$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa File: b38de647-501d-397c-bfa1-f0f2ba6b6022.roa (raw, json) Hash identifier: DmdgMG3qNR/wrhIHtuwqzZNbMFk+IzlIv6PG4C+VK8w= Subject key identifier: 31:04:0A:48:B3:12:0E:EA:EC:86:12:F8:A6:CD:80:4E:B4:BE:98:93 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA47588371C80222122280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e89:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:47:58:83:71:c8:02:22:12:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d6898718-864c-42d2-a755-3331101e1d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:7e:ee:37:c6:36:70:72:fd:be:cb:0c:c2: f7:f5:60:81:3f:bc:d4:02:1f:04:3f:01:f1:e9:8e: 7e:df:65:5e:9b:72:9b:e5:0e:46:4a:8c:d5:d0:0c: ba:c7:b6:dd:32:2d:ba:16:91:78:1d:2b:e0:05:15: 3a:88:9a:cc:4b:51:02:8e:0d:dd:ce:fd:d2:2e:26: 52:52:85:cd:92:e0:05:35:2a:84:01:fa:09:f0:ed: 99:0e:80:08:fa:2b:fe:7d:b8:96:89:b0:b4:91:17: d9:9d:e8:1b:d9:93:e8:45:fd:45:cd:e2:c2:6b:17: 52:f5:b8:00:d4:36:6d:30:83:83:04:a1:10:f8:99: 99:37:dd:bf:ba:e4:ec:2c:34:11:c2:d4:b0:65:48: 88:bc:42:d5:31:1c:f4:85:37:2c:4d:e2:97:13:e5: 6d:36:ec:ad:9a:ff:2b:ae:5b:c7:da:b0:94:e6:24: ce:19:da:f3:50:3a:d8:cf:e0:3c:79:ba:18:0a:be: d5:15:08:a7:b8:4f:28:1c:08:65:92:e6:9f:6b:b5: e1:26:02:e4:52:34:b7:f9:ff:26:05:0b:ea:cf:34: 73:1d:27:35:45:70:8a:a3:5e:49:ec:59:cc:59:14: 5e:7b:80:9e:ef:7d:c1:73:eb:f3:e8:a6:48:1b:0f: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:0A:48:B3:12:0E:EA:EC:86:12:F8:A6:CD:80:4E:B4:BE:98:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8d:ec:db:ba:5f:80:3a:61:3f:45:33:4a:ab:a8:f1:0a:3a: ad:d6:03:5b:25:11:71:b3:0d:b4:f0:1d:97:9e:c5:0e:6f:e7: e5:36:9d:38:e7:35:e1:37:36:3b:69:b4:3b:75:31:e2:f0:2a: 2d:2f:de:4c:fa:7e:bc:f3:9c:6f:2e:e1:09:77:b7:95:77:30: 66:65:25:64:91:eb:d6:f7:31:d4:e1:9c:ef:e3:38:f1:83:7e: 1e:b7:df:a6:b4:e5:01:dc:75:fb:e1:b5:7c:9f:aa:68:90:e1: 5d:96:c2:22:40:f9:15:8e:c9:73:f4:fe:e6:31:1a:84:6d:4a: 54:94:e6:fc:5d:b9:b0:8c:f6:f9:60:31:59:8d:e4:33:6e:3d: 75:d6:6e:e0:55:f6:9a:4a:4e:30:10:be:61:fc:e3:0a:6d:64: 6b:e4:ee:1c:70:84:85:3a:e6:b5:57:95:0f:46:38:c8:e3:39: 89:60:7f:11:e1:e0:43:9b:b7:2a:8b:27:60:41:b5:7f:d8:92: ae:3e:94:37:cb:59:93:77:eb:0f:ae:53:f8:e9:f2:a3:98:de: cc:49:54:96:f1:88:46:74:ba:63:4b:b7:e3:97:c6:ba:6f:d0: dd:7a:2f:78:53:e7:a3:cd:b9:00:eb:b6:3c:34:62:50:b5:e6: b5:2a:9a:5e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukdYg3HIAiISIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDY4OTg3MTgtODY0Yy00MmQyLWE3NTUtMzMzMTEwMWUxZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg21+7jfGNnBy/b7LDML39WCBP7zUAh8EPwHx 6Y5+32Vem3Kb5Q5GSozV0Ay6x7bdMi26FpF4HSvgBRU6iJrMS1ECjg3dzv3SLiZS UoXNkuAFNSqEAfoJ8O2ZDoAI+iv+fbiWibC0kRfZnegb2ZPoRf1FzeLCaxdS9bgA 1DZtMIODBKEQ+JmZN92/uuTsLDQRwtSwZUiIvELVMRz0hTcsTeKXE+VtNuytmv8r rlvH2rCU5iTOGdrzUDrYz+A8eboYCr7VFQinuE8oHAhlkuafa7XhJgLkUjS3+f8m BQvqzzRzHSc1RXCKo15J7FnMWRRee4Ce733Bc+vz6KZIGw/7BwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDEECkizEg7q7IYS+KbNgE60vpiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjM4ZGU2NDctNTAxZC0z OTdjLWJmYTEtZjBmMmJhNmI2MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFI3s27pfgDphP0UzSquo8Qo6rdYDWyURcbMNtPAdl57FDm/n5Tad OOc14Tc2O2m0O3Ux4vAqLS/eTPp+vPOcby7hCXe3lXcwZmUlZJHr1vcx1OGc7+M4 8YN+HrffprTlAdx1++G1fJ+qaJDhXZbCIkD5FY7Jc/T+5jEahG1KVJTm/F25sIz2 +WAxWY3kM249ddZu4FX2mkpOMBC+YfzjCm1ka+TuHHCEhTrmtVeVD0Y4yOM5iWB/ EeHgQ5u3KosnYEG1f9iSrj6UN8tZk3frD65T+Onyo5jezElUlvGIRnS6Y0u345fG um/Q3XoveFPno825AOu2PDRiULXmtSqaXg== -----END CERTIFICATE-----Generated at Sun Apr 27 20:22:55 2025 by rpki-client