$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa File: 4902d440-83b4-30f9-ac1a-da81d6574f94.roa (raw, json) Hash identifier: FlX1o8W0HTpnCHYr0yVMtg6MWfQoBjr063eD8sYrqvk= Subject key identifier: 22:87:EE:39:22:92:1E:0A:F9:C2:1C:7B:0F:72:15:4F:EF:47:05:5A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C264BE56D047224F9951B000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa Signing time: Mon 03 Feb 2025 11:16:42 +0000 ROA not before: Mon 03 Feb 2025 11:16:42 +0000 ROA not after: Sun 04 May 2025 10:16:42 +0000 asID: 30036 IP address blocks: 2604:2e89:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:be:56:d0:47:22:4f:99:51:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:16:42 2025 GMT Not After : May 4 10:16:42 2025 GMT Subject: CN=c16d2a53-2a5d-41f5-8527-7d51876ad131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:93:83:39:9c:72:20:d3:cb:d6:83:a7:da: ef:8d:78:b3:98:ca:f3:c4:5a:5d:0a:67:de:1f:64: db:f2:3e:10:1a:8a:3d:43:2c:8e:9e:ff:2d:f2:94: 01:d0:c0:9d:5d:5f:de:55:34:1c:ee:04:99:55:b9: 8d:1d:84:70:a4:24:6c:dc:8f:a7:cf:12:e2:98:d5: f6:45:40:a4:f4:35:47:80:ca:00:b4:0f:12:7a:0c: 99:81:8f:aa:d0:7a:e4:1c:6b:2a:55:19:ee:33:0a: d8:76:34:a4:1e:7b:d0:60:42:b8:a9:14:06:77:14: 08:d5:57:0f:9f:07:6a:71:ad:3d:e0:75:c5:76:34: 0c:00:58:36:89:8f:0f:03:06:35:db:a9:18:16:49: 2b:c0:5b:38:73:3f:ce:3f:5d:5b:93:a3:1a:79:1b: cb:1f:ad:09:9e:b5:9b:a9:b1:bb:55:a8:d0:31:0c: 80:6c:6b:71:3c:d4:90:ed:b4:60:98:86:8e:24:1e: 7f:a1:a5:2a:a7:9b:94:bc:ae:ed:31:20:7d:d9:1a: 27:c5:9a:cc:3c:cf:17:3d:61:44:92:cb:f6:88:0e: 28:02:96:fb:51:39:3e:87:5f:ce:68:ad:e0:e4:86: a2:fb:be:f7:ed:af:c4:b1:e0:b6:30:98:1c:ac:fd: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:87:EE:39:22:92:1E:0A:F9:C2:1C:7B:0F:72:15:4F:EF:47:05:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4902d440-83b4-30f9-ac1a-da81d6574f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:27:c3:2d:8c:4a:8c:f9:d2:89:8e:0e:2a:da:8d:a4:5f:83: fc:a3:f5:8a:91:c0:ae:e2:2c:9b:ed:4f:30:31:58:b9:cc:bf: 42:a3:6c:81:81:3d:da:43:27:d9:36:3f:e0:a5:40:01:40:6c: ad:7d:85:77:ca:a6:ef:4d:6a:e7:60:86:3e:e2:16:f2:db:1f: 3d:63:2e:18:74:fb:b0:79:8b:99:59:16:06:e6:6e:35:9e:94: 3e:9a:ad:f4:9d:a5:64:82:ea:97:68:d4:ac:5a:07:fd:fe:57: df:6d:be:02:9a:81:b9:a7:28:88:67:4c:aa:d7:e7:65:6a:a4: 55:a2:05:ea:89:fb:0f:40:16:be:fd:96:97:c0:d8:dd:8e:99: 9b:fa:e0:f6:10:fa:a1:a4:c4:ad:b4:db:94:bb:d4:58:fd:5e: 39:1c:b8:f2:05:c2:43:c8:dc:9b:d4:70:80:08:99:e6:ac:da: c5:7d:d4:bd:7b:70:37:2c:61:e8:5c:4a:37:d4:ae:2a:4d:33: 50:23:59:77:b0:96:41:c3:3a:6e:b8:f0:4e:2c:1c:0e:3b:92: f4:7d:e7:b1:39:b4:77:24:70:9e:67:cb:76:5d:eb:c5:8b:0f: 11:89:e9:9a:1e:7a:85:cc:56:82:10:ea:d1:23:3f:44:fb:d9: 3a:d8:9c:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZL5W0EciT5lRsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTY0MloXDTI1MDUwNDEwMTY0MlowLzEtMCsGA1UEAxMk YzE2ZDJhNTMtMmE1ZC00MWY1LTg1MjctN2Q1MTg3NmFkMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lyTgzmcciDTy9aDp9rvjXizmMrzxFpdCmfe H2Tb8j4QGoo9QyyOnv8t8pQB0MCdXV/eVTQc7gSZVbmNHYRwpCRs3I+nzxLimNX2 RUCk9DVHgMoAtA8SegyZgY+q0HrkHGsqVRnuMwrYdjSkHnvQYEK4qRQGdxQI1VcP nwdqca094HXFdjQMAFg2iY8PAwY126kYFkkrwFs4cz/OP11bk6MaeRvLH60JnrWb qbG7VajQMQyAbGtxPNSQ7bRgmIaOJB5/oaUqp5uUvK7tMSB92RonxZrMPM8XPWFE ksv2iA4oApb7UTk+h1/OaK3g5Iai+7737a/EseC2MJgcrP2VPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCKH7jkikh4K+cIcew9yFU/vRwVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDkwMmQ0NDAtODNiNC0z MGY5LWFjMWEtZGE4MWQ2NTc0Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlSfDLYxKjPnSiY4OKtqNpF+D/KP1ipHAruIsm+1PMDFYucy/QqNs gYE92kMn2TY/4KVAAUBsrX2Fd8qm701q52CGPuIW8tsfPWMuGHT7sHmLmVkWBuZu NZ6UPpqt9J2lZILql2jUrFoH/f5X322+ApqBuacoiGdMqtfnZWqkVaIF6on7D0AW vv2Wl8DY3Y6Zm/rg9hD6oaTErbTblLvUWP1eORy48gXCQ8jcm9RwgAiZ5qzaxX3U vXtwNyxh6FxKN9SuKk0zUCNZd7CWQcM6brjwTiwcDjuS9H3nsTm0dyRwnmfLdl3r xYsPEYnpmh56hcxWghDq0SM/RPvZOticoA== -----END CERTIFICATE-----Generated at Wed Apr 9 01:56:00 2025 by rpki-client