$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa File: eb421c60-c420-3d40-afd5-0ea39a29fa53.roa (raw, json) Hash identifier: TfLDiihKTyfZ+XiIcWFGa7PmO70oB6WJ0Q5WXJsvV0Q= Subject key identifier: 9C:A6:99:71:64:1E:C6:C7:D6:0A:5C:42:DB:38:B5:4A:8E:80:8E:38 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF608623A81501D928FB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e89:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:60:86:23:a8:15:01:d9:28:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=90562ae1-bbcd-4020-9f35-91cec390a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:3c:8e:f8:93:ee:67:d8:cc:44:47:02:9e: 8d:f7:65:39:4a:53:1c:9e:ff:86:d7:c4:f1:c0:66: 28:3c:02:bf:06:3f:c1:31:b8:5f:c2:03:5e:ad:21: 4f:d1:eb:46:86:5f:c7:f0:47:12:ed:eb:d2:47:d3: 37:5d:33:21:47:19:99:78:c6:25:f6:73:f4:96:40: 75:59:c7:90:c2:c1:56:a2:e9:15:38:c8:0d:3e:ba: 16:97:82:7a:a1:0a:01:e9:d1:18:f0:d5:23:87:e4: ea:70:4d:e5:fc:68:a9:57:08:eb:4b:dd:ba:b5:9c: b6:3a:3d:9d:73:55:f7:88:c5:0b:05:2a:68:e2:2d: 23:f1:f6:90:3c:fe:aa:bd:a0:32:a9:77:05:7f:5e: 02:b8:86:24:98:6d:fe:e6:2d:9d:96:d2:ba:73:b5: c5:36:3a:bc:a9:54:98:ef:96:4a:34:5b:4c:72:b4: 2a:33:87:88:5c:1c:15:a6:ad:3d:4a:a7:89:4d:17: 0c:79:08:67:7c:0d:91:dd:fd:00:13:c1:e3:ca:2e: eb:47:b4:6a:56:58:b5:f0:50:eb:6b:1f:ee:d6:ee: 63:31:62:b8:a2:a8:f0:25:8d:91:f8:bb:90:95:30: 56:a0:7d:74:7c:dc:b8:f4:dc:3f:68:04:bd:db:41: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:99:71:64:1E:C6:C7:D6:0A:5C:42:DB:38:B5:4A:8E:80:8E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d6:ce:84:2c:fc:cf:67:58:02:d5:88:4e:d7:af:29:b3:1c: 52:1f:98:a2:07:ca:23:83:b4:03:fa:4a:ca:3d:64:4f:45:d1: 6f:0e:4e:59:f4:85:63:fc:e8:e8:37:70:06:fb:b1:8c:fc:98: b9:d4:e7:49:70:b9:34:1f:18:41:91:f9:24:ff:ad:69:e7:75: f0:d5:68:4c:bf:44:a7:84:8e:43:59:8e:57:a6:9b:ee:db:e2: fb:e9:a1:79:fb:fd:e7:0d:e4:ca:81:03:7f:db:cd:be:58:2f: 24:2d:89:4a:00:93:ce:0f:9c:17:71:f3:5e:6c:05:c9:98:30: cb:ac:aa:82:d3:44:78:38:ea:bd:fb:6d:f9:2e:d5:14:b5:32: ff:74:38:e8:dc:b0:83:b2:a1:07:09:ac:4b:af:53:72:53:a9: ca:56:6c:1a:c4:8c:d0:69:2a:b0:d8:6d:3a:0d:0d:fe:a3:ed: 9a:64:42:2e:a2:35:4d:c9:34:9e:86:b3:3b:73:f2:0c:44:c3: 81:3d:6a:34:d4:a5:6a:a0:67:8a:17:a2:e4:12:52:72:27:4d: ed:63:24:ff:af:bb:b6:d9:55:51:2b:6b:97:9e:cc:85:71:7f: 41:a5:7a:4f:65:e4:16:06:f7:ea:9e:f7:1e:88:e0:2e:d7:45: 12:f2:0a:89 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72CGI6gVAdko+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OTA1NjJhZTEtYmJjZC00MDIwLTlmMzUtOTFjZWMzOTBhOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshc8jviT7mfYzERHAp6N92U5SlMcnv+G18Tx wGYoPAK/Bj/BMbhfwgNerSFP0etGhl/H8EcS7evSR9M3XTMhRxmZeMYl9nP0lkB1 WceQwsFWoukVOMgNProWl4J6oQoB6dEY8NUjh+TqcE3l/GipVwjrS926tZy2Oj2d c1X3iMULBSpo4i0j8faQPP6qvaAyqXcFf14CuIYkmG3+5i2dltK6c7XFNjq8qVSY 75ZKNFtMcrQqM4eIXBwVpq09SqeJTRcMeQhnfA2R3f0AE8Hjyi7rR7RqVli18FDr ax/u1u5jMWK4oqjwJY2R+LuQlTBWoH10fNy49Nw/aAS920G2YQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJymmXFkHsbH1gpcQts4tUqOgI44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWI0MjFjNjAtYzQyMC0z ZDQwLWFmZDUtMGVhMzlhMjlmYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAktbOhCz8z2dYAtWITtevKbMcUh+YogfKI4O0A/pKyj1kT0XRbw5O WfSFY/zo6DdwBvuxjPyYudTnSXC5NB8YQZH5JP+taed18NVoTL9Ep4SOQ1mOV6ab 7tvi++mhefv95w3kyoEDf9vNvlgvJC2JSgCTzg+cF3HzXmwFyZgwy6yqgtNEeDjq vftt+S7VFLUy/3Q46Nywg7KhBwmsS69TclOpylZsGsSM0GkqsNhtOg0N/qPtmmRC LqI1Tck0noazO3PyDETDgT1qNNSlaqBnihei5BJScidN7WMk/6+7ttlVUStrl57M hXF/QaV6T2XkFgb36p73HojgLtdFEvIKiQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:02:40 2025 by rpki-client