$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd6b7832-87a3-3174-99ce-68327f578f1a.roa File: dd6b7832-87a3-3174-99ce-68327f578f1a.roa (raw, json) Hash identifier: dy8IIv6AmG4MrONf3PBD4b5cOz3p4/Mz5BLqH8QszpQ= Subject key identifier: 1E:24:1A:E6:3B:CA:87:12:97:33:9C:30:4F:B8:CB:0C:C9:FA:35:E1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858499BF5326AA2C0D5D504330D40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd6b7832-87a3-3174-99ce-68327f578f1a.roa Signing time: Tue 22 Apr 2025 09:38:10 +0000 ROA not before: Tue 22 Apr 2025 09:38:10 +0000 ROA not after: Mon 21 Jul 2025 09:38:10 +0000 asID: 19905 IP address blocks: 2604:2e88:e800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:32:6a:a2:c0:d5:d5:04:33:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 22 09:38:10 2025 GMT Not After : Jul 21 09:38:10 2025 GMT Subject: CN=6064ed06-a198-486d-bff0-dde95cf17a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:2c:1c:f2:76:d0:ad:58:7d:28:c1:1f:b0: 78:19:36:88:03:0c:e0:e8:c0:af:b0:03:80:2f:c0: f6:08:a5:70:e2:3a:f2:42:f1:62:74:20:bd:29:38: b7:0a:36:aa:76:b2:75:eb:27:41:e6:5c:72:f7:68: 26:a8:96:45:c3:69:c8:7b:37:27:42:24:ee:0b:c1: 12:73:87:dc:fc:f7:ca:b8:f6:a9:95:e7:49:af:6b: c0:ef:f2:bc:d3:c3:10:8d:a8:95:2c:89:13:24:d2: dd:e6:c5:b3:a2:c9:41:b9:a2:fb:54:7b:64:8d:83: e7:a6:e7:20:57:b7:78:18:df:e3:79:8e:d8:da:01: f1:19:f4:99:25:af:d6:4e:cb:79:7e:6d:b7:24:a8: 8d:15:98:aa:9e:50:cf:69:3a:6e:82:40:7b:3e:b8: 06:f3:e1:29:1a:dd:16:7e:59:3a:ca:4c:34:fb:18: 1c:88:4a:b9:ff:db:22:55:2d:07:1b:26:c5:e4:4a: 96:93:3c:7e:80:57:81:ce:65:11:42:55:ba:38:7b: a0:7f:b0:44:3a:3f:99:d9:34:07:e5:1d:99:7b:41: 95:30:b6:3c:dc:f3:a8:c9:93:18:f9:83:e2:f6:58: 59:5b:0e:4b:f3:5e:07:3a:69:d2:ae:17:34:39:46: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:24:1A:E6:3B:CA:87:12:97:33:9C:30:4F:B8:CB:0C:C9:FA:35:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd6b7832-87a3-3174-99ce-68327f578f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:e800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f1:0b:34:eb:3f:61:e9:bb:ce:f8:78:9b:1a:4b:c0:4a:f3: 76:f3:d8:b8:0f:c1:29:c6:7e:87:b1:32:48:74:02:05:7f:f1: cb:fd:37:c9:85:d9:62:1d:b1:e6:cb:f2:0c:52:b8:26:94:2f: be:a8:a0:42:6e:77:72:52:1a:29:d6:5f:19:9d:ac:43:ec:06: 4a:b8:92:f3:a1:b5:a4:0d:5b:c7:50:dc:6b:81:92:98:b1:ba: 4c:d9:17:34:93:9a:08:33:44:45:ef:f7:4b:c3:01:43:b2:41: f2:81:d3:a0:47:12:ec:f3:a3:9a:86:d8:65:6c:2e:58:eb:c7: db:42:06:ee:05:ae:e7:33:ea:71:14:2b:74:84:61:82:48:52: 6a:af:10:5c:fd:31:0d:4c:ac:14:58:e5:83:23:2a:c0:07:73: a2:7a:9b:44:b0:49:e6:32:2e:be:68:77:e2:85:da:c6:f2:bc: b3:e4:c4:cc:6c:93:45:9c:ed:6d:dd:7d:c7:c2:46:2a:c1:20: 0e:01:27:f1:31:92:b1:c1:90:b5:e8:a4:c6:ad:1a:c4:e7:f9: e4:34:da:7e:84:8a:bd:9a:58:be:41:d8:bc:2f:65:4e:65:97: b8:db:94:1c:cd:57:99:5a:a5:84:d7:ac:c6:4b:38:94:4a:87: 2f:14:cd:82 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmb9TJqosDV1QQzDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyMjA5MzgxMFoXDTI1MDcyMTA5MzgxMFowLzEtMCsGA1UEAxMk NjA2NGVkMDYtYTE5OC00ODZkLWJmZjAtZGRlOTVjZjE3YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwwsHPJ20K1YfSjBH7B4GTaIAwzg6MCvsAOA L8D2CKVw4jryQvFidCC9KTi3CjaqdrJ16ydB5lxy92gmqJZFw2nIezcnQiTuC8ES c4fc/PfKuPapledJr2vA7/K808MQjaiVLIkTJNLd5sWzoslBuaL7VHtkjYPnpucg V7d4GN/jeY7Y2gHxGfSZJa/WTst5fm23JKiNFZiqnlDPaTpugkB7PrgG8+EpGt0W flk6ykw0+xgciEq5/9siVS0HGybF5EqWkzx+gFeBzmURQlW6OHugf7BEOj+Z2TQH 5R2Ze0GVMLY83POoyZMY+YPi9lhZWw5L814HOmnSrhc0OUbqIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB4kGuY7yocSlzOcME+4ywzJ+jXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGQ2Yjc4MzItODdhMy0z MTc0LTk5Y2UtNjgzMjdmNTc4ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGfELNOs/Yem7zvh4mxpLwErzdvPYuA/BKcZ+h7EySHQCBX/xy/03 yYXZYh2x5svyDFK4JpQvvqigQm53clIaKdZfGZ2sQ+wGSriS86G1pA1bx1Dca4GS mLG6TNkXNJOaCDNERe/3S8MBQ7JB8oHToEcS7POjmobYZWwuWOvH20IG7gWu5zPq cRQrdIRhgkhSaq8QXP0xDUysFFjlgyMqwAdzonqbRLBJ5jIuvmh34oXaxvK8s+TE zGyTRZztbd19x8JGKsEgDgEn8TGSscGQteikxq0axOf55DTafoSKvZpYvkHYvC9l TmWXuNuUHM1XmVqlhNesxks4lEqHLxTNgg== -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:30 2025 by rpki-client