$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa File: 3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa (raw, json) Hash identifier: USnEVLdrO54MnJOeVbiitjkxHmTkPwXWaj3AdZDPnRY= Subject key identifier: A2:36:CA:D8:37:23:5A:03:67:8A:76:89:93:99:B3:C0:EC:FF:C7:B9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849011B2FC8E0A80BB2238F5E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa Signing time: Tue 25 Feb 2025 22:24:25 +0000 ROA not before: Tue 25 Feb 2025 22:24:25 +0000 ROA not after: Mon 26 May 2025 21:24:25 +0000 asID: 30036 IP address blocks: 2604:2e8d:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:1b:2f:c8:e0:a8:0b:b2:23:8f:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 22:24:25 2025 GMT Not After : May 26 21:24:25 2025 GMT Subject: CN=3aeeefa0-6e19-4a3d-9eb5-1c618b09d449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:4f:50:e2:70:14:f9:da:cf:9e:18:b0:e2: 2b:ee:e7:03:38:e7:11:e6:55:a3:17:ee:73:9e:ab: 69:79:2d:08:87:69:50:3e:c8:39:93:3e:25:f9:99: 1c:da:b8:ad:54:0b:2e:6a:1e:11:a6:d6:bd:a2:c4: c4:8d:52:d9:8a:a2:a9:68:cf:0f:20:df:b9:d2:a9: 8f:ed:a5:5e:36:6b:56:a3:a8:57:fa:00:d6:46:3e: d3:81:48:12:3f:73:ff:9a:a3:23:01:29:ac:5f:ae: 3d:59:ee:97:cc:ba:be:bf:bf:f9:d8:53:0c:d4:3c: 80:22:84:27:9b:ea:d4:f0:61:3b:b2:25:e7:28:02: 2e:97:22:1a:1c:bb:08:96:f8:a0:bd:e2:70:ed:07: 72:0e:c6:09:bb:85:e4:f1:31:ee:48:fa:dc:33:36: 92:e7:33:ed:d5:50:19:c1:f4:9a:eb:f5:54:ea:4e: cf:2b:35:1c:a2:c4:d9:e9:92:59:d9:53:c2:81:27: d4:f8:89:aa:d2:51:69:8c:de:32:ef:cf:37:42:45: 30:e2:2b:aa:7a:e2:54:ec:0d:37:95:dd:8f:4a:c6: f0:91:44:48:97:11:54:dd:a9:76:5e:61:f6:9f:cb: 30:da:f8:12:0b:01:5b:bf:a6:4a:1a:8f:7a:10:8d: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:CA:D8:37:23:5A:03:67:8A:76:89:93:99:B3:C0:EC:FF:C7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e6:19:28:c0:89:60:a8:b4:00:5c:01:6b:6b:4d:57:45:ab: 85:29:18:e0:c2:58:e1:63:61:ea:20:1c:20:bd:1e:1a:d5:d8: 0d:75:8a:c5:0b:c5:ab:0f:e8:35:5f:42:33:a8:28:7c:6a:e3: 7a:2f:69:73:97:b1:af:0c:6b:7c:8d:9c:81:ba:0f:1b:db:37: 28:50:15:fe:43:3d:e5:3d:bf:48:0d:da:12:9f:30:db:23:f6: 79:17:fd:76:97:9a:35:af:3e:2b:b7:e3:bb:5b:fd:c4:3b:cf: 55:03:cf:81:32:44:0e:50:32:af:ef:ac:14:e2:91:d5:1a:d4: fd:5d:c6:b5:32:3e:81:0e:5e:10:d4:14:15:74:6c:cb:32:50: 57:ec:8b:fe:b4:19:0d:f8:11:46:6d:4c:d3:b9:5a:f8:5e:82: 2f:41:04:60:1c:32:db:a3:16:3d:52:42:68:ce:17:98:41:34: 9b:b2:2c:5a:1f:a4:75:11:3f:e6:de:0c:87:31:77:60:27:bb: 0b:7d:fd:49:1a:d4:46:de:5a:30:fe:14:2a:a3:f4:18:39:eb: e2:7a:3c:02:c1:fd:b3:3d:3e:78:1e:e6:77:74:f9:70:ed:1d: 51:05:cd:cd:cc:79:4c:d0:54:61:3c:13:71:8a:d9:f7:49:8f: 23:27:64:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkBGy/I4KgLsiOPXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTIyMjQyNVoXDTI1MDUyNjIxMjQyNVowLzEtMCsGA1UEAxMk M2FlZWVmYTAtNmUxOS00YTNkLTllYjUtMWM2MThiMDlkNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxxPUOJwFPnaz54YsOIr7ucDOOcR5lWjF+5z nqtpeS0Ih2lQPsg5kz4l+Zkc2ritVAsuah4Rpta9osTEjVLZiqKpaM8PIN+50qmP 7aVeNmtWo6hX+gDWRj7TgUgSP3P/mqMjASmsX649We6XzLq+v7/52FMM1DyAIoQn m+rU8GE7siXnKAIulyIaHLsIlvigveJw7QdyDsYJu4Xk8THuSPrcMzaS5zPt1VAZ wfSa6/VU6k7PKzUcosTZ6ZJZ2VPCgSfU+Imq0lFpjN4y7883QkUw4iuqeuJU7A03 ld2PSsbwkURIlxFU3al2XmH2n8sw2vgSCwFbv6ZKGo96EI1rgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKI2ytg3I1oDZ4p2iZOZs8Ds/8e5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2EwY2RhNTktOTZjNS0z MDc0LWFmZGYtMTU0M2ExMWEwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujdgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP+YZKMCJYKi0AFwBa2tNV0WrhSkY4MJY4WNh6iAcIL0eGtXYDXWK xQvFqw/oNV9CM6gofGrjei9pc5exrwxrfI2cgboPG9s3KFAV/kM95T2/SA3aEp8w 2yP2eRf9dpeaNa8+K7fju1v9xDvPVQPPgTJEDlAyr++sFOKR1RrU/V3GtTI+gQ5e ENQUFXRsyzJQV+yL/rQZDfgRRm1M07la+F6CL0EEYBwy26MWPVJCaM4XmEE0m7Is Wh+kdRE/5t4MhzF3YCe7C339SRrURt5aMP4UKqP0GDnr4no8AsH9sz0+eB7md3T5 cO0dUQXNzcx5TNBUYTwTcYrZ90mPIydkFA== -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:49 2025 by rpki-client