$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa File: 12658047-0b5e-3f8d-82da-f5c069fb24d8.roa (raw, json) Hash identifier: nVWKO1AGNYD7HM7ybMLA5ViVUL/gS2O0RLfnMErE1Xk= Subject key identifier: D9:C0:F5:B7:88:1A:FD:F6:2A:CC:4A:D2:B3:2E:B0:95:4A:1D:71:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849134FE8C6E2926D5D072CB900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa Signing time: Tue 04 Mar 2025 10:55:11 +0000 ROA not before: Tue 04 Mar 2025 10:55:11 +0000 ROA not after: Mon 02 Jun 2025 09:55:11 +0000 asID: 30036 IP address blocks: 2604:2e8e:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:4f:e8:c6:e2:92:6d:5d:07:2c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 4 10:55:11 2025 GMT Not After : Jun 2 09:55:11 2025 GMT Subject: CN=6b8676ab-993d-4e48-af56-174161d7ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:b5:f1:66:09:e7:92:6c:b2:9f:27:07:15: f5:33:6d:53:46:6d:77:c8:d8:0a:e5:39:66:7a:6a: b5:08:54:2f:30:23:c5:34:b7:23:6e:6f:b1:6e:fe: 57:61:24:25:a3:1c:04:00:ea:c3:4c:32:3e:27:0b: 27:e2:89:19:8a:1d:64:83:54:db:90:24:a6:e8:d4: e0:4a:3f:e2:09:d5:49:8f:50:ae:e7:e7:b8:be:68: 11:8b:63:e8:8e:7d:2e:5c:2a:3d:9d:83:6f:2c:5f: a6:80:93:9f:9a:96:ed:63:ed:6e:10:66:e4:e3:6e: 88:73:d7:c3:0d:4f:aa:28:93:d4:ea:c1:c8:c9:3c: 2a:63:83:93:58:49:97:46:f5:67:f8:ae:ac:41:a6: 36:55:5c:2b:68:45:ef:e9:c4:6a:2f:f2:17:aa:67: 43:fc:19:f5:a6:26:64:bb:41:6f:df:62:ff:49:b9: e3:d2:f5:95:cd:93:5b:ba:81:59:99:95:c2:09:8c: 57:e9:85:fa:52:3d:5e:50:b4:af:94:18:c1:24:9e: 60:65:48:2f:9f:02:26:77:55:cf:b3:12:3c:9b:7e: 6c:8c:08:c1:5e:3c:82:ed:7e:cb:c2:3e:23:bf:a3: aa:09:82:65:22:02:86:4c:1d:f0:c7:f9:7b:01:65: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C0:F5:B7:88:1A:FD:F6:2A:CC:4A:D2:B3:2E:B0:95:4A:1D:71:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5c:ef:27:f8:cb:ca:71:09:50:31:49:86:0d:33:3a:46:aa: 09:23:31:8b:0c:ed:f7:a4:e0:f3:18:32:a9:40:40:61:63:d5: bb:b2:ce:6f:44:c2:fb:79:f6:5b:cf:09:01:b2:6a:5b:4b:77: e2:47:b2:ca:f5:de:90:3f:12:06:e0:7f:5a:43:ac:2d:ba:8a: 6c:ad:69:2e:30:29:3d:77:d2:4d:74:ee:7e:7c:82:09:d7:c0: b5:3b:d1:f1:c8:8a:ec:25:c1:c8:c2:40:30:18:36:8c:62:fb: 75:a2:69:71:fd:67:5c:0c:5b:56:13:71:b5:1b:08:fa:dd:4b: 8b:82:74:ab:12:68:27:aa:ad:47:ca:67:3b:09:30:a9:b8:c4: 64:d6:5e:de:61:84:23:22:ba:b2:84:e0:bf:59:c3:0e:49:2e: 5c:28:3d:8c:6a:40:44:57:dd:fa:f9:2c:ef:93:4e:11:6d:4b: b7:b9:e5:10:88:2f:2b:cc:44:c0:a8:fd:92:08:9c:d8:03:f5: 9b:13:e9:1a:c2:51:e9:97:6c:a7:c7:3f:16:bf:11:5d:22:fb: 3d:6f:96:62:fc:23:90:67:cd:de:cc:4b:ac:f4:e5:2e:fb:1b: d4:02:69:5e:32:65:fb:f1:34:7d:28:a3:7c:68:ac:13:a2:8f: ca:d6:1e:86 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT+jG4pJtXQcsuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNDEwNTUxMVoXDTI1MDYwMjA5NTUxMVowLzEtMCsGA1UEAxMk NmI4Njc2YWItOTkzZC00ZTQ4LWFmNTYtMTc0MTYxZDdlYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHO18WYJ55Jssp8nBxX1M21TRm13yNgK5Tlm emq1CFQvMCPFNLcjbm+xbv5XYSQloxwEAOrDTDI+Jwsn4okZih1kg1TbkCSm6NTg Sj/iCdVJj1Cu5+e4vmgRi2Pojn0uXCo9nYNvLF+mgJOfmpbtY+1uEGbk426Ic9fD DU+qKJPU6sHIyTwqY4OTWEmXRvVn+K6sQaY2VVwraEXv6cRqL/IXqmdD/Bn1piZk u0Fv32L/Sbnj0vWVzZNbuoFZmZXCCYxX6YX6Uj1eULSvlBjBJJ5gZUgvnwImd1XP sxI8m35sjAjBXjyC7X7Lwj4jv6OqCYJlIgKGTB3wx/l7AWU6IQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNnA9beIGv32KsxK0rMusJVKHXGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTI2NTgwNDctMGI1ZS0z ZjhkLTgyZGEtZjVjMDY5ZmIyNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujkww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALVzvJ/jLynEJUDFJhg0zOkaqCSMxiwzt96Tg8xgyqUBAYWPVu7LO b0TC+3n2W88JAbJqW0t34keyyvXekD8SBuB/WkOsLbqKbK1pLjApPXfSTXTufnyC CdfAtTvR8ciK7CXByMJAMBg2jGL7daJpcf1nXAxbVhNxtRsI+t1Li4J0qxJoJ6qt R8pnOwkwqbjEZNZe3mGEIyK6soTgv1nDDkkuXCg9jGpARFfd+vks75NOEW1Lt7nl EIgvK8xEwKj9kgic2AP1mxPpGsJR6Zdsp8c/Fr8RXSL7PW+WYvwjkGfN3sxLrPTl Lvsb1AJpXjJl+/E0fSijfGisE6KPytYehg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:01:14 2025 by rpki-client