$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa File: 40858107-a5e4-3faa-809e-d446ece78c34.roa (raw, json) Hash identifier: 0phihCSHIi+DCAxrbhS0NUTeay8a0x2pBGTFFZ1+6Wo= Subject key identifier: 96:E5:D5:82:64:10:6D:09:5D:03:EB:21:DB:45:2F:C4:B6:D7:5E:41 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C5806D1A0D1BE173D7D8DE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa Signing time: Tue 04 Feb 2025 13:59:54 +0000 ROA not before: Tue 04 Feb 2025 13:59:54 +0000 ROA not after: Mon 05 May 2025 12:59:54 +0000 asID: 30036 IP address blocks: 2604:2e8e:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:6d:1a:0d:1b:e1:73:d7:d8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 13:59:54 2025 GMT Not After : May 5 12:59:54 2025 GMT Subject: CN=59eaef92-fff1-4cad-ba5c-2f7253b7d4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:23:30:16:d1:61:85:dd:cc:98:21:1d:d2: e5:04:b5:56:45:77:ac:a0:c9:f0:12:bb:41:18:4d: e5:a9:6f:e9:a1:2a:2a:84:b6:5a:4a:6a:f6:f2:18: bd:2b:a7:45:6e:00:46:4b:d0:af:f4:de:d8:39:ad: c7:c7:e1:4c:23:b9:40:99:79:d2:69:9c:f9:ce:bd: 06:7b:ff:29:3d:31:26:09:ca:e4:d5:8b:2e:08:97: 01:5c:49:21:5c:fa:7f:0a:58:7e:60:f7:35:bc:e7: 37:c3:6b:e4:50:c0:70:56:78:8a:b4:0f:e0:c9:66: 83:e5:ea:e0:66:8a:7d:15:af:b5:b8:92:59:bc:71: 52:da:63:f0:64:fb:2e:16:1a:47:6e:6f:be:e3:36: 52:a6:02:c2:48:e4:63:9e:86:d9:a1:1b:f0:9f:93: f3:09:76:4e:e6:20:64:f5:87:9e:68:a9:bb:32:99: ca:48:df:7b:f0:2a:43:1e:10:be:71:ea:3f:5e:cd: 4f:85:3d:f5:01:f1:ab:8a:6a:45:f1:fa:1a:18:d4: 5b:50:fe:0e:cc:96:e7:7b:e9:1a:23:b5:b9:0d:7c: 88:42:d1:29:4b:3c:18:25:14:c0:bb:39:43:a9:dd: 82:c3:96:47:1e:57:53:ec:ec:77:9b:32:5d:3b:2b: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:D5:82:64:10:6D:09:5D:03:EB:21:DB:45:2F:C4:B6:D7:5E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a8:e4:61:84:9d:f3:48:ef:e6:6c:27:8a:a5:d9:e8:df:52: 26:29:51:bd:3d:08:d2:50:ac:94:d0:92:7d:6d:12:5c:9a:8d: 7a:f2:19:73:ce:f8:8c:b6:65:94:fa:d7:6f:59:b4:30:1c:25: 49:c8:b3:b9:55:36:d2:85:6e:42:e3:e5:59:2c:a2:f5:ca:ac: 0e:42:0c:55:65:b6:9e:6e:12:8f:05:4b:ad:aa:4f:f9:8c:cd: c2:38:24:a8:5e:1d:35:b4:49:43:b5:da:cb:f2:6d:e0:9c:e7: c5:3d:db:13:11:5a:7b:e1:09:b0:19:ce:04:7a:85:9a:be:f4: 07:ab:f1:08:34:2f:09:92:24:80:25:4d:72:84:32:eb:9a:06: f2:33:dc:c7:1b:33:93:8e:fb:9a:90:b7:69:62:bc:02:25:7e: af:95:ab:95:be:d0:d0:4b:20:7d:19:d4:68:2b:5c:fd:c5:03: af:2e:25:49:9c:03:1a:b4:fe:5e:26:1d:76:b0:70:af:89:f0: fb:a1:78:ce:7f:de:2e:1b:03:23:be:49:c5:bb:e9:5d:50:eb: 82:f3:4f:ad:43:ec:c5:5b:f4:a7:37:e2:46:aa:23:b1:e2:24: 28:64:66:da:48:ab:43:a9:a6:98:7d:5d:72:f2:51:1c:22:17: a4:a0:a6:e9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFgG0aDRvhc9fY3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEzNTk1NFoXDTI1MDUwNTEyNTk1NFowLzEtMCsGA1UEAxMk NTllYWVmOTItZmZmMS00Y2FkLWJhNWMtMmY3MjUzYjdkNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqowjMBbRYYXdzJghHdLlBLVWRXesoMnwErtB GE3lqW/poSoqhLZaSmr28hi9K6dFbgBGS9Cv9N7YOa3Hx+FMI7lAmXnSaZz5zr0G e/8pPTEmCcrk1YsuCJcBXEkhXPp/Clh+YPc1vOc3w2vkUMBwVniKtA/gyWaD5erg Zop9Fa+1uJJZvHFS2mPwZPsuFhpHbm++4zZSpgLCSORjnobZoRvwn5PzCXZO5iBk 9YeeaKm7MpnKSN978CpDHhC+ceo/Xs1PhT31AfGrimpF8foaGNRbUP4OzJbne+ka I7W5DXyIQtEpSzwYJRTAuzlDqd2Cw5ZHHldT7Ox3mzJdOys6uwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJbl1YJkEG0JXQPrIdtFL8S2115BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDA4NTgxMDctYTVlNC0z ZmFhLTgwOWUtZDQ0NmVjZTc4YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujlAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV6jkYYSd80jv5mwniqXZ6N9SJilRvT0I0lCslNCSfW0SXJqNevIZ c874jLZllPrXb1m0MBwlScizuVU20oVuQuPlWSyi9cqsDkIMVWW2nm4SjwVLrapP +YzNwjgkqF4dNbRJQ7Xay/Jt4JznxT3bExFae+EJsBnOBHqFmr70B6vxCDQvCZIk gCVNcoQy65oG8jPcxxszk477mpC3aWK8AiV+r5Wrlb7Q0EsgfRnUaCtc/cUDry4l SZwDGrT+XiYddrBwr4nw+6F4zn/eLhsDI75JxbvpXVDrgvNPrUPsxVv0pzfiRqoj seIkKGRm2kirQ6mmmH1dcvJRHCIXpKCm6Q== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:34 2025 by rpki-client