$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c69d2ed-3189-35b7-be36-d89fd9a48aaa.roa File: 3c69d2ed-3189-35b7-be36-d89fd9a48aaa.roa (raw, json) Hash identifier: AjN2j50OYa4QMQ3LFQ5XwAKOmmP8x263r4gA1a+zIdo= Subject key identifier: A5:DF:18:F1:89:6B:19:C8:AA:8D:85:46:3D:8B:08:08:4B:BA:8A:15 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C264C0D2B3956D00CA31C300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c69d2ed-3189-35b7-be36-d89fd9a48aaa.roa Signing time: Mon 03 Feb 2025 11:16:43 +0000 ROA not before: Mon 03 Feb 2025 11:16:43 +0000 ROA not after: Sun 04 May 2025 10:16:43 +0000 asID: 30036 IP address blocks: 2604:2e89:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:c0:d2:b3:95:6d:00:ca:31:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:16:43 2025 GMT Not After : May 4 10:16:43 2025 GMT Subject: CN=6a5f48b6-7983-4bb1-adb9-c937c0eb3a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:cd:8d:b6:66:fc:22:08:c1:e7:7c:5e:a9: 85:05:73:e6:bd:9f:21:2c:4e:c3:da:09:0b:9d:2f: a9:19:2c:2e:8a:12:a3:1e:5f:90:d6:6b:78:11:52: 06:cf:29:3b:cf:2b:ea:a8:3d:8a:80:9e:68:fd:b8: 18:93:20:07:ab:ef:82:c4:60:0a:68:3c:28:2d:2a: 9a:f9:cd:77:61:26:08:13:d4:61:4d:09:72:2f:d6: 6e:dd:73:f9:f7:37:b4:18:fc:e5:86:01:49:f6:31: cb:a3:df:51:eb:6d:d2:21:5a:49:c3:df:02:d9:39: 55:2b:18:37:c6:57:02:73:a8:3f:a8:23:5b:8a:85: 7b:3f:bd:32:bb:7e:a4:3a:a8:b3:76:6b:a8:21:af: 64:95:65:d5:06:f2:91:b4:82:7a:44:07:d2:34:7a: 1d:f7:52:71:80:c6:46:6a:0d:af:13:7e:5b:28:da: c3:9a:b9:fa:f6:42:2a:c3:92:c4:60:4d:d6:85:53: f0:a5:66:e9:d5:f7:da:ce:55:e9:c5:71:c7:f1:23: 53:17:94:01:d7:0c:e2:24:ef:92:16:f0:31:a3:74: b4:52:78:c1:32:05:4b:ab:b4:cc:38:92:bd:2d:64: 57:f5:5a:0b:3a:95:f8:1a:9d:89:76:db:73:1f:2e: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:18:F1:89:6B:19:C8:AA:8D:85:46:3D:8B:08:08:4B:BA:8A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c69d2ed-3189-35b7-be36-d89fd9a48aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:37:48:26:54:87:97:27:b7:84:0f:88:c5:2d:f3:2b:3a:29: 51:a8:bf:34:fb:e1:57:6f:0d:5c:80:49:66:08:f2:10:2f:91: e4:c9:0b:bc:e9:6b:2a:2b:7c:76:f7:a4:eb:c3:8e:0a:cc:68: 11:8a:0e:ca:8d:d4:8e:0f:58:e0:11:c6:d8:ec:9b:88:9f:df: d8:b2:33:7c:b3:44:91:01:3c:04:39:be:b0:5e:e6:1b:cc:c2: 84:c7:5f:67:88:56:7f:b4:9e:42:7d:40:c2:df:fe:92:18:25: 2d:a8:c7:9a:12:bb:20:6d:53:f9:f7:f5:a4:3e:01:99:39:9c: 4b:98:bc:7b:bd:9a:77:8d:8a:00:35:04:fb:43:dc:a2:78:9b: f3:af:42:a5:38:bb:ec:23:05:23:d5:17:cf:4b:13:33:17:7d: 33:f1:20:d6:99:89:6f:a2:e3:1f:6e:bf:21:52:33:59:a5:27: 66:7b:18:44:a1:35:82:c5:8a:7d:be:e5:bf:ad:06:b3:6a:d4: db:82:19:95:44:08:0a:86:8c:3e:72:32:fd:91:21:2e:53:5c: 67:ca:cd:a4:e7:9e:a5:13:b8:c6:97:29:75:47:59:d4:e8:00: d7:b3:08:49:82:65:f1:8e:c3:6c:23:f0:0f:2c:a8:14:cd:45: 6b:65:3e:fc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZMDSs5VtAMoxwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTY0M1oXDTI1MDUwNDEwMTY0M1owLzEtMCsGA1UEAxMk NmE1ZjQ4YjYtNzk4My00YmIxLWFkYjktYzkzN2MwZWIzYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdjNjbZm/CIIwed8XqmFBXPmvZ8hLE7D2gkL nS+pGSwuihKjHl+Q1mt4EVIGzyk7zyvqqD2KgJ5o/bgYkyAHq++CxGAKaDwoLSqa +c13YSYIE9RhTQlyL9Zu3XP59ze0GPzlhgFJ9jHLo99R623SIVpJw98C2TlVKxg3 xlcCc6g/qCNbioV7P70yu36kOqizdmuoIa9klWXVBvKRtIJ6RAfSNHod91JxgMZG ag2vE35bKNrDmrn69kIqw5LEYE3WhVPwpWbp1ffazlXpxXHH8SNTF5QB1wziJO+S FvAxo3S0UnjBMgVLq7TMOJK9LWRX9VoLOpX4Gp2JdttzHy7GxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKXfGPGJaxnIqo2FRj2LCAhLuooVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2M2OWQyZWQtMzE4OS0z NWI3LWJlMzYtZDg5ZmQ5YTQ4YWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVjdIJlSHlye3hA+IxS3zKzopUai/NPvhV28NXIBJZgjyEC+R5MkL vOlrKit8dvek68OOCsxoEYoOyo3Ujg9Y4BHG2OybiJ/f2LIzfLNEkQE8BDm+sF7m G8zChMdfZ4hWf7SeQn1Awt/+khglLajHmhK7IG1T+ff1pD4BmTmcS5i8e72ad42K ADUE+0Pconib869CpTi77CMFI9UXz0sTMxd9M/Eg1pmJb6LjH26/IVIzWaUnZnsY RKE1gsWKfb7lv60Gs2rU24IZlUQICoaMPnIy/ZEhLlNcZ8rNpOeepRO4xpcpdUdZ 1OgA17MISYJl8Y7DbCPwDyyoFM1Fa2U+/A== -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:40 2025 by rpki-client