$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa File: cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa (raw, json) Hash identifier: 9Cgafy0IBJbQ2Ula9Rv3Pjt18DFKh/A1ccfyXtnXSyw= Subject key identifier: 33:4A:68:72:68:56:4B:5E:2C:D9:41:B9:6B:2A:45:4A:C3:A6:03:A4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584996C499124E6017243B037380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e88:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:99:12:4e:60:17:24:3b:03:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=9c349c96-e61e-45bc-bb7d-ae667b5d3d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:06:d3:80:b4:a8:4e:ce:1d:a1:a1:f6:ed: 23:bd:89:2e:fa:90:b7:cc:41:3f:c2:c6:9f:ee:5c: c5:e7:bd:91:0b:5b:78:bb:bb:e1:09:31:45:f9:db: ca:36:4d:f1:46:58:f8:55:e1:db:9a:68:2c:65:e6: 0e:f9:5e:3a:81:a0:f4:29:15:66:88:a9:ae:77:44: 81:2d:63:9a:26:61:f5:b8:af:cd:5d:97:bb:15:ba: 43:d2:d3:07:7d:6c:9d:b9:ee:3d:32:3b:7c:8b:4f: b3:5c:26:c6:b4:a6:2a:9d:b6:2e:f1:1b:7b:b7:c5: 13:63:7f:45:b1:3b:64:94:4f:55:f7:a8:84:a3:89: 6a:95:e6:68:e6:85:f2:59:5f:39:f4:73:67:55:73: 42:06:12:68:94:3b:c1:51:01:ed:59:47:72:37:a5: ff:1e:93:67:93:c9:e5:49:d8:55:f1:82:03:2c:9d: ad:24:47:b9:2f:d0:a1:08:fe:45:be:4c:87:0a:7d: b2:ad:01:74:42:8f:f5:7c:12:54:74:22:0b:4a:38: 6f:d5:7f:ed:7a:10:91:f9:ba:81:77:1f:3a:ee:4b: 72:f3:9b:b7:6c:44:e1:41:f5:6d:f5:8a:39:d9:01: 9c:7b:18:c1:cd:5f:79:bd:ef:41:4c:cc:9c:7f:3d: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:68:72:68:56:4B:5E:2C:D9:41:B9:6B:2A:45:4A:C3:A6:03:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d3:52:09:42:5a:8f:21:b8:8e:c4:a6:32:1f:66:71:63:21: 88:dd:bc:90:61:b6:c4:58:8f:8f:5f:e9:c4:16:26:38:87:7b: 9a:52:51:e0:44:2f:d0:8f:db:1e:91:da:1f:50:47:ce:40:0a: f9:7c:5f:8f:d9:5d:97:d2:27:f1:cb:25:67:72:b9:ca:ea:6f: 79:e9:23:01:7c:ff:70:9b:71:90:29:a7:19:e1:28:9b:ef:de: 8e:87:43:c4:36:e6:53:18:e7:66:e5:4a:ab:18:4f:90:db:d3: f4:d5:46:cf:26:c7:a9:35:ff:8a:4e:89:6a:b8:e2:90:f4:2b: a5:a3:a4:21:da:e4:1c:57:df:b5:68:c6:bd:7e:17:a9:0d:9c: b6:77:14:be:7a:99:1a:f3:07:87:fa:40:59:f3:75:c9:93:b7: 83:90:82:b8:ba:e1:0f:1b:14:38:60:bb:b7:a7:3e:c7:19:dd: 46:98:df:16:ea:8c:e0:42:2c:09:32:03:1e:7e:53:b1:32:33: 6b:92:14:93:73:f1:6c:70:e4:20:d8:ca:92:c0:9f:84:e3:d3: ec:4e:5e:5f:97:45:b4:00:1b:9c:49:4f:ea:4e:6b:e5:5f:e3: 9c:be:14:f0:e5:73:1e:0a:13:99:1b:7f:a4:a7:05:49:77:45: fc:c7:b8:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJkSTmAXJDsDc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OWMzNDljOTYtZTYxZS00NWJjLWJiN2QtYWU2NjdiNWQzZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxMG04C0qE7OHaGh9u0jvYku+pC3zEE/wsaf 7lzF572RC1t4u7vhCTFF+dvKNk3xRlj4VeHbmmgsZeYO+V46gaD0KRVmiKmud0SB LWOaJmH1uK/NXZe7FbpD0tMHfWydue49Mjt8i0+zXCbGtKYqnbYu8Rt7t8UTY39F sTtklE9V96iEo4lqleZo5oXyWV859HNnVXNCBhJolDvBUQHtWUdyN6X/HpNnk8nl SdhV8YIDLJ2tJEe5L9ChCP5FvkyHCn2yrQF0Qo/1fBJUdCILSjhv1X/tehCR+bqB dx867kty85u3bEThQfVt9Yo52QGcexjBzV95ve9BTMycfz1XiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDNKaHJoVkteLNlBuWsqRUrDpgOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2JmZTg2ZDktNmZjOS0z YzQ3LThiNDItMjQyMmFkNTk2NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX9NSCUJajyG4jsSmMh9mcWMhiN28kGG2xFiPj1/pxBYmOId7mlJR 4EQv0I/bHpHaH1BHzkAK+Xxfj9ldl9In8cslZ3K5yupveekjAXz/cJtxkCmnGeEo m+/ejodDxDbmUxjnZuVKqxhPkNvT9NVGzybHqTX/ik6JarjikPQrpaOkIdrkHFff tWjGvX4XqQ2ctncUvnqZGvMHh/pAWfN1yZO3g5CCuLrhDxsUOGC7t6c+xxndRpjf FuqM4EIsCTIDHn5TsTIza5IUk3PxbHDkINjKksCfhOPT7E5eX5dFtAAbnElP6k5r 5V/jnL4U8OVzHgoTmRt/pKcFSXdF/Me4OQ== -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:45 2025 by rpki-client