$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa File: b0ddde98-91d9-322f-a864-985a3b251e9c.roa (raw, json) Hash identifier: MGqI9dSFEmUayHjQoVq5yazKaEdOYE4QWNYZSF3eGRU= Subject key identifier: A3:16:8F:E8:76:B7:E7:52:72:F1:30:85:D4:D6:0A:A1:30:CF:59:BF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A1E2A9FAC10411B76925F1A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 30036 IP address blocks: 2604:2e8d:e400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:9f:ac:10:41:1b:76:92:5f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=9b13984a-5736-415a-b525-e5e2d35378ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:b2:37:02:c8:48:b6:5d:d1:88:4e:8f:ac: b4:c6:e1:73:1b:42:d3:83:42:9f:03:86:f7:4c:bf: e6:d0:4f:1a:36:c9:b6:c0:8b:e4:01:e0:30:a1:25: 39:d0:72:8a:e9:47:02:3a:e8:cb:72:55:34:a6:48: 5d:a1:fe:fc:36:b5:a9:c6:ba:6b:dc:66:4c:9d:f9: 7f:cf:01:5b:68:5b:c8:1f:42:7d:19:d2:09:95:88: 77:16:60:e9:b8:a8:22:4f:89:4d:1c:57:da:3f:40: 2c:7a:3f:4c:e5:db:1e:49:f9:ec:f8:e9:5b:00:a4: 82:19:fa:cb:cc:1b:d6:70:e2:eb:de:be:a3:48:de: 9e:24:cf:3f:14:0d:56:eb:85:21:cd:14:ff:57:78: 47:de:a1:e7:68:a4:ff:27:db:08:50:5f:6f:53:bc: fb:56:3f:0c:5e:58:98:73:62:aa:c0:9a:22:09:28: 37:e0:ed:18:ac:c6:dd:2d:fa:5a:60:76:b3:23:c7: c9:57:fd:86:bc:12:01:a6:31:36:3d:e8:c4:35:ee: ad:51:3d:7a:54:38:20:e1:34:f6:07:4f:33:31:9a: 8d:ef:6a:0c:d4:77:a2:b9:5c:de:36:e2:36:f5:70: cc:0b:61:1f:24:3d:2a:60:1a:15:9c:07:7f:20:c7: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:16:8F:E8:76:B7:E7:52:72:F1:30:85:D4:D6:0A:A1:30:CF:59:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0ddde98-91d9-322f-a864-985a3b251e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:e400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:71:d9:82:ce:a0:bb:cd:d7:c5:1d:48:36:d4:83:b9:bb:93: af:24:37:79:fe:b3:c2:92:d1:00:3f:57:cd:4d:5b:cb:68:62: ba:64:6f:21:de:de:15:63:1e:a8:31:55:bc:cb:ac:7a:a5:9e: f0:b7:2f:33:2a:35:ef:f8:94:30:b3:a0:2f:c1:47:e9:75:20: 9b:fd:1c:d0:1c:10:b6:35:aa:d8:ad:39:f6:ed:5f:03:ce:2c: 5f:58:f7:60:da:d1:21:73:25:99:5c:c3:ca:26:a9:35:fb:c1: f1:d9:6e:5e:4b:17:3a:c5:31:0d:bc:94:79:23:7e:de:39:31: b4:16:d4:46:64:b5:a3:5e:49:06:f9:83:61:49:49:57:dd:aa: bb:5f:16:61:6b:63:0e:21:24:70:1f:e1:91:10:73:5d:bb:15: b3:73:12:2a:aa:76:02:b3:24:0e:18:28:47:e9:0c:74:19:67: 7d:00:28:af:22:37:35:84:cc:f1:ea:aa:79:bc:30:b2:12:96: e8:ea:c6:7a:f8:2c:d9:a6:ee:14:5b:b4:dd:57:30:86:fe:3b: 7b:4a:a5:f2:d4:bf:a1:0b:90:bd:09:bc:ec:ee:86:a0:91:0b: 43:1d:58:77:5b:a0:e6:81:fd:b2:53:f0:50:a3:68:b9:6d:fb: 76:16:fb:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoeKp+sEEEbdpJfGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk OWIxMzk4NGEtNTczNi00MTVhLWI1MjUtZTVlMmQzNTM3OGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVqyNwLISLZd0YhOj6y0xuFzG0LTg0KfA4b3 TL/m0E8aNsm2wIvkAeAwoSU50HKK6UcCOujLclU0pkhdof78NrWpxrpr3GZMnfl/ zwFbaFvIH0J9GdIJlYh3FmDpuKgiT4lNHFfaP0Asej9M5dseSfns+OlbAKSCGfrL zBvWcOLr3r6jSN6eJM8/FA1W64UhzRT/V3hH3qHnaKT/J9sIUF9vU7z7Vj8MXliY c2KqwJoiCSg34O0YrMbdLfpaYHazI8fJV/2GvBIBpjE2PejENe6tUT16VDgg4TT2 B08zMZqN72oM1HeiuVzeNuI29XDMC2EfJD0qYBoVnAd/IMe/dwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKMWj+h2t+dScvEwhdTWCqEwz1m/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjBkZGRlOTgtOTFkOS0z MjJmLWE4NjQtOTg1YTNiMjUxZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujeQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD3HZgs6gu83XxR1INtSDubuTryQ3ef6zwpLRAD9XzU1by2hiumRv Id7eFWMeqDFVvMuseqWe8LcvMyo17/iUMLOgL8FH6XUgm/0c0BwQtjWq2K059u1f A84sX1j3YNrRIXMlmVzDyiapNfvB8dluXksXOsUxDbyUeSN+3jkxtBbURmS1o15J BvmDYUlJV92qu18WYWtjDiEkcB/hkRBzXbsVs3MSKqp2ArMkDhgoR+kMdBlnfQAo ryI3NYTM8eqqebwwshKW6OrGevgs2abuFFu03Vcwhv47e0ql8tS/oQuQvQm87O6G oJELQx1Yd1ug5oH9slPwUKNouW37dhb7Mg== -----END CERTIFICATE-----Generated at Sun Jun 15 21:56:54 2025 by rpki-client