$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa File: 8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa (raw, json) Hash identifier: tJSEl+EGRqPrfi66bWNcsBqtKU/iGCnT6VL7nnjg33I= Subject key identifier: 9C:B6:F7:69:7D:E9:5C:F7:B3:36:CD:8D:87:B4:9B:22:13:4F:E3:C1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C577FEFF4A668FDA09AB7560 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa Signing time: Tue 04 Feb 2025 13:42:55 +0000 ROA not before: Tue 04 Feb 2025 13:42:55 +0000 ROA not after: Mon 05 May 2025 12:42:55 +0000 asID: 30036 IP address blocks: 2604:2e8e:6c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:fe:ff:4a:66:8f:da:09:ab:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 13:42:55 2025 GMT Not After : May 5 12:42:55 2025 GMT Subject: CN=b63b1129-fe5f-406b-bdef-6e4fea6824f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:fa:57:00:0f:d3:41:22:4d:78:d6:f0:47: c4:78:9f:71:aa:4d:ce:80:e8:27:5a:bc:4b:55:80: 1a:9f:d0:69:0d:71:a9:15:f3:52:0c:d6:f0:a6:fd: 33:2e:00:b8:20:0d:e2:e9:93:a4:3a:bf:0f:99:29: 75:92:08:94:3f:8e:34:ce:42:f7:75:db:d7:71:65: 5b:58:bf:87:63:5d:02:e5:f8:08:21:a7:d0:b2:5b: 08:0c:a5:35:70:f0:0b:b4:13:32:7f:63:2c:7c:b4: db:ad:99:65:d0:58:99:f4:c9:0b:8c:01:2c:6d:75: 73:5a:51:c0:73:1e:ff:74:9f:f3:80:9e:e8:eb:55: c6:69:97:d8:e3:8f:e3:5f:64:61:85:3c:2a:1a:12: 4c:9c:58:82:8f:37:eb:af:8e:7b:75:f3:47:a9:ae: e3:83:09:88:cd:45:e9:40:12:9f:0f:b2:5d:25:c3: b9:4b:a3:92:d0:ec:1d:64:f3:cf:58:5c:5a:1e:89: 23:59:9f:09:5e:92:f8:6e:ea:00:53:aa:ac:c9:f1: de:e1:eb:12:64:3f:01:29:8f:05:36:a2:a6:17:c1: f6:5e:f8:88:d9:0e:3f:37:7f:93:65:24:7a:ed:e4: 09:19:7a:c5:c7:54:1e:c1:41:07:83:bf:05:a6:00: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:F7:69:7D:E9:5C:F7:B3:36:CD:8D:87:B4:9B:22:13:4F:E3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:6c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:99:06:34:91:7f:59:9d:2d:5c:19:1d:d1:61:89:2b:1f:eb: fd:d0:2b:b2:57:49:22:fa:17:d7:0e:2d:c8:45:38:1b:c3:84: 67:c4:47:f1:45:99:a1:d2:e4:07:98:af:30:22:00:a1:0c:c1: e1:d0:a9:4c:04:21:40:aa:cb:1e:4b:d0:de:9e:d0:50:f8:ce: 1c:24:53:7b:63:c4:5a:75:e9:d4:06:af:59:cf:64:38:7b:47: e7:71:77:4b:a9:b5:44:2b:31:80:10:71:fb:37:59:6a:1e:bd: ee:7c:3a:d8:a4:7a:6f:e7:f0:f8:d6:05:65:4c:e8:af:59:77: 7a:24:f2:83:b4:ee:33:ea:d7:02:77:12:0d:3e:43:a1:cf:06: f2:e2:f2:5a:f1:30:49:08:77:56:3e:28:6c:8a:23:2a:78:e1: f9:d4:c7:e5:ba:2a:38:04:70:b7:c1:21:67:16:eb:ba:c4:77: 7a:d8:ae:96:f6:78:2b:a1:dd:05:12:b1:68:ae:a6:25:b3:53: 77:f6:8b:32:74:40:d7:8a:7c:7a:02:f6:ac:fc:bc:ff:66:6e: e2:5b:e1:7d:24:30:6b:fe:43:4b:de:a3:c5:c5:bc:5a:99:00: 31:56:8b:7d:cc:b5:39:73:c1:4e:29:3d:58:a3:49:48:01:d3: 17:d4:37:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd/7/SmaP2gmrdWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEzNDI1NVoXDTI1MDUwNTEyNDI1NVowLzEtMCsGA1UEAxMk YjYzYjExMjktZmU1Zi00MDZiLWJkZWYtNmU0ZmVhNjgyNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuz6VwAP00EiTXjW8EfEeJ9xqk3OgOgnWrxL VYAan9BpDXGpFfNSDNbwpv0zLgC4IA3i6ZOkOr8PmSl1kgiUP440zkL3ddvXcWVb WL+HY10C5fgIIafQslsIDKU1cPALtBMyf2MsfLTbrZll0FiZ9MkLjAEsbXVzWlHA cx7/dJ/zgJ7o61XGaZfY44/jX2RhhTwqGhJMnFiCjzfrr457dfNHqa7jgwmIzUXp QBKfD7JdJcO5S6OS0OwdZPPPWFxaHokjWZ8JXpL4buoAU6qsyfHe4esSZD8BKY8F NqKmF8H2XviI2Q4/N3+TZSR67eQJGXrFx1QewUEHg78FpgBP4QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJy292l96Vz3szbNjYe0myITT+PBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGNjZjczZWMtMWEzNS0z MGE0LWE5MmMtMjFhYjEwN2MxOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujmww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlpkGNJF/WZ0tXBkd0WGJKx/r/dArsldJIvoX1w4tyEU4G8OEZ8RH 8UWZodLkB5ivMCIAoQzB4dCpTAQhQKrLHkvQ3p7QUPjOHCRTe2PEWnXp1AavWc9k OHtH53F3S6m1RCsxgBBx+zdZah697nw62KR6b+fw+NYFZUzor1l3eiTyg7TuM+rX AncSDT5Doc8G8uLyWvEwSQh3Vj4obIojKnjh+dTH5boqOARwt8EhZxbrusR3etiu lvZ4K6HdBRKxaK6mJbNTd/aLMnRA14p8egL2rPy8/2Zu4lvhfSQwa/5DS96jxcW8 WpkAMVaLfcy1OXPBTik9WKNJSAHTF9Q3Qw== -----END CERTIFICATE-----Generated at Tue Apr 8 23:58:44 2025 by rpki-client