$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa File: beb029dc-49c0-38e3-844b-30e0aee4f80b.roa (raw, json) Hash identifier: 8+R/8dKD9En7Sst3/+qYuqYsrTHRkfvaGcBSuJXzQ4k= Subject key identifier: 8C:F6:29:4C:81:CB:6D:EF:E6:C2:8D:B5:83:DD:72:97:3D:AB:33:54 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A784BEA7D411504F599F3B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e8c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:be:a7:d4:11:50:4f:59:9f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=572fd08e-6b5f-4738-b657-d0e342ddaf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:72:d3:50:50:dc:b3:e8:ec:01:38:7d:4c: 40:3a:92:6b:84:98:0e:c6:4c:af:14:d0:e9:64:c7: fd:00:79:f6:a0:f7:27:a7:f9:94:22:32:c4:50:08: 5f:c5:1c:b3:c2:5a:fd:55:bb:7b:7b:57:b6:5b:df: 5a:0f:60:1c:60:bc:02:b8:f1:3d:db:c6:53:b8:80: 68:d8:97:40:ec:4f:82:a9:9d:d6:01:4e:99:25:e4: 06:ec:74:5a:9c:bb:47:a6:4f:fb:9e:0a:fc:b6:a0: 0d:4f:3e:6f:24:ef:3b:f8:57:6c:58:7a:a4:f5:ec: 2e:b4:f8:10:0e:a1:4e:35:f3:f6:8f:9d:dd:75:f0: 3c:32:57:0c:77:f2:8c:e8:87:79:30:f5:41:df:d2: d2:7c:b9:76:7b:98:db:36:af:28:97:c1:c3:e0:56: ed:ee:98:c2:08:1a:74:1e:bc:89:b4:05:12:3b:85: 7b:4e:41:56:31:00:88:ef:1a:a8:c8:f4:29:65:8f: c8:1b:70:f4:0e:0e:0e:4a:6d:f7:44:9e:a1:37:18: 8d:7f:ca:16:01:a9:c6:4e:6e:9d:cf:59:db:1e:e2: c2:92:2c:45:53:df:07:9e:bc:e8:f8:c6:ce:c4:2c: dd:cd:c0:39:84:1e:39:49:09:f6:12:c5:b3:bf:ad: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:29:4C:81:CB:6D:EF:E6:C2:8D:B5:83:DD:72:97:3D:AB:33:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bc:c0:92:4b:1c:0f:b4:ce:04:64:9d:c0:e5:c2:cc:a3:a4: c9:dd:17:8f:76:7e:f7:f9:fd:84:cf:f5:64:ad:5a:76:20:a6: 03:a4:41:4b:3f:f7:17:aa:bc:dc:7a:1c:56:1a:6d:4e:41:6f: 4b:5a:6d:38:fa:77:a8:a8:0e:aa:3c:ea:1d:04:01:2e:f7:23: 7b:4d:b2:3e:4e:d8:fa:a4:dc:6d:a5:1a:7d:2f:80:b3:0e:aa: 1e:1d:6b:b3:d6:9c:6a:3b:b8:08:99:fc:0f:7b:7f:1f:23:fd: ad:f7:2f:7b:03:bb:fb:9f:7b:4f:1f:bf:88:4e:dc:1c:5b:ec: fa:c8:bf:6a:c8:c0:af:be:48:b7:50:42:6c:49:4d:85:3a:e6: 9f:c9:44:37:44:7e:bf:fe:42:1c:82:70:cf:07:f4:ef:20:c5: 29:e3:7d:6b:88:32:1c:ee:de:90:a4:36:a2:68:77:76:88:72: 19:da:3a:8a:45:1e:46:8e:86:31:02:f3:75:7e:7d:99:ef:41: 18:ab:30:18:fa:52:70:ab:42:07:23:14:30:cc:1a:88:14:48: 1c:b4:30:92:14:ce:66:db:e5:4a:c2:86:9a:aa:dd:28:1d:e0: eb:a7:cb:a1:5b:d3:38:fd:84:e2:73:74:09:6c:33:df:1c:e7: b4:93:e6:71 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmnhL6n1BFQT1mfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTcyZmQwOGUtNmI1Zi00NzM4LWI2NTctZDBlMzQyZGRhZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljZy01BQ3LPo7AE4fUxAOpJrhJgOxkyvFNDp ZMf9AHn2oPcnp/mUIjLEUAhfxRyzwlr9Vbt7e1e2W99aD2AcYLwCuPE928ZTuIBo 2JdA7E+CqZ3WAU6ZJeQG7HRanLtHpk/7ngr8tqANTz5vJO87+FdsWHqk9ewutPgQ DqFONfP2j53ddfA8MlcMd/KM6Id5MPVB39LSfLl2e5jbNq8ol8HD4Fbt7pjCCBp0 HryJtAUSO4V7TkFWMQCI7xqoyPQpZY/IG3D0Dg4OSm33RJ6hNxiNf8oWAanGTm6d z1nbHuLCkixFU98Hnrzo+MbOxCzdzcA5hB45SQn2EsWzv63FYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIz2KUyBy23v5sKNtYPdcpc9qzNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmViMDI5ZGMtNDljMC0z OGUzLTg0NGItMzBlMGFlZTRmODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKbzAkkscD7TOBGSdwOXCzKOkyd0Xj3Z+9/n9hM/1ZK1adiCmA6RB Sz/3F6q83HocVhptTkFvS1ptOPp3qKgOqjzqHQQBLvcje02yPk7Y+qTcbaUafS+A sw6qHh1rs9acaju4CJn8D3t/HyP9rfcvewO7+597Tx+/iE7cHFvs+si/asjAr75I t1BCbElNhTrmn8lEN0R+v/5CHIJwzwf07yDFKeN9a4gyHO7ekKQ2omh3dohyGdo6 ikUeRo6GMQLzdX59me9BGKswGPpScKtCByMUMMwaiBRIHLQwkhTOZtvlSsKGmqrd KB3g66fLoVvTOP2E4nN0CWwz3xzntJPmcQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:04 2025 by rpki-client