$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa File: 0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json) Hash identifier: TFo1prHJTgmQaaqNDRyGK0o2OA6UXT+UpcIC3YbsB8U= Subject key identifier: 4B:45:6E:58:9B:87:35:34:2B:1B:5C:BB:43:A8:0C:59:63:48:94:08 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C55FC2F14B6E278DD70ED380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa Signing time: Tue 04 Feb 2025 12:54:05 +0000 ROA not before: Tue 04 Feb 2025 12:54:05 +0000 ROA not after: Mon 05 May 2025 11:54:05 +0000 asID: 30036 IP address blocks: 2604:2e8a:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:c2:f1:4b:6e:27:8d:d7:0e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 12:54:05 2025 GMT Not After : May 5 11:54:05 2025 GMT Subject: CN=4b510bc9-7e68-410b-a116-c55e50f83d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:52:8a:fc:48:d8:39:3a:00:6b:49:a4:44: 31:97:aa:c9:e0:8e:ab:97:36:0a:69:f1:b4:a1:ee: 80:b6:de:44:3e:3e:d0:bb:47:d5:f3:2f:3d:17:c9: e2:5a:26:9e:68:fc:54:b1:98:ae:f1:34:6f:ab:72: 1e:23:ee:0d:7d:3b:ab:f2:a8:44:ea:83:f5:30:fb: f1:01:17:6d:e8:12:c2:14:8d:b1:d2:d6:b6:f0:cd: a9:11:e4:41:0a:77:e6:ef:0c:f4:a5:09:00:23:7f: 32:fd:6e:84:6f:d5:dd:f1:f3:06:c0:68:3c:e4:14: 46:05:55:e9:95:06:db:00:af:66:95:b7:39:d4:af: cd:3b:c2:37:ee:7c:df:9f:0e:4f:eb:09:79:42:ba: 98:2a:ff:9a:b9:6e:2a:2a:bc:97:b2:db:6f:91:01: 8d:d3:21:6b:44:d1:ed:6a:aa:4c:20:82:44:fc:93: e1:a7:5a:11:55:ff:04:5f:39:72:73:92:03:50:2c: de:b6:f1:1b:4e:8e:d1:32:23:b8:da:bd:4b:07:ac: 10:f3:a7:08:18:25:16:a2:2e:3e:a0:1a:1b:97:c6: 71:67:01:2a:31:1a:de:e2:ee:ef:6c:80:f3:a0:73: 21:74:c6:02:5a:7a:50:d7:b0:a6:84:df:e8:e7:c5: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:45:6E:58:9B:87:35:34:2B:1B:5C:BB:43:A8:0C:59:63:48:94:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:86:80:a4:45:99:39:e1:87:5a:e3:76:4d:85:6d:62:44:0a: 3c:f7:2b:66:9a:83:a5:f5:8e:30:2b:12:22:ce:c1:a5:67:7c: 26:e3:a8:af:ca:98:50:7d:ef:14:0f:97:79:ae:0c:44:3b:82: a3:6a:5b:7d:3a:84:8d:33:67:b5:98:69:35:89:f4:ba:a8:4b: 87:e5:dd:90:be:dd:a7:4f:bd:72:56:96:fb:b5:9d:d1:f5:f1: 9a:50:bc:5c:61:1b:ec:1a:53:cc:bd:7a:46:66:23:b1:d3:34: e7:1b:99:30:b2:dc:c6:d0:a0:d1:63:0d:fc:e0:92:ed:73:41: 04:00:17:df:bf:43:21:34:1a:29:78:6e:6c:4b:cf:c5:3e:da: e3:19:ca:25:e7:f7:9d:91:63:60:0e:b0:0c:3c:8a:a1:67:5d: a8:34:83:67:2d:51:b8:a1:85:84:19:42:d5:e7:75:e4:bb:1d: b1:56:ae:f5:7a:66:b0:20:db:fb:e7:7a:00:93:59:78:a4:07: 12:58:b1:a1:c1:30:e0:2a:ac:04:fe:9b:3e:ea:89:8e:9a:13: 8e:8f:dd:50:23:fb:85:6b:be:f2:92:b7:95:e3:e8:06:34:81: 1d:01:8d:e9:45:6a:19:e6:97:a8:a0:c7:af:75:b3:43:6f:84: 65:1d:5e:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFX8LxS24njdcO04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEyNTQwNVoXDTI1MDUwNTExNTQwNVowLzEtMCsGA1UEAxMk NGI1MTBiYzktN2U2OC00MTBiLWExMTYtYzU1ZTUwZjgzZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQlSivxI2Dk6AGtJpEQxl6rJ4I6rlzYKafG0 oe6Att5EPj7Qu0fV8y89F8niWiaeaPxUsZiu8TRvq3IeI+4NfTur8qhE6oP1MPvx ARdt6BLCFI2x0ta28M2pEeRBCnfm7wz0pQkAI38y/W6Eb9Xd8fMGwGg85BRGBVXp lQbbAK9mlbc51K/NO8I37nzfnw5P6wl5QrqYKv+auW4qKryXsttvkQGN0yFrRNHt aqpMIIJE/JPhp1oRVf8EXzlyc5IDUCzetvEbTo7RMiO42r1LB6wQ86cIGCUWoi4+ oBobl8ZxZwEqMRre4u7vbIDzoHMhdMYCWnpQ17CmhN/o58VlHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEtFblibhzU0Kxtcu0OoDFljSJQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3ODg0YTYtZWQ1Ny0z ZmNlLWIyYzAtNWQ4YzY0ZTRhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX4aApEWZOeGHWuN2TYVtYkQKPPcrZpqDpfWOMCsSIs7BpWd8JuOo r8qYUH3vFA+Xea4MRDuCo2pbfTqEjTNntZhpNYn0uqhLh+XdkL7dp0+9claW+7Wd 0fXxmlC8XGEb7BpTzL16RmYjsdM05xuZMLLcxtCg0WMN/OCS7XNBBAAX379DITQa KXhubEvPxT7a4xnKJef3nZFjYA6wDDyKoWddqDSDZy1RuKGFhBlC1ed15LsdsVau 9XpmsCDb++d6AJNZeKQHElixocEw4CqsBP6bPuqJjpoTjo/dUCP7hWu+8pK3lePo BjSBHQGN6UVqGeaXqKDHr3WzQ2+EZR1e1A== -----END CERTIFICATE-----Generated at Wed Apr 9 00:01:20 2025 by rpki-client