$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e713062c-ec16-31ae-beee-33ddc1db2fc9.roa File: e713062c-ec16-31ae-beee-33ddc1db2fc9.roa (raw, json) Hash identifier: iBTFRG/I1JG6d1/L5YEZhVWlX3pxXUj9tYi4izFP/8I= Subject key identifier: 6D:DC:F0:B2:A8:7A:93:69:21:A3:C9:A3:17:36:DA:DD:F5:D7:B6:60 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF63ACCFCCF1FE78B94480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e713062c-ec16-31ae-beee-33ddc1db2fc9.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8d:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:63:ac:cf:cc:f1:fe:78:b9:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=29b00bf4-08f3-4439-8b2f-30e5ee5b8dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:c7:e0:42:f8:31:9a:a2:0c:b1:ea:59:7b: 70:23:76:9e:b5:46:5e:10:86:50:f3:00:96:45:2c: d3:c1:3f:76:3a:e3:84:1a:42:0d:e1:8a:f7:39:37: 79:fb:8f:c7:bd:00:98:a3:3a:9a:4e:95:f2:7d:05: 03:cd:70:ec:9f:d8:45:cc:8f:90:bc:d3:88:4b:dc: fe:b6:26:42:0c:e7:79:91:28:3a:03:2a:79:c7:95: 74:f5:8f:d3:a8:0b:97:ac:6c:79:1a:fc:19:0a:76: 3b:96:41:66:d9:c0:6d:33:65:e1:63:0a:88:2e:2e: c2:76:de:6a:4a:3d:b8:c4:8c:1b:c9:5f:40:45:80: 74:52:b8:94:c2:d2:0a:bd:cc:28:3b:8b:18:f3:63: 2f:5d:93:49:56:c8:33:c2:26:1e:63:9c:eb:8f:5f: 3f:a0:c0:cf:c3:bb:71:25:4a:7e:c2:8a:1e:17:6d: 2e:17:c3:77:fe:91:12:64:8d:07:b7:ca:58:03:e4: 36:fd:5d:6e:18:0a:cd:15:f5:fd:f0:c2:12:4c:2a: 91:07:e8:71:47:7e:f9:18:37:50:c6:1b:ec:37:42: 5e:0d:fc:34:c1:18:0e:1c:49:2e:ba:44:6c:8f:d7: d2:f8:ea:45:4c:ec:dd:ca:c3:15:41:38:5e:7f:6c: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DC:F0:B2:A8:7A:93:69:21:A3:C9:A3:17:36:DA:DD:F5:D7:B6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e713062c-ec16-31ae-beee-33ddc1db2fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:36:7f:7e:89:98:22:56:35:83:99:0d:f0:a7:34:89:f9:f9: 7e:f2:83:e2:e5:16:fc:fc:3c:50:42:91:56:e7:07:00:1b:66: 3e:d1:63:a6:83:72:75:50:cf:b3:22:a0:a1:3c:cf:63:2b:40: d4:66:27:7e:28:22:c7:88:d7:6a:51:d5:cb:cb:4c:0b:92:c9: a0:fb:7f:1e:5d:9f:1c:4f:bb:3b:af:30:ab:21:46:3b:22:c2: 53:b4:63:75:13:1c:6f:1e:f2:b7:9a:53:29:f9:c1:13:7e:05: c2:05:97:d9:f7:6e:01:47:f5:82:db:25:e8:59:03:81:11:c4: e0:b1:e8:cd:d0:77:95:62:3d:b4:d6:4b:e3:2f:0a:19:e0:13: e5:0c:9e:86:e7:2f:63:37:d0:b3:fd:48:78:e7:16:73:5e:0b: bd:c7:0e:e1:df:f0:fc:64:a0:4e:e3:4d:13:d8:c9:73:64:a4: 6a:a7:6c:a7:77:9e:7a:f8:ca:80:ab:f4:85:a0:0e:00:bd:a9: db:b1:ca:61:e1:7b:99:09:44:b0:f5:3d:9f:c8:50:04:a0:89: 43:1d:c2:2b:ca:b1:2c:6e:20:3d:e9:96:5b:c0:67:3b:e1:e4: 76:d2:18:9e:eb:cc:ed:5d:6f:b6:bc:09:32:46:11:ee:21:74: a1:8f:9a:fa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72Osz8zx/ni5RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MjliMDBiZjQtMDhmMy00NDM5LThiMmYtMzBlNWVlNWI4ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlevH4EL4MZqiDLHqWXtwI3aetUZeEIZQ8wCW RSzTwT92OuOEGkIN4Yr3OTd5+4/HvQCYozqaTpXyfQUDzXDsn9hFzI+QvNOIS9z+ tiZCDOd5kSg6Ayp5x5V09Y/TqAuXrGx5GvwZCnY7lkFm2cBtM2XhYwqILi7Cdt5q Sj24xIwbyV9ARYB0UriUwtIKvcwoO4sY82MvXZNJVsgzwiYeY5zrj18/oMDPw7tx JUp+wooeF20uF8N3/pESZI0Ht8pYA+Q2/V1uGArNFfX98MISTCqRB+hxR375GDdQ xhvsN0JeDfw0wRgOHEkuukRsj9fS+OpFTOzdysMVQThef2weyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG3c8LKoepNpIaPJoxc22t3117ZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTcxMzA2MmMtZWMxNi0z MWFlLWJlZWUtMzNkZGMxZGIyZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAijZ/fomYIlY1g5kN8Kc0ifn5fvKD4uUW/Pw8UEKRVucHABtmPtFj poNydVDPsyKgoTzPYytA1GYnfigix4jXalHVy8tMC5LJoPt/Hl2fHE+7O68wqyFG OyLCU7RjdRMcbx7yt5pTKfnBE34FwgWX2fduAUf1gtsl6FkDgRHE4LHozdB3lWI9 tNZL4y8KGeAT5QyehucvYzfQs/1IeOcWc14LvccO4d/w/GSgTuNNE9jJc2Skaqds p3eeevjKgKv0haAOAL2p27HKYeF7mQlEsPU9n8hQBKCJQx3CK8qxLG4gPemWW8Bn O+HkdtIYnuvM7V1vtrwJMkYR7iF0oY+a+g== -----END CERTIFICATE-----Generated at Sun Apr 27 13:05:58 2025 by rpki-client