$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa File: 4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa (raw, json) Hash identifier: 4UYXmtzsprniwjNyGsuadEFIk6EFYhqd27Nz/vEVXOo= Subject key identifier: FF:04:26:30:9C:C4:48:32:81:4E:49:CA:B7:82:56:A0:FB:6D:DC:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858494BADCE69DD1C08046FA5B200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa Signing time: Mon 24 Mar 2025 15:29:39 +0000 ROA not before: Mon 24 Mar 2025 15:29:39 +0000 ROA not after: Sun 22 Jun 2025 15:29:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:ad:ce:69:dd:1c:08:04:6f:a5:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 24 15:29:39 2025 GMT Not After : Jun 22 15:29:39 2025 GMT Subject: CN=b5dc8fcd-6a82-48a1-8e8a-48e819196fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:8f:12:4f:d0:d1:ec:70:91:9e:6c:90:16: fc:6f:ac:3c:50:62:07:04:fd:2a:d1:0c:87:1b:7b: 80:02:43:45:06:01:80:20:97:6e:40:6c:03:1d:29: 69:53:e7:49:cf:85:b6:cb:7f:8d:1b:36:a5:f6:a3: e4:99:0d:4c:cd:ec:b9:86:0d:3e:2f:d4:1f:17:43: 27:b9:37:fa:e5:27:09:1d:10:de:a7:85:70:49:01: e0:1f:60:33:dd:07:45:7f:ae:4b:be:b0:f2:f5:f3: ba:ca:97:7a:6c:5e:81:0f:fa:8b:cc:6b:01:00:4c: 82:7e:7d:63:50:ef:cb:e4:7c:ac:e5:a0:d0:4d:3c: 41:f8:6f:ac:8b:16:93:2c:ea:a9:1b:97:43:e2:cd: ad:62:b0:17:ba:28:bd:f3:f4:d2:61:bd:4f:8f:c1: 3e:0e:74:0c:96:2a:06:bc:c8:92:72:09:6b:81:31: a3:78:55:16:7a:bd:b4:52:fa:cd:55:2c:41:fd:83: 28:16:f2:8d:70:13:fb:ca:7d:57:e8:d1:fd:db:c5: 87:90:c8:51:65:b4:c6:ed:0f:e1:ff:a8:56:2e:78: 59:a9:9d:7f:d5:4c:77:74:2c:a7:e1:b9:24:f5:0a: 4c:a3:3f:7c:65:30:6a:43:85:06:b1:38:66:5f:90: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:26:30:9C:C4:48:32:81:4E:49:CA:B7:82:56:A0:FB:6D:DC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c8:c9:1f:89:90:10:f0:bc:23:af:f3:e5:99:3e:8a:da:b8: e6:4c:3b:9e:1e:f5:49:3d:6a:dd:26:d3:e2:a0:44:b3:25:83: 6f:5c:91:eb:ff:b5:52:96:18:5d:50:11:78:af:0c:e2:4c:f0: 45:4a:f0:4b:53:dd:d0:8b:25:09:1e:9d:20:5c:ab:34:3d:f9: 85:47:ef:39:61:fc:41:82:8e:3f:1b:b0:db:2d:b7:af:c7:55: 96:87:cb:ea:99:13:14:a7:50:64:9f:e5:3a:05:12:aa:f9:42: 42:4f:71:e9:38:63:24:21:4c:ab:09:63:2b:7c:5a:19:aa:84: a5:0b:21:8c:53:4b:04:3f:07:a1:43:23:c4:af:5a:b5:6e:84: a8:46:fe:c1:ca:70:cf:d5:dc:6d:83:c6:b2:70:4c:2e:92:da: d3:5d:77:05:63:d2:b1:69:a8:47:91:9c:80:9e:44:17:c7:8c: 95:e4:4e:41:ff:29:eb:93:cc:d0:14:e9:24:36:4e:0b:ed:5a: 41:63:8a:45:57:3e:0c:55:d7:64:ea:5e:0b:24:ba:d3:65:ad: 11:3c:93:7f:ed:52:cf:f1:b0:52:c5:4b:fa:3d:0c:19:1e:ab: e9:1a:88:e7:8d:34:23:1a:51:0c:96:19:94:de:fa:fd:1a:c7: de:f9:d8:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLrc5p3RwIBG+lsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMyNDE1MjkzOVoXDTI1MDYyMjE1MjkzOVowLzEtMCsGA1UEAxMk YjVkYzhmY2QtNmE4Mi00OGExLThlOGEtNDhlODE5MTk2ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue+PEk/Q0exwkZ5skBb8b6w8UGIHBP0q0QyH G3uAAkNFBgGAIJduQGwDHSlpU+dJz4W2y3+NGzal9qPkmQ1Mzey5hg0+L9QfF0Mn uTf65ScJHRDep4VwSQHgH2Az3QdFf65LvrDy9fO6ypd6bF6BD/qLzGsBAEyCfn1j UO/L5Hys5aDQTTxB+G+sixaTLOqpG5dD4s2tYrAXuii98/TSYb1Pj8E+DnQMlioG vMiScglrgTGjeFUWer20UvrNVSxB/YMoFvKNcBP7yn1X6NH928WHkMhRZbTG7Q/h /6hWLnhZqZ1/1Ux3dCyn4bkk9QpMoz98ZTBqQ4UGsThmX5CAZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP8EJjCcxEgygU5JyreCVqD7bdy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGMzZGUyZjItMjA0YS0z YzUxLTg0N2YtNjBhNmZkMGM0ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP8jJH4mQEPC8I6/z5Zk+itq45kw7nh71ST1q3SbT4qBEsyWDb1yR 6/+1UpYYXVAReK8M4kzwRUrwS1Pd0IslCR6dIFyrND35hUfvOWH8QYKOPxuw2y23 r8dVlofL6pkTFKdQZJ/lOgUSqvlCQk9x6ThjJCFMqwljK3xaGaqEpQshjFNLBD8H oUMjxK9atW6EqEb+wcpwz9XcbYPGsnBMLpLa0113BWPSsWmoR5GcgJ5EF8eMleRO Qf8p65PM0BTpJDZOC+1aQWOKRVc+DFXXZOpeCyS602WtETyTf+1Sz/GwUsVL+j0M GR6r6RqI5400IxpRDJYZlN76/RrH3vnYtg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:31 2025 by rpki-client