$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa File: bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa (raw, json) Hash identifier: hBfwRLjUJ1iYdMlAhvlFcrlTB0C1Eskpb0VEZJwa+QI= Subject key identifier: 0F:DF:6F:32:94:BF:E0:93:56:4D:06:A7:AF:FD:07:8F:2F:74:F6:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858499BF542197134962C01D7D380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa Signing time: Tue 22 Apr 2025 09:38:17 +0000 ROA not before: Tue 22 Apr 2025 09:38:17 +0000 ROA not after: Mon 21 Jul 2025 09:38:17 +0000 asID: 19905 IP address blocks: 2604:2e8d:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:42:19:71:34:96:2c:01:d7:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 22 09:38:17 2025 GMT Not After : Jul 21 09:38:17 2025 GMT Subject: CN=d1bb2d11-06a6-4eb1-8213-0f92a3b56576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:c0:de:9e:25:14:1e:cf:7c:92:15:d4:26: 0d:08:58:4e:a9:ad:1f:89:8d:76:04:d0:2f:49:13: 8b:c0:c6:fb:d1:77:1a:f6:30:1c:7e:28:b7:53:c8: 94:d1:7d:69:4e:bb:fb:76:43:6f:06:01:2b:90:32: 7e:09:7c:32:ff:c0:99:bf:1d:7d:41:8d:e0:16:b0: 08:3f:4f:b5:bc:56:d3:d8:c2:1e:a3:81:61:8a:ef: 84:74:ef:2c:e4:60:c4:26:57:09:4c:bb:82:69:29: 50:6f:19:ca:8b:85:ee:e0:18:46:6e:02:3f:88:e9: da:07:a6:7f:6e:44:60:67:ac:29:b8:0a:16:9e:99: 6f:2b:8a:e0:f7:c9:f6:ea:a1:4c:94:5d:fd:17:23: 4f:4e:4c:00:bb:79:68:b5:6b:88:67:71:7a:f4:c7: ce:c9:fe:27:a6:3b:2e:ad:85:24:71:8c:f3:65:fb: b1:90:a2:0f:35:32:e0:8f:2a:3e:8b:cd:67:be:c1: 32:bc:57:fa:c0:53:90:e0:d2:24:e7:ed:f8:0d:99: 11:3f:68:1d:80:0f:79:99:b4:8e:25:58:ee:29:98: c6:a9:17:81:c4:e4:77:8b:cf:7c:86:86:64:67:32: f3:df:67:1f:54:d5:24:b9:a1:93:e7:80:95:c5:c4: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DF:6F:32:94:BF:E0:93:56:4D:06:A7:AF:FD:07:8F:2F:74:F6:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0a:45:31:7d:4c:38:f6:59:fb:70:39:70:ae:93:49:64:1b: 26:45:a6:18:57:7b:ba:4f:e0:ba:b3:0b:98:23:54:fc:14:67: 63:e3:18:a7:95:ea:1a:cb:46:9c:46:95:88:9d:cb:c0:f1:ca: 9d:49:34:0a:1f:aa:6e:2e:7a:06:85:b0:dc:b5:45:d8:7e:63: 86:4c:52:e1:69:88:c2:9c:e8:0f:70:d1:c6:64:a5:a3:bd:bb: 71:31:fd:63:39:92:dc:bc:6c:48:05:9f:fd:41:9a:3d:40:7f: a8:44:cc:ad:0f:2d:96:5f:3a:68:a2:4c:ee:0a:74:ab:2b:ea: c2:46:12:90:3a:d8:43:38:c2:4d:ae:76:ca:17:21:4e:69:cf: 8d:8e:6b:33:bb:e8:4e:78:ae:b7:8f:12:25:c9:31:a0:81:b1: 51:75:48:d7:25:f5:4e:ac:67:eb:eb:00:d0:00:50:c1:ea:8e: 00:5a:96:ab:b7:25:bd:8f:33:0c:b6:18:c3:f1:54:74:f7:f5: 61:a2:c5:45:95:d1:bd:56:7b:c3:14:0f:5d:9f:7b:28:f5:ef: c2:a3:e0:10:bd:d9:76:9f:4c:17:c4:35:77:d9:7c:1c:84:37: 9f:91:8c:8b:34:65:fd:60:63:80:a7:48:f8:48:4c:52:37:a0: 9e:60:d6:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmb9UIZcTSWLAHX04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMjA5MzgxN1oXDTI1MDcyMTA5MzgxN1owLzEtMCsGA1UEAxMk ZDFiYjJkMTEtMDZhNi00ZWIxLTgyMTMtMGY5MmEzYjU2NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlebA3p4lFB7PfJIV1CYNCFhOqa0fiY12BNAv SROLwMb70Xca9jAcfii3U8iU0X1pTrv7dkNvBgErkDJ+CXwy/8CZvx19QY3gFrAI P0+1vFbT2MIeo4Fhiu+EdO8s5GDEJlcJTLuCaSlQbxnKi4Xu4BhGbgI/iOnaB6Z/ bkRgZ6wpuAoWnplvK4rg98n26qFMlF39FyNPTkwAu3lotWuIZ3F69MfOyf4npjsu rYUkcYzzZfuxkKIPNTLgjyo+i81nvsEyvFf6wFOQ4NIk5+34DZkRP2gdgA95mbSO JVjuKZjGqReBxOR3i898hoZkZzLz32cfVNUkuaGT54CVxcSL8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA/fbzKUv+CTVk0Gp6/9B48vdPb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFlMWE0NmEtNWRjOC0z ZGM0LWEwYzItZTEwNDIzMTVmNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABApFMX1MOPZZ+3A5cK6TSWQbJkWmGFd7uk/gurMLmCNU/BRnY+MY p5XqGstGnEaViJ3LwPHKnUk0Ch+qbi56BoWw3LVF2H5jhkxS4WmIwpzoD3DRxmSl o727cTH9YzmS3LxsSAWf/UGaPUB/qETMrQ8tll86aKJM7gp0qyvqwkYSkDrYQzjC Ta52yhchTmnPjY5rM7voTniut48SJckxoIGxUXVI1yX1Tqxn6+sA0ABQweqOAFqW q7clvY8zDLYYw/FUdPf1YaLFRZXRvVZ7wxQPXZ97KPXvwqPgEL3Zdp9MF8Q1d9l8 HIQ3n5GMizRl/WBjgKdI+EhMUjegnmDWug== -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:41 2025 by rpki-client