$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d29c2818-3a3f-3805-ad48-b0c1ec71ce1c.roa File: d29c2818-3a3f-3805-ad48-b0c1ec71ce1c.roa (raw, json) Hash identifier: xMUp+IRylmuosnqNLHlxO8/UvC/7cKxflMqtPoU3du8= Subject key identifier: 70:33:A3:99:F2:B5:3B:15:11:83:8B:E8:73:A6:10:8D:B8:2A:78:54 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF618A5B39A3964B444680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d29c2818-3a3f-3805-ad48-b0c1ec71ce1c.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e89:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:61:8a:5b:39:a3:96:4b:44:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=7001a6f3-172b-42ae-ab5a-df9c3f9e8f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:22:b2:7f:f6:35:27:5e:78:ff:47:3f:60: dd:9b:69:c3:c2:f4:62:ea:66:ab:e5:79:ed:12:f3: a5:66:de:4a:88:23:bf:50:1b:80:05:6b:fa:dc:6b: b6:d1:a3:f7:d0:42:74:e4:18:78:c3:1d:7f:81:9c: 72:75:cc:a9:7e:04:c2:18:ee:7c:e2:d2:6b:81:15: 15:e9:64:a3:11:22:47:75:84:0f:77:21:6c:92:d1: 7b:d7:b5:99:e6:11:d5:d6:53:ab:f1:a0:47:db:59: dd:8b:aa:69:fb:dd:82:33:dd:ee:72:56:43:f5:3d: 40:cb:a1:8a:90:54:0f:84:3b:bb:64:c5:ee:cb:ad: 9d:4b:c3:d7:7e:9d:a4:8c:25:dc:e4:81:f3:f8:4e: 92:7e:4b:11:42:b1:21:95:20:fb:9c:13:af:55:aa: 15:c2:93:b3:41:ae:fc:92:2f:16:d1:9b:a6:f5:2b: d3:a2:1f:65:c4:b6:be:05:ed:5d:df:7b:25:c1:9a: ec:73:17:6f:91:f4:53:14:07:54:25:54:8c:72:7a: 83:8c:9f:16:ee:ec:3f:53:bc:b8:88:36:1b:37:49: 6d:27:a4:c1:3a:19:94:64:bd:e7:ec:8c:5d:17:2f: 1e:46:90:58:11:85:77:11:96:94:3e:3e:f7:b6:31: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:A3:99:F2:B5:3B:15:11:83:8B:E8:73:A6:10:8D:B8:2A:78:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d29c2818-3a3f-3805-ad48-b0c1ec71ce1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:76:9f:43:57:c2:0a:7f:9d:c4:a9:f8:0a:db:ba:cc:b1:0a: bb:b4:fa:6e:67:52:f1:d2:e5:db:cd:90:41:df:59:88:b2:7c: 00:23:29:3d:b6:cc:a5:45:d8:a9:e3:c1:23:84:b8:72:4d:8d: dd:7f:0c:9a:04:7a:be:45:15:cc:66:3c:6c:4f:b4:36:f3:14: b2:8d:82:0d:4d:d9:81:d6:83:9f:dd:be:45:c6:6c:8f:ea:40: 6c:c5:5e:95:13:6b:3d:44:d7:7a:fe:e9:de:1d:86:ee:a7:66: 46:f0:70:9a:1f:a7:d5:a4:81:d1:aa:aa:aa:5a:a8:bf:c1:69: 6a:d6:a2:ca:b8:1f:98:52:48:cb:08:6e:c2:29:33:ff:bf:ce: 69:60:6e:a3:b8:73:cc:d3:ae:29:cc:c9:27:3d:34:fd:40:ee: 8f:92:a8:77:8b:08:49:97:24:7d:d1:9a:05:2f:a4:a8:9b:bb: a3:ca:a6:00:d6:ff:ff:60:8b:00:7a:b7:10:23:9b:fa:7d:27: 45:9a:37:87:de:2f:e8:ee:7d:46:49:92:e3:10:6b:06:b2:cc: 77:9d:46:5d:f5:c2:13:d8:43:9e:d5:8b:2e:da:57:57:c2:ae: 2f:0d:69:97:53:d3:c3:d1:33:84:81:c9:1c:fd:8e:4f:b8:72: c6:d1:85:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72GKWzmjlktERoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NzAwMWE2ZjMtMTcyYi00MmFlLWFiNWEtZGY5YzNmOWU4ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKkisn/2NSdeeP9HP2Ddm2nDwvRi6mar5Xnt EvOlZt5KiCO/UBuABWv63Gu20aP30EJ05Bh4wx1/gZxydcypfgTCGO584tJrgRUV 6WSjESJHdYQPdyFsktF717WZ5hHV1lOr8aBH21ndi6pp+92CM93uclZD9T1Ay6GK kFQPhDu7ZMXuy62dS8PXfp2kjCXc5IHz+E6SfksRQrEhlSD7nBOvVaoVwpOzQa78 ki8W0Zum9SvToh9lxLa+Be1d33slwZrscxdvkfRTFAdUJVSMcnqDjJ8W7uw/U7y4 iDYbN0ltJ6TBOhmUZL3n7IxdFy8eRpBYEYV3EZaUPj73tjHZIQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHAzo5nytTsVEYOL6HOmEI24KnhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDI5YzI4MTgtM2EzZi0z ODA1LWFkNDgtYjBjMWVjNzFjZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAc3afQ1fCCn+dxKn4Ctu6zLEKu7T6bmdS8dLl282QQd9ZiLJ8ACMp PbbMpUXYqePBI4S4ck2N3X8MmgR6vkUVzGY8bE+0NvMUso2CDU3ZgdaDn92+RcZs j+pAbMVelRNrPUTXev7p3h2G7qdmRvBwmh+n1aSB0aqqqlqov8FpataiyrgfmFJI ywhuwikz/7/OaWBuo7hzzNOuKczJJz00/UDuj5Kod4sISZckfdGaBS+kqJu7o8qm ANb//2CLAHq3ECOb+n0nRZo3h94v6O59RkmS4xBrBrLMd51GXfXCE9hDntWLLtpX V8KuLw1pl1PTw9EzhIHJHP2OT7hyxtGF1g== -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:49 2025 by rpki-client