$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa File: 23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa (raw, json) Hash identifier: zuNO7GJplQhf+atf0IhpcYcMk2OkUu1hTjwGw/Ephx4= Subject key identifier: 61:93:09:C3:73:E8:A7:5A:B7:23:A2:BB:1F:62:D4:CF:8D:29:0F:1F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849F2E526CFE095336BA19CCE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2e8d:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:26:cf:e0:95:33:6b:a1:9c:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=e9fd9ff8-386b-4929-944d-be4f0fe31c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:b7:28:ec:da:35:0b:8e:4a:38:a4:0f:9d: ed:ae:84:01:e1:04:3b:0d:18:fb:ba:8b:c5:f9:b1: 35:9a:9f:fd:a2:ba:f3:c5:f8:6c:d8:20:32:6f:8a: e9:42:3f:0f:41:4c:ed:f9:32:2d:98:23:12:57:19: 5c:80:91:b5:d3:de:d9:22:84:df:11:9b:43:0c:d1: a5:42:3d:f6:7b:b5:bb:8c:b1:f7:6f:27:27:83:df: e5:db:fc:18:3e:cb:a8:8d:28:0b:8f:62:c0:42:af: bd:cc:72:92:9a:4f:f0:7f:60:2b:8c:74:aa:39:35: 80:f1:a5:f9:68:d1:de:fb:63:ce:b2:e8:77:32:0d: 86:44:26:87:c4:a6:46:f0:0a:3d:9b:11:f7:a3:7d: c7:71:15:c8:01:e8:e9:d1:55:e1:ec:f5:85:f8:42: 6c:23:b2:61:e8:9e:85:8f:8f:03:f8:07:86:c5:0b: 4f:98:d5:f5:e5:91:05:18:13:62:b6:4c:a6:56:b8: df:b2:35:2c:2c:77:cb:51:7b:eb:ff:c9:98:2e:a4: 54:00:5d:d6:69:85:7d:1d:de:d2:86:77:73:ba:95: b2:6d:97:9f:2a:bf:ac:0e:03:59:94:e6:8e:bf:2d: 88:25:c9:b3:c6:cf:01:e8:5a:42:44:39:7e:23:21: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:09:C3:73:E8:A7:5A:B7:23:A2:BB:1F:62:D4:CF:8D:29:0F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:98:8a:8c:22:b4:b4:12:7e:e3:24:97:bd:33:ac:80:d9:4c: 73:ba:a5:19:19:83:74:64:c5:81:ca:67:15:09:36:ed:fc:a0: 73:79:3c:a2:7e:c0:ce:2f:32:65:1b:9d:f4:d8:3a:76:8f:b3: 83:f5:e9:07:27:14:76:94:72:0d:d0:f0:38:a8:82:7b:5b:e0: 2f:a7:dc:30:78:56:83:d2:ba:1f:2e:3f:f1:48:86:68:04:a4: 35:5c:8e:5b:2c:73:14:b8:b8:77:35:eb:5d:d5:86:52:e3:f9: 9e:5c:81:c4:01:a7:38:b4:21:09:d4:99:a2:0c:f2:d7:be:f0: 87:dd:5b:ca:47:cd:d5:60:3b:b4:c2:d5:bd:3a:a7:a3:9f:5d: 79:b5:9a:04:e7:9a:40:94:98:01:cf:af:ec:b7:af:62:e7:af: 51:58:f6:50:be:52:30:b5:e4:3e:1e:47:fc:4d:25:8e:7c:81: 17:61:37:49:4b:41:3c:fb:a9:80:c3:89:73:ab:4b:83:38:02: 7e:91:61:63:a1:a2:7a:c5:a6:8a:93:85:af:e6:68:cb:45:6d: a3:b3:24:46:13:b2:70:35:41:28:46:b7:ab:a1:4f:dc:6e:96: a1:b6:92:0d:7a:eb:cc:8d:be:d0:a5:0e:c0:1f:d3:5e:3d:d9: ac:0b:55:1a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5SbP4JUza6GczgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTlmZDlmZjgtMzg2Yi00OTI5LTk0NGQtYmU0ZjBmZTMxYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuK3KOzaNQuOSjikD53troQB4QQ7DRj7uovF +bE1mp/9orrzxfhs2CAyb4rpQj8PQUzt+TItmCMSVxlcgJG1097ZIoTfEZtDDNGl Qj32e7W7jLH3bycng9/l2/wYPsuojSgLj2LAQq+9zHKSmk/wf2ArjHSqOTWA8aX5 aNHe+2POsuh3Mg2GRCaHxKZG8Ao9mxH3o33HcRXIAejp0VXh7PWF+EJsI7Jh6J6F j48D+AeGxQtPmNX15ZEFGBNitkymVrjfsjUsLHfLUXvr/8mYLqRUAF3WaYV9Hd7S hndzupWybZefKr+sDgNZlOaOvy2IJcmzxs8B6FpCRDl+IyHVowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGGTCcNz6KdatyOiux9i1M+NKQ8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNiOTFmNWYtZTlmNC0z OGQzLThlYWMtMDNmMmFiMjAyMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP5iKjCK0tBJ+4ySXvTOsgNlMc7qlGRmDdGTFgcpnFQk27fygc3k8 on7Azi8yZRud9Ng6do+zg/XpBycUdpRyDdDwOKiCe1vgL6fcMHhWg9K6Hy4/8UiG aASkNVyOWyxzFLi4dzXrXdWGUuP5nlyBxAGnOLQhCdSZogzy177wh91bykfN1WA7 tMLVvTqno59debWaBOeaQJSYAc+v7LevYuevUVj2UL5SMLXkPh5H/E0ljnyBF2E3 SUtBPPupgMOJc6tLgzgCfpFhY6GiesWmipOFr+Zoy0Vto7MkRhOycDVBKEa3q6FP 3G6WobaSDXrrzI2+0KUOwB/TXj3ZrAtVGg== -----END CERTIFICATE-----Generated at Tue Jul 1 04:01:17 2025 by rpki-client