$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa File: 4902d440-83b4-30f9-ac1a-da81d6574f94.roa (raw, json) Hash identifier: Y4TWe6l3ap/HDEGCWI5dzL4N9cZ5s6etONxgz/kLQwU= Subject key identifier: 88:05:B2:AB:0B:DA:80:F1:C0:7B:7A:71:73:E7:5A:AB:E0:20:AE:E3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A1EF616FC95A92FD877B6540 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 2604:2e89:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:61:6f:c9:5a:92:fd:87:7b:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f58a7e0c-9daa-446b-b07e-d889a4a71ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:5b:c6:11:0c:54:61:61:e8:c8:1b:55:36: 6d:41:f2:46:60:66:ea:22:29:c2:06:d4:12:2d:51: bb:9d:91:91:a6:46:9c:bf:e2:35:97:c2:91:9b:24: 03:7b:dc:74:c4:0e:02:72:ca:67:cb:25:3f:e8:5c: 27:8c:39:25:be:8b:92:46:de:80:e3:86:39:bc:0a: 4c:53:27:30:7d:7c:0f:e1:e5:ac:48:d8:fd:ad:73: 6f:9a:e1:20:06:ca:d2:25:e8:bd:1b:e4:d3:f2:ba: d5:97:e7:16:51:e8:10:98:62:c3:59:72:b9:01:89: 2a:3c:7e:ba:50:c4:64:1d:56:9a:11:cb:88:0b:d4: 74:33:b9:a9:03:df:35:72:31:af:76:ea:a9:85:64: d1:f9:61:ef:df:58:90:1d:be:fb:6a:5e:6b:ad:35: ee:80:23:8e:da:30:95:35:3e:d2:a0:db:47:f1:77: 67:cd:65:6c:25:e5:ee:f8:d4:76:ad:b4:74:76:15: 09:a8:1f:0d:fe:d6:d5:06:f0:e2:ee:94:02:2e:2b: 8d:9f:12:5a:cd:5e:84:7b:3f:22:ef:b4:59:ab:53: 4b:62:3a:22:ec:e1:5c:9f:85:bd:7a:f0:db:34:11: ff:c2:c0:fb:5e:7b:3e:ec:74:06:53:32:4d:5e:3c: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:05:B2:AB:0B:DA:80:F1:C0:7B:7A:71:73:E7:5A:AB:E0:20:AE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:02:4f:8d:8e:11:6a:3d:65:e0:4f:57:e9:ae:cd:9e:44:9f: a4:01:63:f4:ef:69:3b:84:d1:06:a8:54:8d:8c:ca:bb:e7:98: 7e:f2:08:c5:dd:38:95:05:52:f9:8a:c2:b2:16:90:69:dc:5d: 2e:9c:90:ff:93:52:5c:ba:2d:8c:53:3a:34:14:26:f8:f8:48: 18:77:5f:78:af:17:0f:13:5d:02:29:95:3f:98:ee:39:b9:e6: 70:ef:8e:56:f8:15:1e:d0:e1:15:09:3f:9c:22:97:cb:2f:6f: 26:80:f6:fb:e9:3a:38:b2:c4:de:49:46:6c:0e:cc:5e:f0:03: 5f:22:7b:d6:4b:42:26:9c:02:b1:80:bc:f1:0f:93:e4:d7:0c: bf:3f:17:d6:85:26:0e:98:32:47:f6:1f:63:f9:19:2e:54:5c: 40:82:31:91:5d:f6:ba:ff:ce:5c:2e:ab:7d:02:45:1a:ae:e4: 1d:7a:7e:f5:59:3f:b4:37:78:6e:cc:76:97:ba:83:ba:33:91: cc:0b:5e:d1:50:2a:f7:49:1b:e6:7a:b3:d7:83:b5:83:a2:6c: a0:a2:e3:c6:80:33:fe:db:a0:d2:18:c2:83:b7:ab:78:22:87: a2:9b:b6:2d:07:89:55:8f:ef:f4:3c:fd:d1:04:dc:8e:a0:a2: 0a:54:2e:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72FvyVqS/Yd7ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjU4YTdlMGMtOWRhYS00NDZiLWIwN2UtZDg4OWE0YTcxY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRVbxhEMVGFh6MgbVTZtQfJGYGbqIinCBtQS LVG7nZGRpkacv+I1l8KRmyQDe9x0xA4CcspnyyU/6FwnjDklvouSRt6A44Y5vApM UycwfXwP4eWsSNj9rXNvmuEgBsrSJei9G+TT8rrVl+cWUegQmGLDWXK5AYkqPH66 UMRkHVaaEcuIC9R0M7mpA981cjGvduqphWTR+WHv31iQHb77al5rrTXugCOO2jCV NT7SoNtH8XdnzWVsJeXu+NR2rbR0dhUJqB8N/tbVBvDi7pQCLiuNnxJazV6Eez8i 77RZq1NLYjoi7OFcn4W9evDbNBH/wsD7Xns+7HQGUzJNXjxogwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIgFsqsL2oDxwHt6cXPnWqvgIK7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDkwMmQ0NDAtODNiNC0z MGY5LWFjMWEtZGE4MWQ2NTc0Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjwJPjY4Raj1l4E9X6a7NnkSfpAFj9O9pO4TRBqhUjYzKu+eYfvII xd04lQVS+YrCshaQadxdLpyQ/5NSXLotjFM6NBQm+PhIGHdfeK8XDxNdAimVP5ju ObnmcO+OVvgVHtDhFQk/nCKXyy9vJoD2++k6OLLE3klGbA7MXvADXyJ71ktCJpwC sYC88Q+T5NcMvz8X1oUmDpgyR/YfY/kZLlRcQIIxkV32uv/OXC6rfQJFGq7kHXp+ 9Vk/tDd4bsx2l7qDujORzAte0VAq90kb5nqz14O1g6JsoKLjxoAz/tug0hjCg7er eCKHopu2LQeJVY/v9Dz90QTcjqCiClQu8A== -----END CERTIFICATE-----Generated at Thu May 15 01:51:08 2025 by rpki-client