$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa File: 409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa (raw, json) Hash identifier: xmpWt/1WBFsvQmcPrQFF9atwNH75mp2VCBuR5+4mDwo= Subject key identifier: 20:08:81:D8:93:57:5A:E6:8B:0D:FF:73:57:91:BD:31:87:AC:43:7A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849BDDA1A68782570A8F86C7E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e8d:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1a:68:78:25:70:a8:f8:6c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=66cf470f-9e39-453f-8b59-dd57b3f84e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:3b:e7:5b:c6:fe:2a:a5:fc:c1:2c:98:72: 97:51:e6:b6:18:2d:eb:16:bf:7b:4e:ad:c3:69:01: c5:24:44:a3:99:d0:bb:24:d4:90:5d:48:34:ec:da: 11:67:f9:89:67:b9:77:35:eb:43:df:a5:92:ca:2c: 6c:e4:8a:58:f3:68:29:a6:ff:dd:14:dd:3f:12:a5: 43:c6:af:a8:03:75:86:9a:da:19:99:e8:5c:e9:9a: 35:fe:16:55:23:49:d0:f0:22:1f:13:17:87:68:94: 51:fb:64:47:0f:3f:7f:68:8e:ba:34:84:e5:8c:65: cb:a5:c1:2d:c9:ec:80:70:9a:c7:14:06:a5:a5:63: 1a:63:01:d3:13:4a:aa:5e:3f:f2:64:95:f4:d8:8e: a7:e8:47:fb:f1:96:87:a9:ca:a3:6d:b4:73:01:65: 08:a1:a7:b0:78:00:d9:da:fc:1c:3a:9a:e8:9e:f4: 28:75:6c:58:1a:96:f6:d9:c4:94:3a:b4:2b:b7:47: 82:44:07:12:d2:5b:73:1a:d2:3f:6a:75:cb:45:5a: fe:82:81:6f:92:f5:42:3e:da:94:00:12:5e:17:95: 01:58:4d:80:d3:bf:8c:53:9f:f5:66:6f:64:92:60: 05:35:f3:51:d8:18:c2:07:ec:10:47:64:84:e9:fa: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:08:81:D8:93:57:5A:E6:8B:0D:FF:73:57:91:BD:31:87:AC:43:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:9c:5d:0e:38:7f:7e:c4:0f:49:aa:92:45:cd:f7:c5:cc: 0a:57:99:9d:19:4d:f6:7a:56:36:41:b4:87:48:6f:83:ba:a8: 0b:6f:4f:04:26:56:c4:9a:27:69:d7:f9:d9:4e:97:79:97:2b: 0f:00:70:54:ca:71:c1:dd:42:84:fe:7c:47:0c:fb:b0:00:c2: a8:23:10:f5:74:d5:8e:48:cf:de:6a:45:97:f4:f1:25:ba:60: 01:5b:10:9b:4d:1d:4c:c4:a2:16:7b:e2:4a:ad:0a:01:73:e6: 6b:ea:78:7b:86:0b:f0:08:eb:4e:4e:09:78:71:cf:1b:94:f1: 9d:fe:56:9d:7f:ea:71:61:2b:bd:d8:32:9e:ec:79:1c:ab:d1: ae:30:bc:39:25:7a:e8:ac:21:4d:27:69:8d:ce:c9:4e:b8:01: a1:22:08:85:c0:10:f6:cf:5c:4b:fe:b7:cb:ba:4b:7c:10:90: 3f:f3:29:64:24:de:42:59:b7:0e:5d:68:c5:2c:15:50:25:9d: 38:0d:eb:b1:4a:3b:0a:01:64:41:79:12:15:e1:94:0f:d4:27: af:8c:22:f6:de:13:2b:06:e9:bc:c2:64:8c:4c:d9:54:79:f9: 32:06:f7:e4:65:59:55:c2:0f:24:d6:06:d5:f0:d9:b1:4a:93: bb:c6:36:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm92hpoeCVwqPhsfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NjZjZjQ3MGYtOWUzOS00NTNmLThiNTktZGQ1N2IzZjg0ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bw751vG/iql/MEsmHKXUea2GC3rFr97Tq3D aQHFJESjmdC7JNSQXUg07NoRZ/mJZ7l3NetD36WSyixs5IpY82gppv/dFN0/EqVD xq+oA3WGmtoZmehc6Zo1/hZVI0nQ8CIfExeHaJRR+2RHDz9/aI66NITljGXLpcEt yeyAcJrHFAalpWMaYwHTE0qqXj/yZJX02I6n6Ef78ZaHqcqjbbRzAWUIoaeweADZ 2vwcOpronvQodWxYGpb22cSUOrQrt0eCRAcS0ltzGtI/anXLRVr+goFvkvVCPtqU ABJeF5UBWE2A07+MU5/1Zm9kkmAFNfNR2BjCB+wQR2SE6frOGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCAIgdiTV1rmiw3/c1eRvTGHrEN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDA5ZGU2ZTQtNzUwMi0z YzU5LWJiZjUtN2M2NDE3M2YyZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACiKcXQ44f37ED0mqkkXN98XMCleZnRlN9npWNkG0h0hvg7qoC29P BCZWxJonadf52U6XeZcrDwBwVMpxwd1ChP58Rwz7sADCqCMQ9XTVjkjP3mpFl/Tx JbpgAVsQm00dTMSiFnviSq0KAXPma+p4e4YL8AjrTk4JeHHPG5Txnf5WnX/qcWEr vdgynux5HKvRrjC8OSV66KwhTSdpjc7JTrgBoSIIhcAQ9s9cS/63y7pLfBCQP/Mp ZCTeQlm3Dl1oxSwVUCWdOA3rsUo7CgFkQXkSFeGUD9Qnr4wi9t4TKwbpvMJkjEzZ VHn5Mgb35GVZVcIPJNYG1fDZsUqTu8Y2eQ== -----END CERTIFICATE-----Generated at Thu May 15 13:46:00 2025 by rpki-client