$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa File: de1e6af3-8042-363f-b93d-62873ae6e8f2.roa (raw, json) Hash identifier: aEcSMEW9MzB/gA6kTx0TRLwT5ifTVDZirUDJD4KWJzU= Subject key identifier: 8D:87:94:09:03:43:D8:B5:A5:DF:49:DD:E6:13:8B:C9:B4:01:FD:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF61FA9430BC6EB57E7180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8a:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:61:fa:94:30:bc:6e:b5:7e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f2a39c5b-a61d-498b-867e-b55bca6d559b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:10:dd:92:fe:ad:2d:a4:94:32:71:3d:53: de:a0:49:39:cf:4d:d0:b2:9c:28:4f:7e:e8:82:80: 05:a8:c4:3a:34:7a:02:7f:6a:f0:1d:de:c1:00:6c: d3:c3:36:fd:ba:dd:ae:e9:fb:8e:fa:8b:e6:29:a3: 0e:e7:96:41:f8:c0:7b:8e:35:1b:3f:c5:23:e4:3d: e7:97:1f:f4:4e:0b:3f:ca:0d:f9:fb:2c:c1:d2:84: b9:fc:e2:ec:dd:76:c9:84:d3:4a:ec:a8:f9:22:45: 8f:1f:7e:71:77:2b:50:5f:36:f1:4c:d2:e4:81:39: dc:60:db:21:81:f6:e6:08:42:d3:61:af:60:42:27: 17:43:0f:25:7e:d1:bc:36:d5:5f:21:cd:bd:bd:2d: 12:16:67:ca:ad:fe:ec:0a:cc:2e:b8:a6:f2:03:bd: 16:2d:3b:38:dd:23:3c:ea:cf:ba:f0:9b:c3:2d:cc: 7f:2e:6d:6e:6e:82:4d:91:f6:64:91:ac:54:8d:9e: 78:63:33:dc:cd:9e:e0:6a:5b:dd:d3:46:7c:81:01: 73:9e:2d:8e:c0:59:33:1c:6e:c9:f0:9e:75:99:95: 31:22:fc:e0:a3:74:89:99:9b:4a:83:e9:14:58:07: db:35:31:2c:58:e3:c0:2e:90:6a:24:ba:11:af:31: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:87:94:09:03:43:D8:B5:A5:DF:49:DD:E6:13:8B:C9:B4:01:FD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1e6af3-8042-363f-b93d-62873ae6e8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b3:7e:7d:0d:36:b6:a1:06:f7:fb:91:69:49:c9:3f:3c:f2: 59:96:92:a4:b5:b3:a0:42:b6:da:42:db:e4:4d:00:1e:a1:11: 7a:1f:a4:d3:21:8b:61:a9:0a:43:b0:60:19:e9:e8:61:27:01: 35:2c:b6:0c:ed:0e:94:e1:6e:02:c6:0f:3d:a8:32:b4:88:9e: 7f:db:c4:8f:43:2d:00:e3:3a:b0:60:4d:29:48:a2:42:e4:db: 7b:ce:23:28:e9:e7:70:2e:a3:ef:e6:63:18:0a:82:b6:2e:0a: 6a:02:70:f2:a9:0c:1e:43:1e:fa:6e:a2:fe:9a:b5:45:40:eb: 09:f1:e4:ed:67:57:67:f4:eb:28:ca:ef:a0:3a:6f:c0:04:be: 16:cc:e9:d9:bd:04:ef:11:cb:07:2c:7a:7e:cb:e8:b9:db:51: e8:2b:13:9a:00:32:25:db:7c:6f:f0:f1:e9:0d:e4:ae:fd:d6: 39:ed:f9:4e:e2:7f:de:59:9d:84:14:ab:99:41:72:81:bd:55: 13:f8:6b:c6:3d:a7:a0:ad:f2:6b:88:91:d9:4b:5e:95:a3:01: 2a:0b:f2:37:98:48:27:dc:01:1f:a3:35:10:6a:7b:56:d1:87: 87:78:ac:09:38:55:d0:08:a8:92:29:59:f5:cd:a9:2b:9a:3a: 10:e4:7f:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72H6lDC8brV+cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjJhMzljNWItYTYxZC00OThiLTg2N2UtYjU1YmNhNmQ1NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO0Q3ZL+rS2klDJxPVPeoEk5z03QspwoT37o goAFqMQ6NHoCf2rwHd7BAGzTwzb9ut2u6fuO+ovmKaMO55ZB+MB7jjUbP8Uj5D3n lx/0Tgs/yg35+yzB0oS5/OLs3XbJhNNK7Kj5IkWPH35xdytQXzbxTNLkgTncYNsh gfbmCELTYa9gQicXQw8lftG8NtVfIc29vS0SFmfKrf7sCswuuKbyA70WLTs43SM8 6s+68JvDLcx/Lm1uboJNkfZkkaxUjZ54YzPczZ7galvd00Z8gQFzni2OwFkzHG7J 8J51mZUxIvzgo3SJmZtKg+kUWAfbNTEsWOPALpBqJLoRrzFLyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI2HlAkDQ9i1pd9J3eYTi8m0Af2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGUxZTZhZjMtODA0Mi0z NjNmLWI5M2QtNjI4NzNhZTZlOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiggw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFrN+fQ02tqEG9/uRaUnJPzzyWZaSpLWzoEK22kLb5E0AHqEReh+k 0yGLYakKQ7BgGenoYScBNSy2DO0OlOFuAsYPPagytIief9vEj0MtAOM6sGBNKUii QuTbe84jKOnncC6j7+ZjGAqCti4KagJw8qkMHkMe+m6i/pq1RUDrCfHk7WdXZ/Tr KMrvoDpvwAS+Fszp2b0E7xHLByx6fsvoudtR6CsTmgAyJdt8b/Dx6Q3krv3WOe35 TuJ/3lmdhBSrmUFygb1VE/hrxj2noK3ya4iR2UtelaMBKgvyN5hIJ9wBH6M1EGp7 VtGHh3isCThV0AiokilZ9c2pK5o6EOR/sQ== -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:13 2025 by rpki-client