$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa File: 11a586c8-5bff-36fe-842e-e0d88bd14507.roa (raw, json) Hash identifier: mcMtvWfQluHcZ8He03dVxTcB2cgUQwbW1ogA/EH19gs= Subject key identifier: 94:C2:13:EF:D2:30:0E:F0:A1:05:90:94:6F:F8:32:92:5C:61:48:2D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C264B9B2835ABABBD080CD80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa Signing time: Mon 03 Feb 2025 11:16:39 +0000 ROA not before: Mon 03 Feb 2025 11:16:39 +0000 ROA not after: Sun 04 May 2025 10:16:39 +0000 asID: 30036 IP address blocks: 2604:2e89:5800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:b9:b2:83:5a:ba:bb:d0:80:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:16:39 2025 GMT Not After : May 4 10:16:39 2025 GMT Subject: CN=89ff6a41-1107-4bd5-8781-118f0ca13909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:29:2a:c4:f5:bb:af:8d:00:90:30:ef:dc: 26:7c:9a:e1:7c:2f:dd:c2:d3:e5:b2:ae:89:16:fb: 5e:dc:a3:39:7d:ee:f9:b2:03:db:e1:f5:69:1a:b9: 3b:d7:08:b0:d3:a3:69:0d:ac:eb:2f:37:44:fb:95: 10:a5:38:63:ff:ee:88:79:95:a5:dc:c1:73:8c:b3: 44:07:cc:f6:9d:7f:f2:ed:36:9a:89:05:b7:c7:e5: 09:12:be:3e:f4:7c:ee:74:13:bf:f2:cd:56:ae:f8: 10:f0:36:dc:46:f9:14:cb:57:b0:5f:be:2a:84:f5: 86:ed:fe:fc:d5:f5:e2:25:c1:23:d3:e4:92:d2:60: 7f:54:ba:63:e9:30:f9:d5:54:b3:7f:a3:ff:cc:ff: 75:93:6f:f5:8d:fa:ea:34:16:30:08:78:48:4e:16: a3:56:25:9d:0a:37:33:9f:58:07:67:3d:6f:eb:fe: 3b:72:0d:57:84:07:bc:77:2d:a0:6f:85:c8:af:23: db:f4:91:9a:1f:34:be:bc:15:47:76:87:72:b2:51: a1:7b:56:03:97:ef:0e:b8:e8:97:64:ce:d1:30:ba: 7e:bd:19:c3:51:0e:f3:b3:07:09:c4:c0:88:7e:69: 3d:86:6c:b1:a6:aa:11:f4:65:cb:e4:f4:fc:dc:10: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C2:13:EF:D2:30:0E:F0:A1:05:90:94:6F:F8:32:92:5C:61:48:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:5800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e3:26:31:3f:7e:d7:74:ca:88:a1:7f:6b:85:e6:61:63:26: b6:f7:57:87:16:63:85:96:42:9b:a7:bf:15:85:19:f6:43:ea: cf:39:ff:ee:f9:39:c1:d4:5c:8d:50:1f:74:2a:cb:25:86:07: c7:72:f3:2b:ce:7a:eb:26:73:b3:8e:bc:51:58:b6:1b:80:33: 2a:70:e1:ba:76:62:a1:e1:76:e1:f2:34:14:dc:9e:45:94:f8: 59:8f:6a:e0:98:02:42:bb:e4:f9:19:25:5a:56:76:c0:93:ba: ed:ae:a3:28:3e:56:73:00:24:b7:a5:5d:e6:21:18:b3:d0:6d: 91:d7:c9:e1:4b:50:98:a5:c7:90:71:ec:97:4a:17:f7:03:d0: 86:2d:8f:6c:ad:80:a1:d1:76:a8:4e:f7:e0:0d:9c:89:88:77: e5:2c:7d:8b:7b:dc:88:97:d7:e5:c3:bc:5d:37:b0:49:22:67: 23:e2:16:9d:6f:5b:d0:40:11:e3:0b:d6:0a:99:e7:6e:5f:7e: 71:60:97:23:aa:b3:c9:c8:dc:b6:89:36:4d:46:44:9a:a1:9a: 85:a7:dc:03:f6:e7:11:22:b6:86:1d:5f:03:a7:1f:31:43:24: a9:8b:9e:0e:0a:47:a4:33:40:93:05:0f:36:72:00:70:6d:0b: 2a:45:a6:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZLmyg1q6u9CAzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTYzOVoXDTI1MDUwNDEwMTYzOVowLzEtMCsGA1UEAxMk ODlmZjZhNDEtMTEwNy00YmQ1LTg3ODEtMTE4ZjBjYTEzOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEUpKsT1u6+NAJAw79wmfJrhfC/dwtPlsq6J Fvte3KM5fe75sgPb4fVpGrk71wiw06NpDazrLzdE+5UQpThj/+6IeZWl3MFzjLNE B8z2nX/y7TaaiQW3x+UJEr4+9HzudBO/8s1WrvgQ8DbcRvkUy1ewX74qhPWG7f78 1fXiJcEj0+SS0mB/VLpj6TD51VSzf6P/zP91k2/1jfrqNBYwCHhIThajViWdCjcz n1gHZz1v6/47cg1XhAe8dy2gb4XIryPb9JGaHzS+vBVHdodyslGhe1YDl+8OuOiX ZM7RMLp+vRnDUQ7zswcJxMCIfmk9hmyxpqoR9GXL5PT83BCf0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJTCE+/SMA7woQWQlG/4MpJcYUgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTFhNTg2YzgtNWJmZi0z NmZlLTg0MmUtZTBkODhiZDE0NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiVgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWuMmMT9+13TKiKF/a4XmYWMmtvdXhxZjhZZCm6e/FYUZ9kPqzzn/ 7vk5wdRcjVAfdCrLJYYHx3LzK8566yZzs468UVi2G4AzKnDhunZioeF24fI0FNye RZT4WY9q4JgCQrvk+RklWlZ2wJO67a6jKD5WcwAkt6Vd5iEYs9BtkdfJ4UtQmKXH kHHsl0oX9wPQhi2PbK2AodF2qE734A2ciYh35Sx9i3vciJfX5cO8XTewSSJnI+IW nW9b0EAR4wvWCpnnbl9+cWCXI6qzycjctok2TUZEmqGahafcA/bnESK2hh1fA6cf MUMkqYueDgpHpDNAkwUPNnIAcG0LKkWmdg== -----END CERTIFICATE-----Generated at Sun Apr 13 04:03:51 2025 by rpki-client