$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8882bb6-a2ab-3bd2-a264-cafa7092340e.roa File: c8882bb6-a2ab-3bd2-a264-cafa7092340e.roa (raw, json) Hash identifier: UzYFokDqBhVGQ8M2f73TK+G2UDWF23M5HL3fzTvF66k= Subject key identifier: 50:96:40:31:0C:77:9C:62:07:93:8F:8C:A3:B6:4F:B7:24:04:48:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA46C1CF55B71F2E9CE900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8882bb6-a2ab-3bd2-a264-cafa7092340e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e89:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:46:c1:cf:55:b7:1f:2e:9c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f3c31d83-aa4c-445a-96cc-d6f80d30864e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:7f:5c:17:31:e3:bf:0f:65:4b:20:55:5d: c2:ca:8f:54:c6:4f:b1:96:38:71:72:56:04:4f:86: 21:89:06:6d:0d:37:93:35:22:5a:11:7a:df:56:1d: 4c:c3:f8:84:e1:a0:d5:22:96:3a:89:3a:82:b6:61: 2f:5f:17:99:48:f6:b6:29:fc:2b:67:5e:96:23:fc: a2:6e:c9:f1:06:11:0f:9c:b0:07:52:80:b1:14:b1: 66:b4:81:f9:c3:ad:d2:c7:06:15:7b:93:70:ca:cf: b7:74:b4:67:b6:df:70:16:54:f8:a8:7b:bd:56:6a: c2:33:23:c5:8c:b6:ad:82:01:f9:29:4c:ef:da:b5: 73:d7:b9:2f:f3:2a:55:07:6f:bf:58:26:40:93:9d: b0:ce:c6:7e:a7:49:f9:64:ba:eb:49:64:f6:c5:80: 36:fe:2e:1e:e5:01:e5:50:38:3f:92:bf:52:ba:62: 1e:30:dc:64:19:b3:48:d7:b1:8a:73:05:64:5f:24: 72:a0:f6:fc:f7:ed:bb:ad:d6:9c:b8:90:92:a8:2c: 4f:95:c3:4b:34:73:9d:c0:9b:55:ba:a6:24:6c:82: bd:7b:35:cd:bd:a3:95:3e:12:14:ef:61:f3:fe:f8: 2a:da:c3:c3:a6:ac:22:8f:8e:1b:0c:21:37:5d:2c: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:96:40:31:0C:77:9C:62:07:93:8F:8C:A3:B6:4F:B7:24:04:48:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8882bb6-a2ab-3bd2-a264-cafa7092340e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:26:71:33:a9:b9:5a:68:7e:9d:3c:aa:f9:c8:65:51:df: dc:8e:86:71:dc:bc:ea:c7:8e:41:24:46:a2:2b:d7:0a:06:72: 84:b7:a2:67:af:2e:66:ca:e7:93:f7:ef:1f:e3:8e:15:ee:26: bf:a1:b7:2c:00:95:7c:ad:75:2e:33:9c:f0:55:ad:7b:00:39: 37:4b:74:aa:5c:48:1e:18:d1:a8:ea:c6:30:ac:2b:c7:7e:33: 28:7f:f6:69:92:f3:7f:8d:3e:6d:f6:13:31:9a:70:a5:56:ed: 24:aa:e2:4b:94:f9:17:1a:77:35:f7:d9:ac:57:3a:5e:19:80: af:7e:f4:35:1f:4b:e5:90:ed:21:52:e8:c1:a4:98:7f:c4:28: c9:17:59:3e:6a:e2:84:59:b2:b1:b0:f4:b2:2b:de:c9:f7:bf: 5e:d9:18:05:9f:7d:de:24:53:95:06:77:41:be:32:1e:35:e7: f8:66:55:96:32:d7:c8:5a:09:26:6c:a4:89:44:3d:86:f7:8e: b2:4b:b6:b2:bf:52:4f:ae:58:bf:cc:b7:5f:49:f9:f1:73:e6: 45:07:b3:c5:1f:58:60:32:29:15:c1:ab:09:9d:ae:25:91:01: 48:a4:92:8f:e2:35:e9:6d:63:66:cd:68:e3:d2:ca:0b:78:e1: 47:82:6d:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukbBz1W3Hy6c6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjNjMzFkODMtYWE0Yy00NDVhLTk2Y2MtZDZmODBkMzA4NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgt/XBcx478PZUsgVV3Cyo9Uxk+xljhxclYE T4YhiQZtDTeTNSJaEXrfVh1Mw/iE4aDVIpY6iTqCtmEvXxeZSPa2KfwrZ16WI/yi bsnxBhEPnLAHUoCxFLFmtIH5w63SxwYVe5Nwys+3dLRntt9wFlT4qHu9VmrCMyPF jLatggH5KUzv2rVz17kv8ypVB2+/WCZAk52wzsZ+p0n5ZLrrSWT2xYA2/i4e5QHl UDg/kr9SumIeMNxkGbNI17GKcwVkXyRyoPb89+27rdacuJCSqCxPlcNLNHOdwJtV uqYkbIK9ezXNvaOVPhIU72Hz/vgq2sPDpqwij44bDCE3XSzisQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFCWQDEMd5xiB5OPjKO2T7ckBEgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzg4ODJiYjYtYTJhYi0z YmQyLWEyNjQtY2FmYTcwOTIzNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbZMmcTOpuVpofp08qvnIZVHf3I6Gcdy86seOQSRGoivXCgZyhLei Z68uZsrnk/fvH+OOFe4mv6G3LACVfK11LjOc8FWtewA5N0t0qlxIHhjRqOrGMKwr x34zKH/2aZLzf40+bfYTMZpwpVbtJKriS5T5Fxp3NffZrFc6XhmAr370NR9L5ZDt IVLowaSYf8QoyRdZPmrihFmysbD0siveyfe/XtkYBZ993iRTlQZ3Qb4yHjXn+GZV ljLXyFoJJmykiUQ9hveOsku2sr9ST65Yv8y3X0n58XPmRQezxR9YYDIpFcGrCZ2u JZEBSKSSj+I16W1jZs1o49LKC3jhR4Jtkg== -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:57 2025 by rpki-client