$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa File: bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa (raw, json) Hash identifier: z5HtUEDAI78G+CFU2/oOekWr9Foc0wytJBxAX/NHySM= Subject key identifier: 25:DB:1D:DA:CA:4E:7C:A4:CD:3A:B5:52:72:14:F8:D9:A3:50:77:6A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584996C49A1BF8C066DE96519E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e88:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:9a:1b:f8:c0:66:de:96:51:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=2b1765ae-7cd6-4a6b-bde2-c0a2be7d823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:cd:88:1b:da:ef:79:33:d0:2b:8f:94:ad: 44:f4:aa:06:3a:d1:41:30:77:a5:5b:7c:a9:e6:e3: 7a:4d:2b:d3:f6:a8:10:25:32:b7:aa:37:30:74:4e: 19:b2:06:28:f2:80:19:d6:88:87:4f:76:8f:84:bb: 3c:24:49:63:ee:ed:dd:b2:e3:cb:7d:18:28:f6:94: a5:03:10:a7:16:1e:2a:3a:8c:8c:30:d6:f0:81:4e: cf:5f:99:b0:23:97:e7:a8:7e:e1:91:16:7e:d0:0f: 0f:e8:dd:26:b0:a4:85:fc:7f:20:7d:6e:06:c8:1f: 17:95:eb:96:9e:19:ad:b7:5f:a1:5b:75:5a:ec:25: 3c:82:5b:9f:f0:60:6c:c1:3e:85:26:8a:3b:bb:2b: 80:60:86:b9:b0:d3:32:94:7d:71:9a:d1:73:4c:54: 37:51:dc:6a:5b:d2:b6:ac:dc:2b:85:86:6d:aa:16: 60:ff:fa:da:95:02:33:ea:03:e8:3c:6c:af:ec:b3: 12:09:f3:48:d4:c5:c8:28:fb:83:32:30:3c:1b:5a: 20:0b:f6:9e:fb:22:b8:b7:ec:c4:50:29:1c:6f:fa: 00:40:33:01:28:cd:39:83:8d:36:70:68:cf:c6:1b: ca:31:d8:75:f2:60:28:18:62:f8:0b:75:ac:9a:c4: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:1D:DA:CA:4E:7C:A4:CD:3A:B5:52:72:14:F8:D9:A3:50:77:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1c:39:41:aa:14:d2:56:39:69:b3:5b:b8:3c:36:8e:c8:78: 49:73:bc:c4:55:e2:31:13:d0:31:5e:dd:8d:21:48:66:08:e6: e3:cc:22:ed:02:34:fc:4c:19:49:00:09:dc:4c:c8:dd:02:98: 76:e9:75:1f:de:c4:65:87:b8:3d:c6:80:04:d3:e8:97:4d:a9: 63:09:02:2a:35:fa:7b:cd:03:90:7a:51:82:01:0d:c6:66:f5: 8c:90:47:28:e9:53:f5:22:02:dc:a5:44:55:4f:83:f4:da:91: 19:c3:93:6f:84:f8:77:12:2c:98:7e:cf:09:b5:16:f8:b4:08: 52:5f:ea:bf:fb:48:26:c0:b6:db:06:35:aa:a3:38:08:0a:91: 62:bf:e0:34:f7:43:40:57:98:3c:10:ca:eb:b6:a0:27:fc:a7: c3:25:93:17:a7:d9:1c:a2:b6:08:11:29:af:6b:a3:7b:e8:40: 0b:3e:dc:c4:56:bd:28:d3:13:5c:01:83:c8:a2:90:ba:17:69: 77:8a:8e:b3:39:f6:db:d5:96:4e:89:c2:36:91:7d:ca:fa:dc: 1f:67:8e:be:00:a9:62:d5:4a:ef:76:49:f1:87:5f:6d:4c:91: 10:8c:b2:06:f9:c7:13:1a:ae:07:03:2e:82:54:02:0b:4c:d8: 6a:34:1d:ec -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJob+MBm3pZRnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MmIxNzY1YWUtN2NkNi00YTZiLWJkZTItYzBhMmJlN2Q4MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu/NiBva73kz0CuPlK1E9KoGOtFBMHelW3yp 5uN6TSvT9qgQJTK3qjcwdE4ZsgYo8oAZ1oiHT3aPhLs8JElj7u3dsuPLfRgo9pSl AxCnFh4qOoyMMNbwgU7PX5mwI5fnqH7hkRZ+0A8P6N0msKSF/H8gfW4GyB8XleuW nhmtt1+hW3Va7CU8gluf8GBswT6FJoo7uyuAYIa5sNMylH1xmtFzTFQ3UdxqW9K2 rNwrhYZtqhZg//ralQIz6gPoPGyv7LMSCfNI1MXIKPuDMjA8G1ogC/ae+yK4t+zE UCkcb/oAQDMBKM05g402cGjPxhvKMdh18mAoGGL4C3WsmsRYdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCXbHdrKTnykzTq1UnIU+NmjUHdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY4OWRkNmEtODhjYi0z ZGY0LWJhMDEtNzJmYjEwMjEwYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiHAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAchw5QaoU0lY5abNbuDw2jsh4SXO8xFXiMRPQMV7djSFIZgjm48wi 7QI0/EwZSQAJ3EzI3QKYdul1H97EZYe4PcaABNPol02pYwkCKjX6e80DkHpRggEN xmb1jJBHKOlT9SIC3KVEVU+D9NqRGcOTb4T4dxIsmH7PCbUW+LQIUl/qv/tIJsC2 2wY1qqM4CAqRYr/gNPdDQFeYPBDK67agJ/ynwyWTF6fZHKK2CBEpr2uje+hACz7c xFa9KNMTXAGDyKKQuhdpd4qOszn229WWTonCNpF9yvrcH2eOvgCpYtVK73ZJ8Ydf bUyREIyyBvnHExquBwMuglQCC0zYajQd7A== -----END CERTIFICATE-----Generated at Sun Apr 27 04:33:30 2025 by rpki-client