$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36e27033-e3ef-3392-a9d3-04dbbb3111be.roa File: 36e27033-e3ef-3392-a9d3-04dbbb3111be.roa (raw, json) Hash identifier: MKWv6KoDuJD7bwRaA9UKoqNCE1Kf/+uWN4ksKAUXa1s= Subject key identifier: 7F:B3:54:06:DE:54:48:D6:C4:04:21:C8:3A:DE:E7:EF:31:D0:FC:92 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848B737922B21217FE8E7A75500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36e27033-e3ef-3392-a9d3-04dbbb3111be.roa Signing time: Thu 30 Jan 2025 11:11:47 +0000 ROA not before: Thu 30 Jan 2025 11:11:47 +0000 ROA not after: Wed 30 Apr 2025 10:11:47 +0000 asID: 30036 IP address blocks: 2604:2e8b:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:92:2b:21:21:7f:e8:e7:a7:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 30 11:11:47 2025 GMT Not After : Apr 30 10:11:47 2025 GMT Subject: CN=1c80f2c8-e93c-4736-a2a1-51f81b3bcef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:c6:7b:ee:81:ef:cf:2d:5f:a4:56:d8:c4: 2c:85:43:79:59:fd:33:69:5f:ed:54:7c:25:59:ae: 39:ff:26:84:03:b5:68:28:2e:42:2f:48:a8:6a:45: 8b:ae:6c:00:bc:6c:2c:c8:0b:be:91:f3:90:24:b4: 02:45:12:c8:18:db:20:fe:a6:79:b0:fe:cb:ef:6c: b7:17:fe:05:4c:cd:c2:d8:25:ec:7f:e6:71:ff:fe: 89:3b:32:92:9a:4c:a4:a3:69:85:17:12:54:31:3e: 93:42:2f:1e:9c:8b:2b:e2:0d:03:16:a8:8f:33:30: 53:f1:a2:03:6f:35:0f:74:2f:99:64:2e:1a:57:e1: 99:01:fe:6e:d9:27:ad:66:1f:94:56:91:5b:73:1a: 9c:c3:6a:76:b2:f0:f0:43:bb:83:cd:c2:4c:38:42: 8c:a1:87:d0:ab:55:5b:15:66:75:43:7b:48:bd:cc: b6:98:1b:27:9b:7b:9f:9a:b9:c0:2c:07:fb:a5:3c: d7:67:7e:57:8a:f9:e6:63:db:90:bb:08:17:09:30: a8:31:78:3e:4c:55:3f:09:ab:85:f1:79:54:3f:d6: 56:25:e5:33:9a:b7:e5:5e:49:94:22:96:de:30:92: 39:98:5a:41:a4:e5:ef:a4:3c:c7:49:bc:55:bf:e7: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:54:06:DE:54:48:D6:C4:04:21:C8:3A:DE:E7:EF:31:D0:FC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36e27033-e3ef-3392-a9d3-04dbbb3111be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:21:50:4b:9c:5b:33:a7:12:58:7a:42:8e:ad:fa:b1:f6:1d: 18:a4:19:74:a9:ed:5b:89:a6:25:98:f3:5e:80:22:8d:af:cf: 5c:05:f1:e4:34:80:64:0d:49:d9:9f:47:5d:52:db:94:ac:a2: 51:ed:aa:1b:af:5b:2f:30:c4:f5:93:37:4f:bb:34:a6:92:e4: 2a:11:d5:13:da:5a:27:da:09:25:7c:88:9f:d3:c1:d3:0f:b8: 13:4c:d5:1e:55:08:0a:c6:cb:4e:fc:41:20:32:14:67:80:c4: 65:c0:a7:dc:15:c0:1d:9a:64:9f:a3:0a:f6:64:31:39:6e:46: dc:c4:57:ab:a9:5c:1a:e8:6b:e7:63:2e:ac:63:10:9e:80:e0: 22:cc:22:0a:ed:28:47:e6:9c:05:db:56:a0:d5:36:24:de:c2: f7:f8:b9:3c:84:7a:f0:84:bc:fe:06:24:8e:d4:1e:6d:aa:99: 5e:82:ab:39:97:56:5c:e5:57:87:4c:30:6f:af:94:d0:aa:ec: 5c:6f:3a:52:af:1b:b0:b5:87:bb:02:46:d5:78:2f:48:96:c3: 61:de:4e:a0:3a:4a:e4:ea:ea:e5:43:25:7f:49:ee:9e:60:9e: 5c:7c:12:ab:69:9d:03:92:fa:eb:7f:92:67:e4:f1:7b:5f:42: 79:1d:e5:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N5IrISF/6OenVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDEzMDExMTE0N1oXDTI1MDQzMDEwMTE0N1owLzEtMCsGA1UEAxMk MWM4MGYyYzgtZTkzYy00NzM2LWEyYTEtNTFmODFiM2JjZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiafGe+6B788tX6RW2MQshUN5Wf0zaV/tVHwl Wa45/yaEA7VoKC5CL0ioakWLrmwAvGwsyAu+kfOQJLQCRRLIGNsg/qZ5sP7L72y3 F/4FTM3C2CXsf+Zx//6JOzKSmkyko2mFFxJUMT6TQi8enIsr4g0DFqiPMzBT8aID bzUPdC+ZZC4aV+GZAf5u2SetZh+UVpFbcxqcw2p2svDwQ7uDzcJMOEKMoYfQq1Vb FWZ1Q3tIvcy2mBsnm3ufmrnALAf7pTzXZ35XivnmY9uQuwgXCTCoMXg+TFU/CauF 8XlUP9ZWJeUzmrflXkmUIpbeMJI5mFpBpOXvpDzHSbxVv+elkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH+zVAbeVEjWxAQhyDre5+8x0PySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzZlMjcwMzMtZTNlZi0z MzkyLWE5ZDMtMDRkYmJiMzExMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui4Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADyFQS5xbM6cSWHpCjq36sfYdGKQZdKntW4mmJZjzXoAija/PXAXx 5DSAZA1J2Z9HXVLblKyiUe2qG69bLzDE9ZM3T7s0ppLkKhHVE9paJ9oJJXyIn9PB 0w+4E0zVHlUICsbLTvxBIDIUZ4DEZcCn3BXAHZpkn6MK9mQxOW5G3MRXq6lcGuhr 52MurGMQnoDgIswiCu0oR+acBdtWoNU2JN7C9/i5PIR68IS8/gYkjtQebaqZXoKr OZdWXOVXh0wwb6+U0KrsXG86Uq8bsLWHuwJG1XgvSJbDYd5OoDpK5Orq5UMlf0nu nmCeXHwSq2mdA5L663+SZ+Txe19CeR3lkg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:16:47 2025 by rpki-client