$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c4731a2-e193-3e9c-82ff-f3815577942e.roa File: 3c4731a2-e193-3e9c-82ff-f3815577942e.roa (raw, json) Hash identifier: f3im2PklXJf88mazqxSvHBTZaegxdMsFNSIxQzekDlw= Subject key identifier: 08:15:50:A6:82:70:AC:59:91:AF:CA:90:AC:FF:AB:40:4D:D6:5F:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C266022859E9C6838B830AC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c4731a2-e193-3e9c-82ff-f3815577942e.roa Signing time: Mon 03 Feb 2025 11:19:14 +0000 ROA not before: Mon 03 Feb 2025 11:19:14 +0000 ROA not after: Sun 04 May 2025 10:19:14 +0000 asID: 30036 IP address blocks: 2604:2e8f:8200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:66:02:28:59:e9:c6:83:8b:83:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:19:14 2025 GMT Not After : May 4 10:19:14 2025 GMT Subject: CN=5ca72f10-efac-4efa-b76b-3d0913a98086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:dd:ab:e5:9f:b1:72:e0:cd:70:ce:d6:bb: c0:06:21:8d:94:64:6d:78:50:5f:9f:13:a8:8f:70: 9c:c2:9c:8a:a7:99:80:a8:b2:09:2c:1e:04:93:36: 6a:ff:3b:2a:c9:4a:3e:8c:34:cf:84:a3:1c:ab:e1: d4:9d:25:61:78:24:9b:23:69:63:0f:c5:a5:c1:90: f0:9a:93:66:1e:34:66:7d:7b:8e:86:bb:d5:b9:be: 28:0c:0a:2e:eb:d6:57:52:00:b0:5d:77:38:4b:ec: 67:7b:d0:09:92:fe:48:1d:b6:78:8e:dd:14:03:38: 60:0b:17:f4:27:d4:1f:49:3c:25:dc:72:2d:6e:66: 54:43:dc:de:1d:58:cc:10:d3:e6:f8:20:9b:a1:d3: e2:c6:bb:bc:84:7f:48:fe:51:4c:0d:bd:4d:21:29: 5d:cc:5e:72:11:96:9b:c9:ca:37:e8:be:fe:62:d1: 59:0a:0c:30:7e:be:46:f3:38:5a:e4:04:80:53:37: c3:6d:1f:97:0e:07:6c:61:de:f6:02:44:96:9d:93: 77:6e:2c:21:12:c6:be:a4:30:e8:64:36:5a:24:79: 46:d4:1c:4f:2f:3e:1d:9f:6d:1f:61:cc:ac:6d:82: 0e:a1:36:f2:28:ee:fa:38:c1:f7:da:f7:eb:a7:fd: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:50:A6:82:70:AC:59:91:AF:CA:90:AC:FF:AB:40:4D:D6:5F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c4731a2-e193-3e9c-82ff-f3815577942e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:8200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:97:75:3e:df:ce:c3:a6:48:92:f9:8f:03:07:46:ae:b6:5e: f4:5b:28:dd:e6:9b:b6:b6:55:7a:62:9a:19:69:15:80:b2:6a: 64:95:86:cc:28:40:52:d6:5c:50:1c:c3:83:7d:11:b8:c3:7b: 36:63:0a:9b:8b:fa:1e:f4:6d:c9:9f:99:97:e0:a4:3c:fa:33: 85:b7:2a:da:e6:54:ea:54:16:65:41:a6:23:99:2a:f4:e0:ae: ba:82:81:bf:02:54:2e:21:b3:57:5c:21:e9:8b:f8:1c:70:33: bf:6f:39:7f:be:ae:ef:bc:0d:9e:d7:f6:e9:49:f9:0e:12:4b: 5b:c3:50:d4:58:36:2e:55:a9:74:1b:86:6e:2b:c0:64:31:b5: cc:89:52:1d:e8:b2:43:10:0c:ee:a4:43:3a:59:4e:cc:1b:30: 38:75:2e:f3:50:50:a5:a6:02:33:d6:c5:98:64:e9:5f:b9:57: 27:a0:c7:f0:c6:e4:7e:38:ff:37:f1:f2:c0:bc:3f:e6:72:e6: 20:53:80:68:e9:91:87:eb:05:47:ac:74:d5:fe:1a:0a:0b:95: d6:81:d6:e8:bf:d1:5b:29:29:c5:67:cf:56:24:fa:c3:a2:31: 79:3f:91:98:41:bd:59:ab:89:f2:62:42:6c:79:be:5f:79:55: d9:cf:cd:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCZgIoWenGg4uDCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTkxNFoXDTI1MDUwNDEwMTkxNFowLzEtMCsGA1UEAxMk NWNhNzJmMTAtZWZhYy00ZWZhLWI3NmItM2QwOTEzYTk4MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+/dq+WfsXLgzXDO1rvABiGNlGRteFBfnxOo j3CcwpyKp5mAqLIJLB4EkzZq/zsqyUo+jDTPhKMcq+HUnSVheCSbI2ljD8WlwZDw mpNmHjRmfXuOhrvVub4oDAou69ZXUgCwXXc4S+xne9AJkv5IHbZ4jt0UAzhgCxf0 J9QfSTwl3HItbmZUQ9zeHVjMENPm+CCbodPixru8hH9I/lFMDb1NISldzF5yEZab yco36L7+YtFZCgwwfr5G8zha5ASAUzfDbR+XDgdsYd72AkSWnZN3biwhEsa+pDDo ZDZaJHlG1BxPLz4dn20fYcysbYIOoTbyKO76OMH32vfrp/1RKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAgVUKaCcKxZka/KkKz/q0BN1l+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2M0NzMxYTItZTE5My0z ZTljLTgyZmYtZjM4MTU1Nzc5NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4IA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKXdT7fzsOmSJL5jwMHRq62XvRbKN3mm7a2VXpimhlpFYCyamSV hswoQFLWXFAcw4N9EbjDezZjCpuL+h70bcmfmZfgpDz6M4W3KtrmVOpUFmVBpiOZ KvTgrrqCgb8CVC4hs1dcIemL+BxwM79vOX++ru+8DZ7X9ulJ+Q4SS1vDUNRYNi5V qXQbhm4rwGQxtcyJUh3oskMQDO6kQzpZTswbMDh1LvNQUKWmAjPWxZhk6V+5Vyeg x/DG5H44/zfx8sC8P+Zy5iBTgGjpkYfrBUesdNX+GgoLldaB1ui/0VspKcVnz1Yk +sOiMXk/kZhBvVmrifJiQmx5vl95VdnPzZs= -----END CERTIFICATE-----Generated at Wed Apr 9 00:09:00 2025 by rpki-client