$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa File: e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa (raw, json) Hash identifier: 5P+EgRnjoai04t51klfKqgdI6qR3ZbNYTAUPLUjq//o= Subject key identifier: 95:5A:C6:E0:CE:9A:96:A4:79:6D:EC:05:E8:3C:EA:4F:CB:BD:EE:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A4BA1A38545AB9088624EE80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8d:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1a:38:54:5a:b9:08:86:24:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cbc83c10-9b81-4627-a18f-ee1d9550b06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:b9:aa:51:76:d8:17:05:92:8d:89:a7:79: 57:2c:40:66:45:1a:89:e1:c2:ee:c1:23:6e:84:4a: 72:cf:9e:f3:9c:fe:72:b5:5b:9b:5b:82:81:0d:49: 73:d5:ce:27:cb:02:06:20:ea:ef:5b:ba:ff:fb:cf: 05:90:05:35:9d:8c:68:60:0d:fe:ea:c6:a8:a3:be: c9:e0:af:68:02:ca:ae:f5:84:28:7d:f1:c2:fd:7e: 94:2a:02:27:6e:6a:98:c8:33:6f:d1:18:69:d4:69: 1c:89:19:13:85:48:c2:db:ae:ee:8f:28:a7:a5:ae: a9:b3:9e:0d:bf:26:dd:c4:ac:52:52:96:d8:52:02: f2:4f:45:2c:dd:d1:5b:82:85:4a:ad:f8:21:f5:f9: 98:9e:38:0c:2b:91:1d:0e:c0:53:3b:7b:9a:de:4c: 55:19:76:f8:ac:c0:59:5f:a5:5e:85:c3:bf:84:70: 64:84:f8:f8:3b:c8:e6:2d:4f:f4:42:ea:1c:96:fb: f0:9c:3a:40:10:60:cd:5a:c0:87:31:fd:d3:c8:78: df:b6:04:ff:05:63:90:81:6f:97:e4:01:51:16:a0: df:f1:95:59:64:b4:70:3b:f7:c1:6f:15:06:96:da: da:f2:52:15:36:bd:9c:5f:f4:96:68:ab:c1:18:90: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5A:C6:E0:CE:9A:96:A4:79:6D:EC:05:E8:3C:EA:4F:CB:BD:EE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a9:18:07:e3:30:6c:c3:77:3c:08:a9:e4:bd:92:f6:49:11: f2:41:79:54:c4:67:83:15:f7:18:f4:bd:26:d8:6c:d1:d0:a1: 65:76:36:b1:23:14:4b:6b:01:e0:5b:cd:eb:b0:a3:c7:f8:96: 3c:00:37:b4:15:38:b1:2d:c1:bf:7a:c6:8f:f9:53:47:cf:dc: d7:50:2e:98:76:e4:91:c9:b9:b2:48:1a:0c:72:4d:31:2a:0a: 3d:fe:c7:af:51:7d:42:a3:bd:c2:64:99:b5:de:d4:38:09:24: b0:21:5e:b5:54:21:0e:4b:87:5d:e3:be:62:ed:b6:d4:f5:3c: 88:19:4c:77:ec:54:02:49:e9:3b:08:f2:39:c7:35:72:2f:0b: 30:92:0b:4b:c5:9b:ca:96:20:7e:3e:88:da:8a:f9:b0:5f:c3: 3f:27:57:a4:9f:ee:93:88:a3:11:e9:30:bd:4d:7c:d6:18:74: 23:3d:3d:7d:bd:48:31:dc:3e:9c:29:e6:69:89:04:f4:a6:dd: b5:8a:fc:fe:11:e5:e0:2d:c4:3c:e0:75:bf:2e:56:09:c7:be: 44:2e:1c:33:dc:96:58:88:5a:60:54:ad:25:21:72:6f:95:e2: a7:33:46:d4:ef:43:b8:4b:fd:c2:f9:8b:7c:ce:d9:8b:bd:b7: 4d:03:54:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuho4VFq5CIYk7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2JjODNjMTAtOWI4MS00NjI3LWExOGYtZWUxZDk1NTBiMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiy5qlF22BcFko2Jp3lXLEBmRRqJ4cLuwSNu hEpyz57znP5ytVubW4KBDUlz1c4nywIGIOrvW7r/+88FkAU1nYxoYA3+6saoo77J 4K9oAsqu9YQoffHC/X6UKgInbmqYyDNv0Rhp1GkciRkThUjC267ujyinpa6ps54N vybdxKxSUpbYUgLyT0Us3dFbgoVKrfgh9fmYnjgMK5EdDsBTO3ua3kxVGXb4rMBZ X6VehcO/hHBkhPj4O8jmLU/0QuoclvvwnDpAEGDNWsCHMf3TyHjftgT/BWOQgW+X 5AFRFqDf8ZVZZLRwO/fBbxUGltra8lIVNr2cX/SWaKvBGJCNTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJVaxuDOmpakeW3sBeg86k/Lve4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTUwZTc3ZDgtZDA1ZC0z NjQ4LThkZGYtMTgxOGIzYWNiODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujSgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS6kYB+MwbMN3PAip5L2S9kkR8kF5VMRngxX3GPS9Jths0dChZXY2 sSMUS2sB4FvN67Cjx/iWPAA3tBU4sS3Bv3rGj/lTR8/c11AumHbkkcm5skgaDHJN MSoKPf7Hr1F9QqO9wmSZtd7UOAkksCFetVQhDkuHXeO+Yu221PU8iBlMd+xUAknp OwjyOcc1ci8LMJILS8WbypYgfj6I2or5sF/DPydXpJ/uk4ijEekwvU181hh0Iz09 fb1IMdw+nCnmaYkE9KbdtYr8/hHl4C3EPOB1vy5WCce+RC4cM9yWWIhaYFStJSFy b5XipzNG1O9DuEv9wvmLfM7Zi723TQNUdA== -----END CERTIFICATE-----Generated at Sun Apr 27 07:04:20 2025 by rpki-client