$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa File: 63c86781-1f9c-30b8-8729-ce472e549b9c.roa (raw, json) Hash identifier: v5oFX+GjeejMhRph8zPiPyvoaSrb14Qp3E5yZVnzjHE= Subject key identifier: F7:E5:EB:F5:9E:CF:04:9D:F9:D3:8A:65:FA:E1:EC:05:9A:1F:AD:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C2649C409C8FB2B9CCE63F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa Signing time: Mon 03 Feb 2025 11:16:25 +0000 ROA not before: Mon 03 Feb 2025 11:16:25 +0000 ROA not after: Sun 04 May 2025 10:16:25 +0000 asID: 30036 IP address blocks: 2604:2e89:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:9c:40:9c:8f:b2:b9:cc:e6:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:16:25 2025 GMT Not After : May 4 10:16:25 2025 GMT Subject: CN=3d632d4f-2ed6-4c0f-8cd8-987918faa00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:33:c5:fb:a6:33:53:9b:ab:c6:43:9a:a5: 3a:88:41:2c:e7:99:9e:ae:fe:5b:b0:35:c3:9a:dd: 88:c6:4f:61:bf:d8:01:8a:36:51:4a:ca:9c:0a:1e: 7a:4a:f4:68:33:ad:c1:63:92:3d:be:2a:13:b6:e2: b0:78:af:44:7c:31:5f:f4:08:56:f7:e9:63:8a:e8: 83:d2:20:70:23:e5:b0:f7:7e:22:01:f1:3c:00:24: d6:6e:be:41:0b:af:b6:b3:f2:d7:71:ea:bf:f9:16: d3:c1:c7:0a:fd:5c:ba:c7:e3:94:99:92:04:8e:34: 7d:55:73:9d:60:3d:0f:22:55:3f:91:a1:0b:72:71: 4b:14:c4:25:bb:a4:aa:ed:23:41:16:a7:92:e1:c7: 02:fc:2e:cd:cd:a0:6d:d0:46:a6:9b:40:ff:8f:13: 6a:a1:f9:3e:fd:dd:b2:17:0f:e1:09:ee:08:19:ae: 72:2c:08:4c:63:e7:b9:bf:f5:e9:f4:85:ee:45:bb: a8:36:73:65:9f:28:f1:ec:46:d6:ec:4d:f0:f8:df: 97:07:a1:a2:6e:24:5b:ac:71:e8:3c:78:ea:a3:d6: e8:a7:9a:3c:31:10:dc:f9:00:ff:49:a3:e6:51:dc: 66:58:ca:da:59:1b:3d:23:41:34:74:40:08:ad:ca: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:EB:F5:9E:CF:04:9D:F9:D3:8A:65:FA:E1:EC:05:9A:1F:AD:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f5:ef:c0:b8:5a:91:eb:19:58:d8:35:a6:02:d9:34:3c:0a: 4b:ee:ed:88:71:19:02:ab:e7:ef:45:39:b9:88:1e:8c:69:96: 1c:8a:af:e2:a4:76:37:04:ef:6a:b8:7f:1f:ab:d3:79:10:ec: b0:a2:8d:1c:b6:86:19:f4:1c:59:ca:96:c4:83:47:27:cc:5a: d0:b8:fa:0e:bb:bf:7a:28:51:f2:c8:95:d2:c8:c6:c9:72:51: ee:c8:1d:b4:ac:7e:45:3b:82:72:95:13:5f:2f:12:cd:ff:40: b1:f0:97:c9:9e:e6:a4:ba:46:f1:6a:ea:8f:73:eb:7d:b0:52: cd:41:98:27:b2:f5:06:f8:96:f0:16:27:44:55:18:0d:ab:06: 3b:c8:08:96:98:66:4e:1f:81:00:b4:5b:71:47:86:23:66:39: 16:fa:4f:b2:c7:7f:8c:45:aa:0c:44:54:b5:14:4c:91:6b:ea: 0e:38:21:25:e7:72:1a:2e:50:66:c5:ce:ec:4f:d0:85:30:24: 5b:0d:21:20:bc:bf:9d:c5:37:1c:59:01:38:dd:22:d8:d1:0a: b6:6a:bc:76:c8:e9:50:cc:2c:89:53:7b:36:01:de:d9:9e:d6: 8f:3a:d1:7b:b9:31:af:b7:6e:48:cb:de:dd:67:3e:d2:8c:5c: 8a:86:cc:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZJxAnI+yuczmP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTYyNVoXDTI1MDUwNDEwMTYyNVowLzEtMCsGA1UEAxMk M2Q2MzJkNGYtMmVkNi00YzBmLThjZDgtOTg3OTE4ZmFhMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBczxfumM1Obq8ZDmqU6iEEs55merv5bsDXD mt2Ixk9hv9gBijZRSsqcCh56SvRoM63BY5I9vioTtuKweK9EfDFf9AhW9+ljiuiD 0iBwI+Ww934iAfE8ACTWbr5BC6+2s/LXceq/+RbTwccK/Vy6x+OUmZIEjjR9VXOd YD0PIlU/kaELcnFLFMQlu6Sq7SNBFqeS4ccC/C7NzaBt0Eamm0D/jxNqofk+/d2y Fw/hCe4IGa5yLAhMY+e5v/Xp9IXuRbuoNnNlnyjx7EbW7E3w+N+XB6GibiRbrHHo PHjqo9bop5o8MRDc+QD/SaPmUdxmWMraWRs9I0E0dEAIrcrW9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPfl6/WezwSd+dOKZfrh7AWaH60FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjNjODY3ODEtMWY5Yy0z MGI4LTg3MjktY2U0NzJlNTQ5YjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk/XvwLhakesZWNg1pgLZNDwKS+7tiHEZAqvn70U5uYgejGmWHIqv 4qR2NwTvarh/H6vTeRDssKKNHLaGGfQcWcqWxINHJ8xa0Lj6Dru/eihR8siV0sjG yXJR7sgdtKx+RTuCcpUTXy8Szf9AsfCXyZ7mpLpG8Wrqj3PrfbBSzUGYJ7L1BviW 8BYnRFUYDasGO8gIlphmTh+BALRbcUeGI2Y5FvpPssd/jEWqDERUtRRMkWvqDjgh JedyGi5QZsXO7E/QhTAkWw0hILy/ncU3HFkBON0i2NEKtmq8dsjpUMwsiVN7NgHe 2Z7WjzrRe7kxr7duSMve3Wc+0oxciobMmA== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:29 2025 by rpki-client