$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa File: bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa (raw, json) Hash identifier: Q5lPBYJg1THJQmOIQYIne+oqrGdQOYV9c6etO7Tl0i8= Subject key identifier: 11:7D:25:AD:D5:75:82:F7:BE:1E:95:CE:27:23:B2:C5:0D:96:41:C9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849F2E5289DC186669005F90000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2e8e:a800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:28:9d:c1:86:66:90:05:f9:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=aff8c01c-9e45-405e-9dda-668f07cd59a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:71:1a:55:5e:81:f1:0c:d6:6b:db:5c:af: f5:e6:b3:e2:f3:b0:af:a8:97:90:1d:1a:c4:af:fb: fa:bb:1d:c0:b1:9f:04:f8:97:58:6a:2c:04:f4:66: cf:7e:30:41:93:a7:d1:fb:dc:53:3d:93:b9:95:d8: b4:43:b0:2b:64:92:68:5d:c3:76:6a:71:a0:71:eb: e9:d9:b0:18:55:09:c0:b5:76:b2:19:2b:22:8f:3e: 02:9e:2a:05:29:ec:43:5c:81:ea:56:cc:81:02:0c: b2:28:b8:df:70:d5:ce:86:42:c1:40:31:e8:94:69: 29:9e:8e:09:be:75:84:08:e7:c6:fa:43:de:be:9d: 81:6a:22:ec:26:0b:19:8f:81:33:c1:3a:0d:4a:2c: 5b:6a:c0:56:2c:7d:c9:76:38:d3:4a:63:15:d5:3e: 69:2c:f0:1a:fe:e5:b9:17:ae:de:4a:2e:2a:35:37: 50:a8:bf:f7:6b:7c:67:ee:7c:97:aa:31:cd:20:1d: da:2a:82:e4:a1:c9:ae:39:0a:d6:1f:2e:4e:49:35: 65:3b:0b:67:b0:80:91:67:70:f0:ba:2f:27:fd:cc: b0:d0:5c:c4:8e:74:fb:ed:3e:9a:f4:f7:1a:d0:44: 24:2c:3a:2b:52:00:03:f4:50:2a:5b:68:0c:6a:24: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:25:AD:D5:75:82:F7:BE:1E:95:CE:27:23:B2:C5:0D:96:41:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:a800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:be:97:24:e6:c3:90:e3:be:c6:d8:0c:42:00:f0:f8:65: b9:8e:e3:0f:3f:29:09:43:3c:f3:b7:b2:b1:83:48:02:ef:27: 30:a7:1c:15:a0:b9:66:c2:57:81:03:9d:af:0d:c9:dc:21:c0: ee:b2:5b:4d:8d:07:81:57:60:25:ad:bf:35:ed:36:2c:2d:ce: dc:4c:19:c3:f4:f6:dd:58:b5:db:a7:30:3b:81:26:1f:46:8b: 6e:e6:4e:69:08:f2:2c:47:81:93:2e:65:85:fb:e8:47:fe:32: 28:66:85:d8:fa:d7:35:b1:7f:ff:f5:8b:15:d4:28:2f:b9:f5: c2:59:e7:90:00:ac:e3:3a:5e:f7:52:7e:08:c0:80:49:44:31: ba:b1:99:bb:5b:96:32:19:40:6c:3c:f8:6c:5b:f1:a2:87:f0: 84:63:03:d7:58:40:7d:f1:ee:b8:84:3f:d9:c6:d3:3e:53:ac: 5d:b0:39:10:8b:48:12:98:ec:57:72:90:3c:cd:ea:27:9c:25: 07:5e:cb:e2:b7:be:0d:75:61:79:9a:f4:b4:aa:a3:5f:ed:6f: 9b:92:74:1d:f9:06:aa:64:1c:a2:63:a0:69:ee:ef:39:b2:b0: 57:22:93:a5:6b:97:ba:f2:8f:54:f6:0c:8e:f2:b7:65:41:15: b0:9f:f6:a7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5SidwYZmkAX5AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YWZmOGMwMWMtOWU0NS00MDVlLTlkZGEtNjY4ZjA3Y2Q1OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxldxGlVegfEM1mvbXK/15rPi87CvqJeQHRrE r/v6ux3AsZ8E+JdYaiwE9GbPfjBBk6fR+9xTPZO5ldi0Q7ArZJJoXcN2anGgcevp 2bAYVQnAtXayGSsijz4CnioFKexDXIHqVsyBAgyyKLjfcNXOhkLBQDHolGkpno4J vnWECOfG+kPevp2BaiLsJgsZj4EzwToNSixbasBWLH3JdjjTSmMV1T5pLPAa/uW5 F67eSi4qNTdQqL/3a3xn7nyXqjHNIB3aKoLkocmuOQrWHy5OSTVlOwtnsICRZ3Dw ui8n/cyw0FzEjnT77T6a9Pca0EQkLDorUgAD9FAqW2gMaiQHAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBF9Ja3VdYL3vh6VzicjssUNlkHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2OGY0YzYtOGI3Ni0z NzQ0LTk5YmYtYTBjNWI0YjM4ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujqgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIEi+lyTmw5DjvsbYDEIA8PhluY7jDz8pCUM887eysYNIAu8nMKcc FaC5ZsJXgQOdrw3J3CHA7rJbTY0HgVdgJa2/Ne02LC3O3EwZw/T23Vi126cwO4Em H0aLbuZOaQjyLEeBky5lhfvoR/4yKGaF2PrXNbF///WLFdQoL7n1wlnnkACs4zpe 91J+CMCASUQxurGZu1uWMhlAbDz4bFvxoofwhGMD11hAffHuuIQ/2cbTPlOsXbA5 EItIEpjsV3KQPM3qJ5wlB17L4re+DXVheZr0tKqjX+1vm5J0HfkGqmQcomOgae7v ObKwVyKTpWuXuvKPVPYMjvK3ZUEVsJ/2pw== -----END CERTIFICATE-----Generated at Tue Jul 1 04:24:04 2025 by rpki-client