$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa File: 4769b6e9-42cc-3038-805b-31f7c57b0263.roa (raw, json) Hash identifier: fjJ/gDvNmOqS0aSd/jRiIxvEKvuNC6oo+5yWozjsUuI= Subject key identifier: 22:96:DF:CF:82:A0:72:E7:E9:2C:AF:48:7F:FA:76:82:AD:DE:B9:60 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C7FE40D0F2059E6F876EBC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa Signing time: Wed 05 Feb 2025 11:25:02 +0000 ROA not before: Wed 05 Feb 2025 11:25:02 +0000 ROA not after: Tue 06 May 2025 10:25:02 +0000 asID: 30036 IP address blocks: 2604:2e8d:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fe:40:d0:f2:05:9e:6f:87:6e:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 5 11:25:02 2025 GMT Not After : May 6 10:25:02 2025 GMT Subject: CN=1ba28193-6422-472a-8266-eca1bdbdacdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:d8:88:c1:0b:6e:a4:78:9d:cd:8e:47:cc: e7:ff:45:7a:bd:19:a7:05:0b:5d:68:da:0c:85:36: fe:a3:80:f3:41:e7:27:a0:95:0a:e6:56:40:e4:1b: 19:5a:42:01:29:02:59:8b:f4:55:ae:f3:17:0e:18: 05:3c:00:79:47:46:96:c4:0a:f3:a5:7c:8a:c9:bf: 0e:69:d4:bb:e9:72:5f:9b:4a:52:e9:75:ba:17:7a: 76:bc:8b:4d:4e:db:ab:1d:e4:d6:18:c7:53:1d:80: f3:18:80:c9:75:8e:77:59:45:63:0b:c7:f0:8e:fb: 2f:26:5a:7d:00:b3:21:69:49:88:2f:6a:c0:57:58: 37:04:84:82:10:19:51:ae:08:24:e6:f6:66:55:67: b4:a0:81:30:51:58:1b:f3:86:77:8d:80:49:fd:f5: 7c:fd:e2:19:58:9c:25:8d:54:ce:5c:47:89:1b:14: 45:74:61:61:51:35:21:b0:3e:63:fb:13:71:43:94: 07:19:74:e3:9d:c3:43:63:22:ed:0d:2c:1f:49:3d: 73:60:20:0d:b6:3f:60:e8:56:9d:bb:09:65:a4:3f: f0:5e:4f:b9:51:51:ac:53:a9:cd:30:ea:e2:16:94: 7a:60:6a:bd:fb:cb:f0:6e:e0:1b:d0:b9:33:54:80: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:DF:CF:82:A0:72:E7:E9:2C:AF:48:7F:FA:76:82:AD:DE:B9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4769b6e9-42cc-3038-805b-31f7c57b0263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:e3:37:06:10:b4:d1:16:66:bf:1a:71:d5:cd:d4:40:5e: 80:4b:73:d9:f1:63:08:b9:e5:5c:29:97:02:91:79:e2:2c:c7: 70:a9:ae:72:d9:79:5c:83:77:7d:8d:ef:c5:ab:00:f5:d4:ce: 07:77:d3:b4:63:66:9c:5a:39:fb:d7:fd:0b:53:00:e3:c7:1b: a2:8d:da:75:ce:50:a5:23:ce:b2:00:b9:f2:8e:55:73:16:62: 4c:4f:f7:da:c5:bb:93:77:94:6b:77:fd:19:37:81:cd:c8:76: 73:37:5e:5c:b7:30:b4:3b:f1:f0:2f:6a:fe:ca:29:66:e7:7e: 90:99:42:26:c8:db:2c:81:59:71:4a:3d:0e:b5:45:f5:f3:f8: a9:f5:68:80:11:84:27:39:71:d4:43:25:08:6b:df:65:64:cd: 58:42:d3:c9:56:bc:45:aa:d2:a1:b7:59:19:7f:50:95:15:ce: bf:0d:ae:2e:38:61:07:32:73:64:17:10:8b:c8:73:d6:52:db: ba:62:07:23:eb:6d:a8:0a:34:62:b2:dc:42:a6:7e:78:10:c0: b1:00:a7:6c:42:56:a8:84:44:bf:cb:3b:3c:9f:84:98:7b:f5: 99:88:a0:99:f0:92:88:4e:d9:5a:72:94:23:d0:13:f3:41:ed: e4:65:bc:cd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/kDQ8gWeb4duvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNTExMjUwMloXDTI1MDUwNjEwMjUwMlowLzEtMCsGA1UEAxMk MWJhMjgxOTMtNjQyMi00NzJhLTgyNjYtZWNhMWJkYmRhY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbXYiMELbqR4nc2OR8zn/0V6vRmnBQtdaNoM hTb+o4DzQecnoJUK5lZA5BsZWkIBKQJZi/RVrvMXDhgFPAB5R0aWxArzpXyKyb8O adS76XJfm0pS6XW6F3p2vItNTturHeTWGMdTHYDzGIDJdY53WUVjC8fwjvsvJlp9 ALMhaUmIL2rAV1g3BISCEBlRrggk5vZmVWe0oIEwUVgb84Z3jYBJ/fV8/eIZWJwl jVTOXEeJGxRFdGFhUTUhsD5j+xNxQ5QHGXTjncNDYyLtDSwfST1zYCANtj9g6Fad uwllpD/wXk+5UVGsU6nNMOriFpR6YGq9+8vwbuAb0LkzVIDZGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCKW38+CoHLn6SyvSH/6doKt3rlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDc2OWI2ZTktNDJjYy0z MDM4LTgwNWItMzFmN2M1N2IwMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPmPjNwYQtNEWZr8acdXN1EBegEtz2fFjCLnlXCmXApF54izHcKmu ctl5XIN3fY3vxasA9dTOB3fTtGNmnFo5+9f9C1MA48cboo3adc5QpSPOsgC58o5V cxZiTE/32sW7k3eUa3f9GTeBzch2czdeXLcwtDvx8C9q/sopZud+kJlCJsjbLIFZ cUo9DrVF9fP4qfVogBGEJzlx1EMlCGvfZWTNWELTyVa8RarSobdZGX9QlRXOvw2u LjhhBzJzZBcQi8hz1lLbumIHI+ttqAo0YrLcQqZ+eBDAsQCnbEJWqIREv8s7PJ+E mHv1mYigmfCSiE7ZWnKUI9AT80Ht5GW8zQ== -----END CERTIFICATE-----Generated at Wed Apr 9 00:13:05 2025 by rpki-client