$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa File: be5d2c8a-54d2-398d-a73b-78031c15b211.roa (raw, json) Hash identifier: jc7DAztfZqiNQbtjDXlhdzWF4LpP3pDg/mb77fRAiYU= Subject key identifier: 4D:73:E1:D6:60:69:AC:02:4E:18:50:E2:93:4B:D6:6A:F2:F9:6F:4D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584996C49AD3B4BFC11D442831C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e8b:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9a:d3:b4:bf:c1:1d:44:28:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=6a5922d0-be0b-4389-9534-7016a8cca2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:95:72:87:da:eb:e7:47:7d:e1:74:5b:5d: 63:b6:af:0b:35:32:4f:d0:88:bb:21:a8:9f:d3:79: 72:43:55:2a:32:ec:d2:e8:16:fc:3d:5f:90:99:a5: 15:6a:f7:be:49:2a:1b:a4:c9:d1:c5:38:0e:f3:d0: 24:df:5d:34:92:66:15:5e:c1:18:fb:76:54:75:b6: f0:54:01:82:2c:b7:8c:60:fa:6c:31:9d:7d:8b:4d: f4:de:c3:1f:73:16:9d:27:21:4b:2f:b9:b5:50:47: d6:10:2d:8d:d6:dc:17:1d:d5:e8:f8:ae:94:d6:c7: 33:24:db:42:e4:53:a1:48:3d:4c:b0:05:1c:a1:87: 7f:c4:44:cd:68:66:4f:68:a2:64:9b:a0:c5:68:0b: 71:a7:9e:67:cc:75:84:1f:93:00:f7:a5:96:d2:94: 63:47:70:55:46:a5:dd:05:1b:d8:cf:28:ef:d0:41: fe:95:0a:1e:a3:cf:38:87:78:76:8d:63:7f:b2:45: 7a:22:e2:9f:fa:aa:3f:0e:47:f5:69:28:f0:70:23: 0d:1c:c0:31:e7:3f:0c:20:70:51:8c:19:91:4d:e4: 3f:ee:b2:a0:dc:6c:b8:65:e8:b9:18:b7:65:20:71: 95:f1:23:99:1e:92:64:6c:de:b0:ab:59:4e:71:9e: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:E1:D6:60:69:AC:02:4E:18:50:E2:93:4B:D6:6A:F2:F9:6F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:91:6a:0a:2b:91:06:b0:c5:16:54:b2:b4:d9:6b:15:06:ba: 02:2f:15:10:63:fa:49:94:ca:a8:6d:a6:bf:9f:20:82:83:38: bf:f3:ac:c5:f2:33:24:88:6a:eb:83:95:ca:6c:db:b2:fc:8f: 6a:a5:5c:54:35:64:89:58:00:eb:90:6d:37:26:40:d5:33:33: 64:8b:9b:4f:bf:ad:c6:5f:41:c8:e1:70:13:44:c1:c4:ea:8b: 72:f0:d4:a8:e3:a0:cc:85:ad:9c:77:ee:ef:4a:3c:49:5c:6e: 1b:5b:e7:5b:26:ba:1d:bd:2f:89:95:17:fd:24:fd:81:dd:8d: ba:b5:99:06:49:ad:cc:ca:40:1b:92:a4:0f:4f:a2:03:ac:7b: 4c:69:0d:2b:fe:39:b5:c4:38:cd:56:31:66:cd:49:a1:69:25: 98:a0:d1:41:1c:bc:b6:ec:90:48:2b:9c:fc:b2:d6:10:5a:dd: 14:16:b1:a6:37:02:40:63:71:23:93:eb:dc:a7:99:0e:6e:ef: b3:af:2a:f5:b8:bf:79:f2:56:4e:5d:c9:ab:ac:d6:3d:8e:bf: 8f:99:0a:20:b1:09:fc:2f:b8:27:42:21:6b:75:ec:e9:58:d3: 9e:4c:0c:67:5f:0e:a4:9a:d1:fa:18:cc:dd:f2:11:1b:31:9d: c4:b9:ba:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJrTtL/BHUQoMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NmE1OTIyZDAtYmUwYi00Mzg5LTk1MzQtNzAxNmE4Y2NhMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDuVcofa6+dHfeF0W11jtq8LNTJP0Ii7Iaif 03lyQ1UqMuzS6Bb8PV+QmaUVave+SSobpMnRxTgO89Ak3100kmYVXsEY+3ZUdbbw VAGCLLeMYPpsMZ19i0303sMfcxadJyFLL7m1UEfWEC2N1twXHdXo+K6U1sczJNtC 5FOhSD1MsAUcoYd/xETNaGZPaKJkm6DFaAtxp55nzHWEH5MA96WW0pRjR3BVRqXd BRvYzyjv0EH+lQoeo884h3h2jWN/skV6IuKf+qo/Dkf1aSjwcCMNHMAx5z8MIHBR jBmRTeQ/7rKg3Gy4Zei5GLdlIHGV8SOZHpJkbN6wq1lOcZ7I7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE1z4dZgaawCThhQ4pNL1mry+W9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU1ZDJjOGEtNTRkMi0z OThkLWE3M2ItNzgwMzFjMTViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAj5FqCiuRBrDFFlSytNlrFQa6Ai8VEGP6SZTKqG2mv58ggoM4v/Os xfIzJIhq64OVymzbsvyPaqVcVDVkiVgA65BtNyZA1TMzZIubT7+txl9ByOFwE0TB xOqLcvDUqOOgzIWtnHfu70o8SVxuG1vnWya6Hb0viZUX/ST9gd2NurWZBkmtzMpA G5KkD0+iA6x7TGkNK/45tcQ4zVYxZs1JoWklmKDRQRy8tuyQSCuc/LLWEFrdFBax pjcCQGNxI5Pr3KeZDm7vs68q9bi/efJWTl3Jq6zWPY6/j5kKILEJ/C+4J0Iha3Xs 6VjTnkwMZ18OpJrR+hjM3fIRGzGdxLm69Q== -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:50 2025 by rpki-client