$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa File: 3602582a-a894-32a0-8f9b-5cc020d56039.roa (raw, json) Hash identifier: KTJ243jgIhfxxAWyuKEN1UdApCTbPuFkiH3lPseCKBg= Subject key identifier: BF:29:34:6C:78:23:6D:8C:73:C9:23:B2:8A:00:B6:22:0C:A5:BD:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C7FE34C686492475BCC26CC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa Signing time: Wed 05 Feb 2025 11:24:57 +0000 ROA not before: Wed 05 Feb 2025 11:24:57 +0000 ROA not after: Tue 06 May 2025 10:24:57 +0000 asID: 30036 IP address blocks: 2604:2e8c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fe:34:c6:86:49:24:75:bc:c2:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 5 11:24:57 2025 GMT Not After : May 6 10:24:57 2025 GMT Subject: CN=1877d8b2-8488-4424-8c7a-1a5dba1b3178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:4c:d6:fa:8d:3b:24:94:00:d0:15:66:6d: 58:67:aa:5f:c0:e7:d4:cd:2e:ee:b6:9a:00:b8:97: a0:50:a7:df:93:86:c8:a3:c3:50:74:f4:14:4d:2d: c2:f7:b8:17:63:85:ac:52:10:66:13:a4:d2:8a:c9: 21:41:71:c1:98:95:91:f9:aa:97:19:f5:7b:75:24: 3e:11:6d:6d:87:2a:bf:e3:0a:01:44:27:4c:f9:4b: 2b:36:df:24:b0:f2:5d:65:3b:45:9f:96:cf:45:b8: fb:34:68:48:f1:dd:18:d8:28:29:dc:6c:4b:74:4d: 68:21:b1:9a:0e:a4:28:70:f8:b8:cf:bb:91:70:32: 21:cf:c2:1c:67:b7:5b:1e:f9:64:d8:e1:8c:b7:17: a7:09:aa:ef:72:81:49:e2:18:8e:6d:29:47:5b:c7: 6c:95:76:8a:ef:28:f9:b6:be:a9:f1:19:ea:13:23: 4f:81:e0:63:91:b8:f7:9f:66:81:a7:03:5e:e9:92: 4a:eb:6c:22:35:09:de:ac:60:72:ce:77:ff:59:e0: 95:5f:53:c0:d7:1f:25:e9:77:dd:7b:eb:e8:23:b8: 0a:76:8a:57:73:c2:31:e9:bd:e8:d7:a4:e9:b3:a7: 73:a1:d2:52:68:2d:ce:4d:20:bf:3b:f5:cf:75:df: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:29:34:6C:78:23:6D:8C:73:C9:23:B2:8A:00:B6:22:0C:A5:BD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:05:41:7d:18:c0:4e:26:9f:36:34:e7:9e:84:58:99:85:50: ba:07:0f:f8:32:7d:5d:23:dd:86:4d:a5:dc:3a:9f:ea:0e:c4: 76:08:b5:ce:bf:77:49:26:23:76:e0:48:2a:30:42:5a:d7:f1: 70:f0:9f:21:6a:3f:f7:6d:81:e1:65:54:68:29:36:9b:13:eb: fe:0e:0b:3f:19:ec:19:34:55:08:51:1c:e1:ad:e5:fa:8c:ac: 73:f5:59:29:04:dd:08:34:8a:fe:3f:be:a4:24:93:39:ca:d0: f7:41:fa:dd:40:1e:99:3b:3f:6a:9c:4c:ec:26:87:29:90:20: f4:97:90:5e:d9:9c:ae:dc:62:69:2c:52:88:ae:5e:2f:1f:cc: 32:0c:f1:79:08:05:20:51:45:dd:5a:d3:c4:58:3c:6d:de:77: 0d:70:1d:8b:20:58:37:6d:d6:39:40:92:26:ac:f9:35:94:e6: 67:62:c1:13:5f:86:c7:1b:a0:f3:7d:88:d6:63:16:96:87:6a: d8:37:a9:8b:4b:7a:e0:61:42:34:c1:6b:05:26:43:36:28:0c: a7:ab:1a:38:66:79:ee:b9:d5:42:b9:b9:3a:36:f6:27:ed:90: 3f:fb:47:a3:2d:5d:c9:e4:c0:3c:a7:2e:e3:bb:66:0d:80:75: ce:16:df:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/jTGhkkkdbzCbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNTExMjQ1N1oXDTI1MDUwNjEwMjQ1N1owLzEtMCsGA1UEAxMk MTg3N2Q4YjItODQ4OC00NDI0LThjN2EtMWE1ZGJhMWIzMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrBM1vqNOySUANAVZm1YZ6pfwOfUzS7utpoA uJegUKffk4bIo8NQdPQUTS3C97gXY4WsUhBmE6TSiskhQXHBmJWR+aqXGfV7dSQ+ EW1thyq/4woBRCdM+UsrNt8ksPJdZTtFn5bPRbj7NGhI8d0Y2Cgp3GxLdE1oIbGa DqQocPi4z7uRcDIhz8IcZ7dbHvlk2OGMtxenCarvcoFJ4hiObSlHW8dslXaK7yj5 tr6p8RnqEyNPgeBjkbj3n2aBpwNe6ZJK62wiNQnerGByznf/WeCVX1PA1x8l6Xfd e+voI7gKdopXc8Ix6b3o16Tps6dzodJSaC3OTSC/O/XPdd9aiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL8pNGx4I22Mc8kjsooAtiIMpb15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzYwMjU4MmEtYTg5NC0z MmEwLThmOWItNWNjMDIwZDU2MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJgVBfRjATiafNjTnnoRYmYVQugcP+DJ9XSPdhk2l3Dqf6g7Edgi1 zr93SSYjduBIKjBCWtfxcPCfIWo/922B4WVUaCk2mxPr/g4LPxnsGTRVCFEc4a3l +oysc/VZKQTdCDSK/j++pCSTOcrQ90H63UAemTs/apxM7CaHKZAg9JeQXtmcrtxi aSxSiK5eLx/MMgzxeQgFIFFF3VrTxFg8bd53DXAdiyBYN23WOUCSJqz5NZTmZ2LB E1+Gxxug832I1mMWlodq2Depi0t64GFCNMFrBSZDNigMp6saOGZ57rnVQrm5Ojb2 J+2QP/tHoy1dyeTAPKcu47tmDYB1zhbfsQ== -----END CERTIFICATE-----Generated at Wed Apr 9 00:19:47 2025 by rpki-client