$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa File: 254c0fb0-008a-383a-bd3e-c9159a8f6059.roa (raw, json) Hash identifier: qMZTVHyw8rjGF8w0CcoOW0euhuzPDTdBfLMV54dPm3o= Subject key identifier: 42:03:DC:4B:70:91:AE:47:5B:97:D6:4D:18:D0:26:11:7F:52:6D:24 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C264EC998B404D4E0583AA00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa Signing time: Mon 03 Feb 2025 11:17:03 +0000 ROA not before: Mon 03 Feb 2025 11:17:03 +0000 ROA not after: Sun 04 May 2025 10:17:03 +0000 asID: 30036 IP address blocks: 2604:2e8b:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:ec:99:8b:40:4d:4e:05:83:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:17:03 2025 GMT Not After : May 4 10:17:03 2025 GMT Subject: CN=bbe6ab63-17e6-4edc-967e-e581afde742b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:93:5d:48:98:ca:2d:f5:c6:b9:1f:d3:a8: 21:63:0c:9d:e6:3e:97:66:3b:24:ab:47:7b:fe:56: a1:5d:db:6c:59:85:52:8d:c6:c7:b9:2c:92:88:92: b8:f7:bf:9e:cb:56:fc:9e:23:50:62:ec:03:b8:2a: 80:d3:6a:93:13:35:23:e4:b5:62:28:2d:10:1b:15: 43:82:e5:1d:a6:91:a3:cb:58:ce:1f:3f:d9:31:51: 89:59:cf:83:fc:b8:ba:08:87:8e:0d:db:60:f6:26: 4b:67:0b:65:27:f7:32:ee:3d:56:3d:ab:c3:a9:63: 93:25:70:1f:24:d7:1b:98:43:ca:dd:00:68:96:16: 28:0a:b0:a6:0a:04:7a:2f:b9:a4:d6:03:56:4f:c6: 24:c2:d4:36:d5:0f:8b:41:f5:7e:2f:d3:1d:6c:01: c4:09:f7:0e:5d:7f:48:78:75:52:bf:25:2c:b6:8f: 8b:ec:3a:10:73:89:1e:39:17:70:43:8a:45:63:22: ee:6e:ef:ee:be:76:c6:b9:57:2a:7e:3a:ef:ea:bf: 57:9d:e2:d8:36:99:8c:85:e9:13:95:9b:fa:fe:42: a2:8d:6a:14:8f:97:6e:6a:44:d4:37:cd:31:cf:f1: cf:e8:d4:3e:a5:24:8b:7e:e0:d2:24:c0:2f:cb:f1: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:DC:4B:70:91:AE:47:5B:97:D6:4D:18:D0:26:11:7F:52:6D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:cc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f4:96:9d:d5:63:4d:7e:e6:6a:d1:83:33:ba:69:7b:5e:b3: 7f:f6:9a:ae:1e:14:ff:13:27:95:9c:57:82:76:36:8b:a5:60: 19:77:26:f0:4e:00:44:4a:6a:8d:24:85:32:fa:39:2f:5a:ae: b7:13:18:d4:14:c3:4f:6a:19:3e:05:28:2c:04:92:61:36:34: b6:5e:a0:24:ba:2d:bf:e5:5e:28:76:72:fb:2c:22:6f:78:4c: 10:ee:05:9f:3f:34:95:d9:96:47:98:2a:e9:12:b9:87:26:b9: bf:2c:c9:09:51:1f:91:37:c2:37:e6:f4:4e:15:72:99:2d:f8: da:6c:a2:d1:02:c3:85:34:32:e2:b0:30:92:56:12:07:6d:ca: b8:9a:e9:37:b0:35:27:a2:bf:0a:69:f5:56:4a:f0:a6:74:10: 71:8e:57:6a:99:01:c2:46:34:93:da:87:50:68:2b:b1:b1:a8: 59:61:c4:5a:85:b1:f1:dd:eb:30:6a:27:61:ca:ed:03:9e:c1: 5c:0e:9e:e6:7f:73:38:99:45:fe:f1:16:f7:a0:2e:69:28:40: 05:3f:a2:68:03:15:a0:0f:c3:c3:10:5b:13:bd:af:75:03:13: 8e:b6:eb:2f:d5:c5:f8:99:d5:fc:4c:68:90:60:d5:06:0e:87: ad:18:12:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZOyZi0BNTgWDqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTcwM1oXDTI1MDUwNDEwMTcwM1owLzEtMCsGA1UEAxMk YmJlNmFiNjMtMTdlNi00ZWRjLTk2N2UtZTU4MWFmZGU3NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU2TXUiYyi31xrkf06ghYwyd5j6XZjskq0d7 /lahXdtsWYVSjcbHuSySiJK497+ey1b8niNQYuwDuCqA02qTEzUj5LViKC0QGxVD guUdppGjy1jOHz/ZMVGJWc+D/Li6CIeODdtg9iZLZwtlJ/cy7j1WPavDqWOTJXAf JNcbmEPK3QBolhYoCrCmCgR6L7mk1gNWT8YkwtQ21Q+LQfV+L9MdbAHECfcOXX9I eHVSvyUsto+L7DoQc4keORdwQ4pFYyLubu/uvnbGuVcqfjrv6r9XneLYNpmMhekT lZv6/kKijWoUj5duakTUN80xz/HP6NQ+pSSLfuDSJMAvy/EP2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEID3Etwka5HW5fWTRjQJhF/Um0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjU0YzBmYjAtMDA4YS0z ODNhLWJkM2UtYzkxNTlhOGY2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABfSWndVjTX7matGDM7ppe16zf/aarh4U/xMnlZxXgnY2i6VgGXcm 8E4AREpqjSSFMvo5L1qutxMY1BTDT2oZPgUoLASSYTY0tl6gJLotv+VeKHZy+ywi b3hMEO4Fnz80ldmWR5gq6RK5hya5vyzJCVEfkTfCN+b0ThVymS342myi0QLDhTQy 4rAwklYSB23KuJrpN7A1J6K/Cmn1VkrwpnQQcY5XapkBwkY0k9qHUGgrsbGoWWHE WoWx8d3rMGonYcrtA57BXA6e5n9zOJlF/vEW96AuaShABT+iaAMVoA/DwxBbE72v dQMTjrbrL9XF+JnV/ExokGDVBg6HrRgS/Q== -----END CERTIFICATE-----Generated at Wed Apr 9 01:55:59 2025 by rpki-client