$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa File: d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa (raw, json) Hash identifier: vs3JXFQ9z87/Y3f+Lbi5gzucaipr5gOQDXu4ZWKnaAo= Subject key identifier: D8:DA:D2:C5:71:98:96:09:E8:FD:02:71:32:DD:BE:D7:18:86:7B:CC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A784B25FA4FDC8D1EE2E4B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e88:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b2:5f:a4:fd:c8:d1:ee:2e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fd4e9c84-576a-4b78-831b-be4ae00dda40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:5b:f5:29:ab:10:1c:b0:03:d7:50:b0:ac: af:85:bf:ec:0e:3c:a4:2c:1a:23:90:e0:85:54:3c: 5b:fe:f5:e7:f9:f2:f2:24:db:bd:29:15:1d:b5:4d: 99:3d:7a:4e:5b:3e:fa:2c:b2:cf:f7:3f:99:17:03: 6d:38:a7:46:dc:ec:7b:66:64:8b:e6:6f:76:15:7b: 0e:7d:0e:7c:b5:c9:fc:ec:ed:cb:5a:8f:9d:93:88: 3f:2e:2a:a9:cb:d2:e0:1c:6b:65:95:d8:95:36:d9: 85:35:d8:50:22:c3:3a:01:8e:ef:6a:73:5f:1c:44: 3a:2c:0d:f8:56:b4:2d:ef:01:4c:15:09:83:ee:7f: 09:fd:27:3b:48:71:17:da:47:43:9a:46:2b:c5:f8: 9a:b8:16:5b:f1:4b:a0:01:05:d3:d8:af:14:06:37: a3:7d:40:57:b8:12:1c:80:2f:d8:d2:ce:d5:92:f6: 8f:1b:a0:a2:fd:6f:08:b0:f2:86:f2:ec:a2:56:80: e7:44:9b:3b:09:7b:be:9f:7a:b5:1d:dc:17:5b:cd: 3e:31:db:07:69:a7:44:52:a0:b1:f3:e0:38:5b:9b: 24:e4:ff:c2:49:2b:af:86:9a:39:42:48:e8:e6:62: 65:c5:39:d7:12:17:09:67:2d:d5:fc:67:6c:12:65: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DA:D2:C5:71:98:96:09:E8:FD:02:71:32:DD:BE:D7:18:86:7B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:64:c3:0b:1b:d6:85:bc:c4:6c:77:12:4f:73:65:10:2f:3c: 17:78:f2:42:4d:6a:07:fe:8c:ce:da:28:f7:f9:86:a3:d6:27: 77:ab:c9:8c:00:62:40:b5:3a:16:36:04:64:b7:a9:9a:64:3e: df:a9:3e:06:62:05:c1:ac:20:16:a1:7c:79:5a:62:1b:39:d6: 5b:f8:eb:95:01:4d:5a:44:7b:6e:2b:2f:c8:b0:6b:bd:69:b3: 74:8f:7d:b1:d5:1b:33:32:c4:39:62:cf:29:4e:df:6a:5b:99: cc:59:c7:bc:ff:2b:ba:98:fe:4b:65:7c:99:01:a5:2b:24:9e: 5e:bc:ae:0d:2b:75:16:78:4b:c4:4a:96:6d:36:e7:3e:de:2f: 95:d8:67:d6:1e:0a:07:aa:31:81:c7:b3:f3:f9:57:4f:51:9d: e2:4f:d4:99:ec:f5:b8:f9:90:c2:42:d2:91:30:8e:8e:55:b7: 61:6b:bd:5a:c5:39:ad:23:68:b5:35:e1:d1:ab:78:2d:81:c2: 1d:55:00:56:64:eb:04:7d:99:0f:04:aa:e8:4e:48:6d:b5:58: 67:9d:5f:22:c6:88:3c:33:00:07:95:8f:92:f2:7d:cd:ec:ce: e3:02:59:79:a0:17:d5:44:8b:91:ca:29:6f:12:75:48:5e:e5: f2:88:7e:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmnhLJfpP3I0e4uSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ0ZTljODQtNTc2YS00Yjc4LTgzMWItYmU0YWUwMGRkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbJb9SmrEBywA9dQsKyvhb/sDjykLBojkOCF VDxb/vXn+fLyJNu9KRUdtU2ZPXpOWz76LLLP9z+ZFwNtOKdG3Ox7ZmSL5m92FXsO fQ58tcn87O3LWo+dk4g/Liqpy9LgHGtlldiVNtmFNdhQIsM6AY7vanNfHEQ6LA34 VrQt7wFMFQmD7n8J/Sc7SHEX2kdDmkYrxfiauBZb8UugAQXT2K8UBjejfUBXuBIc gC/Y0s7VkvaPG6Ci/W8IsPKG8uyiVoDnRJs7CXu+n3q1HdwXW80+MdsHaadEUqCx 8+A4W5sk5P/CSSuvhpo5Qkjo5mJlxTnXEhcJZy3V/GdsEmWFDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNja0sVxmJYJ6P0CcTLdvtcYhnvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDllNTkxOGQtOTY2Yi0z YWNhLTg3Y2MtNDQ1M2NjYzIzY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiNgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP2TDCxvWhbzEbHcST3NlEC88F3jyQk1qB/6Mztoo9/mGo9Ynd6vJ jABiQLU6FjYEZLepmmQ+36k+BmIFwawgFqF8eVpiGznWW/jrlQFNWkR7bisvyLBr vWmzdI99sdUbMzLEOWLPKU7faluZzFnHvP8rupj+S2V8mQGlKySeXryuDSt1FnhL xEqWbTbnPt4vldhn1h4KB6oxgcez8/lXT1Gd4k/Umez1uPmQwkLSkTCOjlW3YWu9 WsU5rSNotTXh0at4LYHCHVUAVmTrBH2ZDwSq6E5IbbVYZ51fIsaIPDMAB5WPkvJ9 zezO4wJZeaAX1USLkcopbxJ1SF7l8oh+AA== -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:30 2025 by rpki-client