$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa File: 4691484a-b551-3207-a7de-902605b6e48a.roa (raw, json) Hash identifier: AeSoZ1uUPYkMfI5Y7wrqZ6bYzdZvHjX1jMzR6+uNMTc= Subject key identifier: 21:A8:A3:8B:5E:1F:D7:E7:FE:D9:E6:4C:B0:5E:C0:93:C4:F4:1D:36 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849134FC4C2C98FF21D96F4D770 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa Signing time: Tue 04 Mar 2025 10:54:54 +0000 ROA not before: Tue 04 Mar 2025 10:54:54 +0000 ROA not after: Mon 02 Jun 2025 09:54:54 +0000 asID: 30036 IP address blocks: 2604:2e8b:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:4f:c4:c2:c9:8f:f2:1d:96:f4:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 4 10:54:54 2025 GMT Not After : Jun 2 09:54:54 2025 GMT Subject: CN=05a15b3e-a604-409d-81f7-11e0e7774c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:31:e5:a6:f7:f5:ad:ef:00:58:41:9f:bf: 3c:89:8c:db:22:0a:00:3d:48:77:96:88:7d:c0:e1: 1d:8e:3e:c0:f0:84:2f:fa:f8:c4:32:73:05:6c:7c: 35:12:47:e7:39:b1:6f:af:17:30:6b:c8:87:a6:89: 45:b4:5e:77:04:25:fe:9c:b7:60:71:7c:c3:a0:c7: 15:86:72:72:91:62:40:53:7d:bc:18:4d:64:67:5e: e5:c5:4e:da:64:b9:94:6b:40:30:04:a1:79:0e:56: 94:cf:a7:ef:3e:35:dd:ac:a8:35:2f:04:16:f7:1c: f2:26:35:b1:5e:70:36:e1:6d:c7:72:e3:66:ef:c0: 88:16:c6:1d:68:dc:c3:70:11:5d:2e:ec:95:ff:f4: ee:91:86:58:a6:98:d6:e3:de:8e:01:99:3c:70:b0: a2:12:9f:bd:75:c5:cd:85:f5:a9:b2:ed:2c:5c:15: 86:13:e0:2a:2e:25:1f:7e:0e:ce:29:21:57:b8:75: 63:db:cb:b1:ce:51:58:f1:e5:e9:9c:d9:b7:fc:9e: a2:86:f0:e8:ad:e8:82:f3:38:4a:68:64:28:26:66: 63:cd:07:00:75:8c:6d:94:2e:4c:08:4f:10:78:4e: 68:fb:30:d6:4f:e2:b7:49:99:3c:43:ba:6a:bd:bf: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:A3:8B:5E:1F:D7:E7:FE:D9:E6:4C:B0:5E:C0:93:C4:F4:1D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:eb:ba:de:f8:e6:d6:97:df:23:6d:2e:2c:a1:b0:db:37:23: 3a:7b:4b:ad:bc:a0:8e:ef:ba:84:41:6f:0c:4a:35:59:87:04: 6d:33:27:13:9d:0b:da:fc:0d:27:47:31:77:98:71:21:02:19: cb:5e:44:f7:40:ee:e1:38:ed:a8:b8:59:87:99:c3:e5:26:0a: 2e:5b:9e:91:a3:14:8d:6b:69:c2:8c:fb:45:24:93:20:93:9f: 49:57:2a:b2:93:66:66:07:c2:59:b1:ec:2c:5d:ac:76:ea:8f: 0c:b0:05:7f:e8:8f:54:ba:ae:e0:4c:1e:1d:d8:4a:d8:d1:65: d0:63:32:d8:58:b5:45:a9:a8:f0:08:ae:19:62:03:b7:1a:e8: b0:76:96:d9:4c:38:37:e0:c2:ae:0d:a1:91:9e:71:af:1e:b7: 5b:75:73:11:9a:85:e3:71:d6:24:fe:17:5c:09:3f:62:30:25: 71:d3:b8:84:b1:84:86:e4:0b:46:30:46:15:29:9e:8a:b9:1c: f2:43:e7:bb:c3:ff:5a:f3:1b:75:de:d6:26:be:4a:7d:91:92: 7e:90:f4:cb:b9:70:37:0c:39:f5:7e:38:bd:3f:d5:7d:24:d4: 70:12:c2:a6:3f:2f:9f:4d:13:b6:63:bf:8c:09:e7:fb:fb:64: e7:9a:e9:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT8TCyY/yHZb013AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNDEwNTQ1NFoXDTI1MDYwMjA5NTQ1NFowLzEtMCsGA1UEAxMk MDVhMTViM2UtYTYwNC00MDlkLTgxZjctMTFlMGU3Nzc0YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxUx5ab39a3vAFhBn788iYzbIgoAPUh3loh9 wOEdjj7A8IQv+vjEMnMFbHw1EkfnObFvrxcwa8iHpolFtF53BCX+nLdgcXzDoMcV hnJykWJAU328GE1kZ17lxU7aZLmUa0AwBKF5DlaUz6fvPjXdrKg1LwQW9xzyJjWx XnA24W3HcuNm78CIFsYdaNzDcBFdLuyV//TukYZYppjW496OAZk8cLCiEp+9dcXN hfWpsu0sXBWGE+AqLiUffg7OKSFXuHVj28uxzlFY8eXpnNm3/J6ihvDoreiC8zhK aGQoJmZjzQcAdYxtlC5MCE8QeE5o+zDWT+K3SZk8Q7pqvb8pxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCGoo4teH9fn/tnmTLBewJPE9B02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDY5MTQ4NGEtYjU1MS0z MjA3LWE3ZGUtOTAyNjA1YjZlNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui0ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFOu63vjm1pffI20uLKGw2zcjOntLrbygju+6hEFvDEo1WYcEbTMn E50L2vwNJ0cxd5hxIQIZy15E90Du4TjtqLhZh5nD5SYKLluekaMUjWtpwoz7RSST IJOfSVcqspNmZgfCWbHsLF2sduqPDLAFf+iPVLqu4EweHdhK2NFl0GMy2Fi1Ramo 8AiuGWIDtxrosHaW2Uw4N+DCrg2hkZ5xrx63W3VzEZqF43HWJP4XXAk/YjAlcdO4 hLGEhuQLRjBGFSmeirkc8kPnu8P/WvMbdd7WJr5KfZGSfpD0y7lwNww59X44vT/V fSTUcBLCpj8vn00TtmO/jAnn+/tk55rpmg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:19:10 2025 by rpki-client