$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32c7f1f2-b275-3418-acc9-4bae5efdf9f6.roa File: 32c7f1f2-b275-3418-acc9-4bae5efdf9f6.roa (raw, json) Hash identifier: LylQEZjPXMl5w/8CQHhUSAwksTwO8dYLnEQT+D2ALK0= Subject key identifier: 40:97:3A:C0:4A:08:9E:C1:72:1D:96:03:DD:76:E5:AD:40:D7:BA:70 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF5F9E24535ED1B2799E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32c7f1f2-b275-3418-acc9-4bae5efdf9f6.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e88:6800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5f:9e:24:53:5e:d1:b2:79:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8c83af55-0721-48e6-a836-2a554cc260f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:f2:e1:23:2f:b7:39:27:b1:69:2a:82:5d: 4d:97:60:84:dc:3a:a7:e3:d2:c9:f0:4e:4c:bc:7e: 55:c2:d0:62:e8:db:af:fa:f2:fe:0d:9a:fa:c1:b9: 39:ea:6e:a7:40:6e:41:d3:59:70:3e:63:2a:ea:58: 57:01:56:35:31:b3:76:3e:f8:f2:7b:53:29:1c:24: 11:e6:3c:25:3f:2c:40:bd:ce:5e:22:5d:a6:01:4d: 37:88:4c:df:48:d9:0a:cc:4f:d9:b0:4a:12:98:73: 32:1e:28:7a:f8:02:22:3a:84:72:eb:84:62:bb:3e: a1:e1:be:b8:f2:bf:f7:2c:f5:df:37:37:43:e3:05: ab:6a:f6:4c:6a:63:67:6b:57:9d:a3:2a:31:22:0e: e4:3b:66:2a:2f:a3:f2:3e:9d:85:71:58:e5:1a:37: 6c:c4:e8:9f:bf:71:fa:31:8c:f1:fd:75:3c:dc:70: 7f:9d:dc:c5:e5:d3:d1:76:44:9c:a6:91:88:24:95: 08:35:aa:25:00:56:67:df:93:3d:d5:50:2a:7d:4b: 73:37:82:06:3b:d8:fc:ef:d0:53:a7:91:4b:46:81: 16:75:1b:a3:57:d9:a4:94:50:01:52:8a:79:6c:e2: 4f:16:1b:6d:a2:90:00:ec:d0:39:05:a7:00:72:43: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:3A:C0:4A:08:9E:C1:72:1D:96:03:DD:76:E5:AD:40:D7:BA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32c7f1f2-b275-3418-acc9-4bae5efdf9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:6800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:61:35:08:57:87:4a:63:f6:ba:de:52:3a:98:1a:74:38:2c: 84:aa:72:94:20:cb:3b:20:c9:3c:79:4c:47:bb:66:f7:00:9e: 34:e7:2b:68:f8:8b:71:3e:49:91:62:60:a8:15:ee:0d:a9:d6: f0:2f:aa:f1:26:21:a4:54:f8:97:b7:81:4a:0c:aa:d5:7d:00: 7c:7f:e4:82:a5:9e:bb:43:c4:28:7e:27:ca:3a:45:c2:cc:27: 0b:15:41:27:4e:f9:5d:38:03:4a:41:76:2f:d5:ea:7f:75:18: ad:58:d9:d2:92:75:8a:28:40:be:65:65:48:bf:b7:d9:3e:4d: 38:3e:60:22:a8:5c:b4:e9:9d:3e:3c:d8:cd:e0:56:94:99:6d: 70:47:e6:9d:0a:86:6d:7e:8d:51:d4:bb:1b:85:4b:d1:85:88: 39:91:0e:ac:bd:d3:02:b3:9a:7b:ce:36:aa:47:2d:ba:d9:43: a0:3c:ae:86:3f:bf:bf:1f:3a:97:21:48:d4:33:e2:ff:8a:b7: 5c:a6:9d:72:27:9f:06:00:b8:87:4c:86:2e:cb:48:a6:30:53: cb:42:d0:02:e6:1f:da:3f:f3:dc:55:4e:6a:ae:ad:43:1f:ea: 91:fc:91:e0:fb:3d:93:46:c0:04:49:b2:91:77:d8:b7:97:4c: c2:2b:0f:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh71+eJFNe0bJ5noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGM4M2FmNTUtMDcyMS00OGU2LWE4MzYtMmE1NTRjYzI2MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLy4SMvtzknsWkqgl1Nl2CE3Dqn49LJ8E5M vH5VwtBi6Nuv+vL+DZr6wbk56m6nQG5B01lwPmMq6lhXAVY1MbN2Pvjye1MpHCQR 5jwlPyxAvc5eIl2mAU03iEzfSNkKzE/ZsEoSmHMyHih6+AIiOoRy64Riuz6h4b64 8r/3LPXfNzdD4wWravZMamNna1edoyoxIg7kO2YqL6PyPp2FcVjlGjdsxOifv3H6 MYzx/XU83HB/ndzF5dPRdkScppGIJJUINaolAFZn35M91VAqfUtzN4IGO9j879BT p5FLRoEWdRujV9mklFABUop5bOJPFhttopAA7NA5BacAckNeDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFECXOsBKCJ7Bch2WA9125a1A17pwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzJjN2YxZjItYjI3NS0z NDE4LWFjYzktNGJhZTVlZmRmOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiGgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANGE1CFeHSmP2ut5SOpgadDgshKpylCDLOyDJPHlMR7tm9wCeNOcr aPiLcT5JkWJgqBXuDanW8C+q8SYhpFT4l7eBSgyq1X0AfH/kgqWeu0PEKH4nyjpF wswnCxVBJ075XTgDSkF2L9Xqf3UYrVjZ0pJ1iihAvmVlSL+32T5NOD5gIqhctOmd PjzYzeBWlJltcEfmnQqGbX6NUdS7G4VL0YWIOZEOrL3TArOae842qkctutlDoDyu hj+/vx86lyFI1DPi/4q3XKadciefBgC4h0yGLstIpjBTy0LQAuYf2j/z3FVOaq6t Qx/qkfyR4Ps9k0bABEmykXfYt5dMwisPmw== -----END CERTIFICATE-----Generated at Thu May 15 01:32:42 2025 by rpki-client