOEXuanxph9BWbDLnY5eE0X coi/yRRZvftVPUKSovZSAd4VnL/fue5BRA== -----END CERTIFICATE-----Generated at Tue Apr 29 22:56:29 2025 by rpki-client