$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e0cabca-821c-3a03-9bbf-2e432236b5fe.roa File: 0e0cabca-821c-3a03-9bbf-2e432236b5fe.roa (raw, json) Hash identifier: 0shIMkcGliSHDoX0Ht4oVEXSI8ti1mlsl8zfI79YZZo= Subject key identifier: 91:6D:AB:A0:81:86:0F:D1:AF:F7:79:E9:AC:6A:26:2F:E9:4D:44:5D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C55FD10A9B15F7B48FEB9900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e0cabca-821c-3a03-9bbf-2e432236b5fe.roa Signing time: Tue 04 Feb 2025 12:54:11 +0000 ROA not before: Tue 04 Feb 2025 12:54:11 +0000 ROA not after: Mon 05 May 2025 11:54:11 +0000 asID: 30036 IP address blocks: 2604:2e8a:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:d1:0a:9b:15:f7:b4:8f:eb:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 12:54:11 2025 GMT Not After : May 5 11:54:11 2025 GMT Subject: CN=47365614-d001-4f0d-a5b5-5edef2b3e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:a9:db:db:fb:2e:dc:92:8c:f7:2f:df:16: a8:4c:57:29:55:33:79:f5:28:27:4d:c3:bf:45:bc: 99:d9:d1:d9:5b:88:39:b3:05:b4:c5:48:c4:1b:b6: 7b:e8:2a:dc:0c:ec:c5:12:01:86:82:a9:2c:b5:69: cd:59:df:68:0e:ec:f0:1d:49:88:bb:89:45:6d:4e: 88:e5:a6:bd:c6:03:2b:78:b9:2e:d3:e2:0f:b9:83: 84:2d:04:1e:5e:39:3e:4c:0a:9c:51:5a:47:79:69: 97:0a:5d:cf:ae:4a:a7:fc:82:a9:20:50:19:d0:ec: 90:91:6f:f6:e9:d1:9b:8a:88:2b:61:19:c0:0b:cb: 8e:45:11:d7:71:35:ca:81:bd:55:f2:96:c8:a9:6a: 27:6c:7b:97:a3:ca:6a:84:dc:1f:d4:7f:12:19:78: ee:97:c8:0a:04:a6:ab:cf:30:15:ed:15:57:0c:01: 90:f0:d3:98:9c:b9:03:d0:68:ab:39:c8:dc:d7:5a: 5d:e6:33:e2:21:95:89:c1:a7:b9:61:45:67:3c:14: 44:3f:27:f7:3e:04:96:55:ef:fe:ef:82:ad:92:a7: 6d:6b:04:8b:48:5e:ec:8c:05:fa:7e:bb:6b:b6:e5: 9e:5a:b0:35:63:34:1d:4f:df:8a:be:19:5c:1e:bb: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:AB:A0:81:86:0F:D1:AF:F7:79:E9:AC:6A:26:2F:E9:4D:44:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e0cabca-821c-3a03-9bbf-2e432236b5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:ba:d2:03:01:ff:9f:bb:ce:d9:24:49:66:9d:11:80:de: 7b:e9:49:f0:73:6a:0f:4f:42:44:11:3c:ad:11:dc:aa:85:27: 1f:0e:2c:6c:95:1a:3c:73:5f:be:8a:df:80:38:ca:14:31:e4: 76:37:17:fa:21:e3:ca:69:dc:0c:6b:7e:e7:d2:0f:af:4b:d7: 04:2d:00:16:89:77:96:ee:fc:c6:e5:8d:03:46:1e:c4:98:09: 9d:79:2b:17:24:5b:82:37:fc:88:79:3c:2b:05:12:f6:de:11: 71:af:e6:31:ef:da:cc:54:12:06:d7:69:97:cc:78:53:18:b0: 29:0e:7e:1c:2d:45:db:73:1a:43:4d:d0:1d:0c:22:d6:60:75: 92:65:45:67:e3:64:83:0c:e0:d9:d9:a7:83:99:ad:e4:d7:4c: 54:43:65:28:56:2f:d5:f3:a7:fe:55:a1:c4:4f:71:5d:13:89: d6:7d:cd:3b:91:64:85:24:8e:fc:22:22:5b:66:8b:e1:95:ef: f7:96:70:e9:03:29:60:56:7d:91:e7:ca:ab:67:47:c5:55:29: 1d:26:b6:99:ea:89:30:61:c0:ea:5f:3a:b7:f7:23:e0:5a:de: f8:69:42:91:3d:bd:88:f6:bd:10:fd:0e:7a:1e:cb:1a:50:b4: 14:49:d7:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFX9EKmxX3tI/rmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEyNTQxMVoXDTI1MDUwNTExNTQxMVowLzEtMCsGA1UEAxMk NDczNjU2MTQtZDAwMS00ZjBkLWE1YjUtNWVkZWYyYjNlMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv+p29v7LtySjPcv3xaoTFcpVTN59SgnTcO/ RbyZ2dHZW4g5swW0xUjEG7Z76CrcDOzFEgGGgqkstWnNWd9oDuzwHUmIu4lFbU6I 5aa9xgMreLku0+IPuYOELQQeXjk+TAqcUVpHeWmXCl3Prkqn/IKpIFAZ0OyQkW/2 6dGbiogrYRnAC8uORRHXcTXKgb1V8pbIqWonbHuXo8pqhNwf1H8SGXjul8gKBKar zzAV7RVXDAGQ8NOYnLkD0GirOcjc11pd5jPiIZWJwae5YUVnPBREPyf3PgSWVe/+ 74KtkqdtawSLSF7sjAX6frtrtuWeWrA1YzQdT9+KvhlcHrsiHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJFtq6CBhg/Rr/d56axqJi/pTURdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGUwY2FiY2EtODIxYy0z YTAzLTliYmYtMmU0MzIyMzZiNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcLS60gMB/5+7ztkkSWadEYDee+lJ8HNqD09CRBE8rRHcqoUnHw4s bJUaPHNfvorfgDjKFDHkdjcX+iHjymncDGt+59IPr0vXBC0AFol3lu78xuWNA0Ye xJgJnXkrFyRbgjf8iHk8KwUS9t4Rca/mMe/azFQSBtdpl8x4UxiwKQ5+HC1F23Ma Q03QHQwi1mB1kmVFZ+Nkgwzg2dmng5mt5NdMVENlKFYv1fOn/lWhxE9xXROJ1n3N O5FkhSSO/CIiW2aL4ZXv95Zw6QMpYFZ9kefKq2dHxVUpHSa2meqJMGHA6l86t/cj 4Fre+GlCkT29iPa9EP0Oeh7LGlC0FEnX5Q== -----END CERTIFICATE-----Generated at Tue Apr 8 23:56:20 2025 by rpki-client