$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa File: a2f09972-83a4-3240-871a-2619e0b0b11e.roa (raw, json) Hash identifier: i7pLTCC+w/ToFp7QxpTcMbO9uoQXX8IFQPjgyZAabyM= Subject key identifier: 2E:1F:B9:89:3D:B1:3A:01:C9:9D:AD:A7:DE:87:86:5F:64:CF:06:97 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849A784B41DCAC167EEED1AC3C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2e8c:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b4:1d:ca:c1:67:ee:ed:1a:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ca971561-35dc-4c54-b7bc-6959e1245751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:21:de:90:d3:ea:af:ca:5d:08:a9:7a:2a:24: c9:90:55:b0:5e:ca:ab:0a:60:63:e0:bc:46:3b:21: 77:be:75:36:ea:05:c4:2c:09:c2:e2:aa:7e:76:4c: 30:01:72:10:da:b5:aa:bf:d8:f1:1f:2c:a9:9a:c1: 2b:66:9e:73:26:2c:6d:07:43:8b:b0:67:14:26:b7: 2e:23:ae:75:90:25:b9:f3:8a:2a:1f:c7:76:d5:2f: 92:a9:53:90:e1:9e:12:50:de:4f:81:05:ed:72:3a: 8b:c0:f1:69:8e:0c:28:be:c4:dc:84:fc:da:1a:03: cf:6d:c9:85:5a:f4:b2:60:95:0b:43:04:5c:6e:ef: d8:93:15:ce:66:dd:25:86:5e:36:17:7a:d0:52:8f: 5b:cc:03:9c:ea:85:53:8e:f3:1b:59:12:7a:f2:3b: 45:1a:4e:f5:9f:1f:a3:bb:ed:fd:e6:da:e9:25:d5: 2d:31:15:31:04:3d:40:51:8f:70:5d:36:a6:02:d0: 9e:03:a9:24:aa:c1:6a:38:49:1e:10:05:c3:0f:aa: fa:45:15:7a:e8:33:35:62:89:4c:b7:b5:50:ce:ea: 63:09:b1:b2:cb:c9:ec:66:4b:b2:1f:09:ba:6d:7e: a8:1f:3b:59:f2:43:f6:b0:4b:38:d2:dc:81:72:0f: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:B9:89:3D:B1:3A:01:C9:9D:AD:A7:DE:87:86:5F:64:CF:06:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:53:49:f2:03:13:c8:a1:24:d1:04:8b:20:e9:21:3f:6c:6f: e2:6b:8b:56:39:a7:99:7f:d4:7f:bd:fa:5d:29:19:5b:d6:22: c7:f7:9a:bc:9f:20:c6:d7:58:58:32:47:d8:8a:93:ec:e5:7f: ce:be:7e:13:26:ca:90:e7:cd:d9:29:5d:54:c8:47:a8:ee:a5: 2f:23:c9:c5:f3:d8:35:e2:37:2c:db:c9:e6:79:62:44:82:b7: 9b:5c:2c:84:1b:58:93:4e:07:c6:72:e6:2f:05:1b:76:ad:6f: 5b:a2:fc:0f:51:4c:3b:84:61:9c:3e:0a:d3:22:3f:f1:b7:3e: b1:d7:ce:f2:56:62:3c:13:6e:27:3b:e0:1b:3f:8a:95:d9:1d: fe:5b:dc:7c:d9:c9:5b:56:b4:9f:cf:24:0f:2c:26:bf:68:83: 0d:ca:41:1f:ba:c3:e8:33:fb:73:86:b4:75:dc:14:58:7c:58: 74:44:e3:76:16:3a:d6:08:ea:86:39:43:7c:e7:75:bb:a7:2d: a7:90:94:6c:79:ce:17:27:aa:15:b1:95:3a:cb:c5:dc:2b:a0: 2e:87:3f:a5:dd:51:32:86:41:07:80:11:ea:78:2c:12:19:b6: ec:8d:15:e1:72:f7:77:7e:56:a0:15:9a:19:fc:77:46:22:c5: 90:f5:fd:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmnhLQdysFn7u0aw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2E5NzE1NjEtMzVkYy00YzU0LWI3YmMtNjk1OWUxMjQ1NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyHekNPqr8pdCKl6KiTJkFWwXsqrCmBj4LxG OyF3vnU26gXELAnC4qp+dkwwAXIQ2rWqv9jxHyypmsErZp5zJixtB0OLsGcUJrcu I651kCW584oqH8d21S+SqVOQ4Z4SUN5PgQXtcjqLwPFpjgwovsTchPzaGgPPbcmF WvSyYJULQwRcbu/YkxXOZt0lhl42F3rQUo9bzAOc6oVTjvMbWRJ68jtFGk71nx+j u+395trpJdUtMRUxBD1AUY9wXTamAtCeA6kkqsFqOEkeEAXDD6r6RRV66DM1YolM t7VQzupjCbGyy8nsZkuyHwm6bX6oHztZ8kP2sEs40tyBcg89jQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC4fuYk9sToByZ2tp96Hhl9kzwaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmMDk5NzItODNhNC0z MjQwLTg3MWEtMjYxOWUwYjBiMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujEQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANlNJ8gMTyKEk0QSLIOkhP2xv4muLVjmnmX/Uf736XSkZW9Yix/ea vJ8gxtdYWDJH2IqT7OV/zr5+EybKkOfN2SldVMhHqO6lLyPJxfPYNeI3LNvJ5nli RIK3m1wshBtYk04HxnLmLwUbdq1vW6L8D1FMO4RhnD4K0yI/8bc+sdfO8lZiPBNu JzvgGz+Kldkd/lvcfNnJW1a0n88kDywmv2iDDcpBH7rD6DP7c4a0ddwUWHxYdETj dhY61gjqhjlDfOd1u6ctp5CUbHnOFyeqFbGVOsvF3CugLoc/pd1RMoZBB4AR6ngs Ehm27I0V4XL3d35WoBWaGfx3RiLFkPX9Iw== -----END CERTIFICATE-----Generated at Thu May 15 05:06:17 2025 by rpki-client