$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa File: 11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa (raw, json) Hash identifier: FU0KHoaP10TeYK1ay1+XShFxoQhQ0WWftPrplSMJYmA= Subject key identifier: B0:57:48:CC:4A:89:A3:C4:39:0B:5B:42:E9:E5:7F:FC:31:45:8F:72 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C53497002A0F3DB7B76D6040 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa Signing time: Tue 04 Feb 2025 11:27:06 +0000 ROA not before: Tue 04 Feb 2025 11:27:06 +0000 ROA not after: Mon 05 May 2025 10:27:06 +0000 asID: 30036 IP address blocks: 2604:2e8e:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:97:00:2a:0f:3d:b7:b7:6d:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 11:27:06 2025 GMT Not After : May 5 10:27:06 2025 GMT Subject: CN=eefadc70-1c1e-44e3-887b-dd472b9bb891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:5a:97:c0:e2:7b:15:70:f3:60:8c:a5:12: e0:59:06:25:3f:a4:3a:a0:b3:ed:01:47:55:83:4c: dd:73:69:33:2a:b7:5d:89:e6:57:9d:97:57:f1:0b: 33:ca:f6:3c:55:39:86:df:66:6c:d9:30:87:d7:fc: 98:14:26:57:de:e8:90:ea:72:4c:78:42:b7:cb:a6: d4:bc:b0:01:65:16:10:5a:a6:3d:8e:c7:17:6c:09: 9b:d3:98:5d:50:df:d3:67:63:3c:8a:cf:62:1e:6c: f9:ed:12:95:97:34:57:40:6b:44:53:0f:16:ba:cb: 56:2f:43:5f:5c:12:4f:ed:e4:25:a3:61:32:8c:53: e9:b7:ab:81:fe:e7:4d:61:cb:71:23:63:d8:3d:26: 56:2a:b1:5d:93:00:0b:94:f4:5b:f7:2a:ed:76:42: a6:3a:ca:72:60:50:2a:17:ac:90:f5:f1:1e:b5:c0: 50:1f:fa:71:5c:47:b6:5e:2b:27:6b:b7:d1:29:87: 81:7e:ab:44:fa:3f:6c:6e:51:e1:8b:fa:38:bb:32: 19:df:96:0d:be:09:40:09:4e:4f:70:b1:4e:74:e7: a0:70:16:2f:80:1c:ab:29:b1:fa:ce:b8:6a:57:37: 66:0c:75:f2:d3:e3:e5:80:ff:92:b1:e2:8b:57:87: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:48:CC:4A:89:A3:C4:39:0B:5B:42:E9:E5:7F:FC:31:45:8F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:94:7e:26:2a:d7:cc:26:07:61:7b:dd:9c:0d:84:8c:ea:47: 9c:92:90:46:df:76:50:0a:42:3a:29:a3:94:20:97:73:50:be: ac:c9:e0:fb:c1:1e:dd:a8:0a:5e:af:72:50:20:65:ee:03:a0: 82:ed:63:9c:13:33:0e:e4:7d:46:9a:f4:35:0f:53:b6:d8:ac: a3:8e:97:0b:62:02:71:77:ae:82:78:83:64:22:f6:ac:7f:38: c9:80:9d:9c:25:d2:41:74:a5:74:d4:75:c7:bf:34:b9:a0:f7: 2b:62:e9:d8:7e:bc:4f:f4:4d:b5:89:19:3f:de:c6:7e:b0:9b: 2c:58:40:d6:2d:c3:81:df:b6:1f:10:36:1c:f3:85:2f:0d:f8: 4a:b5:61:ad:46:e1:4e:bf:12:1e:45:7e:b7:b3:c9:d7:bc:44: a5:61:97:6f:26:52:7f:9e:29:e6:a0:a1:0c:58:2c:77:6e:49: cd:8b:d1:1d:1a:88:56:a6:dd:ff:2a:ee:f7:9e:bd:74:37:a0: a9:1b:72:22:96:c8:a8:b1:62:10:a5:67:d1:73:e2:1a:c3:8b: 80:da:52:71:19:d7:a7:3d:f9:76:a8:44:61:d7:f2:30:68:71: fa:06:ee:35:17:5d:d9:7a:1a:eb:24:79:29:63:21:43:ef:46: a7:b9:8f:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFNJcAKg89t7dtYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDExMjcwNloXDTI1MDUwNTEwMjcwNlowLzEtMCsGA1UEAxMk ZWVmYWRjNzAtMWMxZS00NGUzLTg4N2ItZGQ0NzJiOWJiODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqRal8DiexVw82CMpRLgWQYlP6Q6oLPtAUdV g0zdc2kzKrddieZXnZdX8QszyvY8VTmG32Zs2TCH1/yYFCZX3uiQ6nJMeEK3y6bU vLABZRYQWqY9jscXbAmb05hdUN/TZ2M8is9iHmz57RKVlzRXQGtEUw8WustWL0Nf XBJP7eQlo2EyjFPpt6uB/udNYctxI2PYPSZWKrFdkwALlPRb9yrtdkKmOspyYFAq F6yQ9fEetcBQH/pxXEe2Xisna7fRKYeBfqtE+j9sblHhi/o4uzIZ35YNvglACU5P cLFOdOegcBYvgByrKbH6zrhqVzdmDHXy0+PlgP+SseKLV4c2gQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLBXSMxKiaPEOQtbQunlf/wxRY9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTFmM2E1YmEtODhkMS0z MjEyLWIyYmUtY2M4YjRkMTRlNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujnQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADZR+JirXzCYHYXvdnA2EjOpHnJKQRt92UApCOimjlCCXc1C+rMng +8Ee3agKXq9yUCBl7gOggu1jnBMzDuR9Rpr0NQ9Tttiso46XC2ICcXeugniDZCL2 rH84yYCdnCXSQXSldNR1x780uaD3K2Lp2H68T/RNtYkZP97GfrCbLFhA1i3Dgd+2 HxA2HPOFLw34SrVhrUbhTr8SHkV+t7PJ17xEpWGXbyZSf54p5qChDFgsd25JzYvR HRqIVqbd/yru9569dDegqRtyIpbIqLFiEKVn0XPiGsOLgNpScRnXpz35dqhEYdfy MGhx+gbuNRdd2Xoa6yR5KWMhQ+9Gp7mPlw== -----END CERTIFICATE-----Generated at Wed Apr 9 00:01:20 2025 by rpki-client