$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json) Hash identifier: odRfjBugpXmRoVc2DPcnqGVRTSwG7MrYdfpqrJ03TLw= Subject key identifier: 3B:96:72:BE:80:4A:C1:98:F2:17:86:C1:5B:5B:A8:D5:9C:CB:31:4A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA386AB1E6D24C06D7AE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:38:6a:b1:e6:d2:4c:06:d7:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=46ad6463-58fc-4787-951d-97de8548e3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:da:80:73:7c:83:3e:c6:e5:ba:f2:f6:a5: 26:d9:6d:d6:83:7f:21:08:c2:ac:02:0a:c3:13:92: 71:82:2a:ca:0b:ed:49:8d:1e:8d:3b:e6:06:0a:7b: cb:98:7a:d7:ba:ca:6a:64:ff:de:78:80:ec:5c:02: cb:19:f3:18:3f:0f:ed:b8:64:d1:77:f3:bd:8d:92: 8e:6d:47:bc:12:f9:d6:52:2f:68:d7:21:1a:a4:1d: d3:86:eb:7f:e1:bd:2f:75:4a:0a:e3:79:bd:86:9c: 03:68:ac:33:9f:a5:d6:74:bf:52:f6:d5:ce:74:b5: a8:45:ac:39:d7:1c:b1:12:d2:89:b8:97:34:24:c9: 20:ee:de:32:ea:c3:26:45:28:e8:47:2a:5b:40:9f: e8:37:ab:35:85:25:2f:2d:b9:1a:4f:e3:76:9f:1b: 82:71:6b:63:da:0e:3a:f2:3b:75:e6:d2:ad:7d:35: db:6c:09:4d:c1:73:d4:00:a3:e2:20:6e:a9:52:42: 35:5a:c9:5d:f2:44:a5:91:d2:8c:4d:6b:b8:3f:29: e6:1b:b5:94:c1:ab:66:eb:7a:5d:27:8c:0c:31:f9: e7:b7:50:2f:55:b0:a2:f2:8b:fb:1c:6c:ca:fe:72: 5b:d0:0f:5d:54:3a:3f:a3:a9:41:af:87:ae:eb:1b: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:72:BE:80:4A:C1:98:F2:17:86:C1:5B:5B:A8:D5:9C:CB:31:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:40:42:eb:ee:e6:5e:48:20:cc:63:43:e6:e8:07:fe:db:c3: 2a:d4:e4:08:34:79:ca:23:95:ea:e1:88:49:b3:e0:98:48:7c: 71:fe:c8:3d:a5:48:9a:4e:6d:52:62:b6:a0:ea:66:60:93:ec: 74:aa:0e:de:0e:55:fb:74:c2:6f:fc:17:c2:51:73:a5:bb:e6: b2:e5:c0:38:e8:9c:ec:40:c4:9b:96:c0:d8:c9:05:66:0c:8b: b0:32:21:40:d5:66:6b:4e:21:e7:06:91:9d:6d:36:35:fb:f1: 34:45:b1:fd:32:0e:2c:75:6d:43:28:53:b2:ad:1e:83:4a:45: c9:45:69:f9:cd:21:d3:83:02:43:d3:4f:ef:d0:25:72:71:7c: 16:a3:66:1d:98:a0:23:e1:6e:b4:bb:c3:5c:2f:50:aa:ca:2f: 81:8f:d0:83:a2:af:3e:a3:ae:82:38:02:7d:c4:e8:8e:5c:65: 41:49:5d:4c:cc:26:2e:a3:da:2f:4b:52:59:97:b7:3b:83:d8: 4f:47:d6:b9:d7:93:d4:62:96:0d:f6:03:14:8a:9e:2b:4e:57: 86:12:64:9b:ab:a5:19:ad:10:34:8f:77:f5:a0:53:26:40:58: ff:6c:62:03:6e:52:8f:10:e9:74:42:08:ef:9f:e7:68:00:45: d1:0f:14:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkujhqsebSTAbXrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDZhZDY0NjMtNThmYy00Nzg3LTk1MWQtOTdkZTg1NDhlM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJragHN8gz7G5bry9qUm2W3Wg38hCMKsAgrD E5JxgirKC+1JjR6NO+YGCnvLmHrXuspqZP/eeIDsXALLGfMYPw/tuGTRd/O9jZKO bUe8EvnWUi9o1yEapB3Thut/4b0vdUoK43m9hpwDaKwzn6XWdL9S9tXOdLWoRaw5 1xyxEtKJuJc0JMkg7t4y6sMmRSjoRypbQJ/oN6s1hSUvLbkaT+N2nxuCcWtj2g46 8jt15tKtfTXbbAlNwXPUAKPiIG6pUkI1Wsld8kSlkdKMTWu4PynmG7WUwatm63pd J4wMMfnnt1AvVbCi8ov7HGzK/nJb0A9dVDo/o6lBr4eu6xvSWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDuWcr6ASsGY8heGwVtbqNWcyzFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGI4NWFiYjktY2QzNC0z MTJmLWE2YTItNzhkYjI0ZTA1YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuioww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADEBC6+7mXkggzGND5ugH/tvDKtTkCDR5yiOV6uGISbPgmEh8cf7I PaVImk5tUmK2oOpmYJPsdKoO3g5V+3TCb/wXwlFzpbvmsuXAOOic7EDEm5bA2MkF ZgyLsDIhQNVma04h5waRnW02NfvxNEWx/TIOLHVtQyhTsq0eg0pFyUVp+c0h04MC Q9NP79AlcnF8FqNmHZigI+FutLvDXC9QqsovgY/Qg6KvPqOugjgCfcTojlxlQUld TMwmLqPaL0tSWZe3O4PYT0fWudeT1GKWDfYDFIqeK05XhhJkm6ulGa0QNI939aBT JkBY/2xiA25SjxDpdEII75/naABF0Q8UWQ== -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:36 2025 by rpki-client