$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/924f6aea-9730-35e8-a879-2f370c8d217a.roa File: 924f6aea-9730-35e8-a879-2f370c8d217a.roa (raw, json) Hash identifier: Z4z0Yk9ijDyNFitrqaooZFGn/23oQBCOJHgKqq2MA6A= Subject key identifier: BE:83:19:E0:97:5B:09:E5:46:C7:D4:94:4C:36:F9:76:E8:2A:A9:1C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848B73781B672DF4BF6AB345A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/924f6aea-9730-35e8-a879-2f370c8d217a.roa Signing time: Thu 30 Jan 2025 11:11:39 +0000 ROA not before: Thu 30 Jan 2025 11:11:39 +0000 ROA not after: Wed 30 Apr 2025 10:11:39 +0000 asID: 30036 IP address blocks: 2604:2e88:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:81:b6:72:df:4b:f6:ab:34:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 30 11:11:39 2025 GMT Not After : Apr 30 10:11:39 2025 GMT Subject: CN=b74bc2f0-d22a-4acc-9e76-a7caf1d45516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:8e:37:df:94:32:24:cc:b1:94:d8:03:58: d8:6e:cd:e9:16:08:c8:ee:ac:0e:a2:b6:f3:ab:4e: 40:b3:44:de:2d:23:d9:bf:b1:a3:32:c5:a7:d3:a8: 23:9a:ae:ac:e9:c0:b5:fa:75:d9:fe:76:0f:a2:31: ff:cd:8b:cd:1e:18:fa:ed:25:63:54:25:e5:2d:58: 8e:99:75:fe:f9:92:3d:3a:23:38:9d:36:b2:32:9c: cb:e7:c4:e4:b1:ff:cc:ed:7a:f6:fd:f8:ce:79:4c: 82:0f:ba:a1:c6:df:a3:0c:f0:49:6d:6b:9e:fa:fc: e9:fd:dd:98:7a:b7:ca:f7:4d:38:63:45:cb:be:24: 01:fb:17:a9:86:da:bb:7d:f7:91:58:dc:ea:c4:ee: d2:33:a2:40:45:5c:d2:37:6e:75:3a:a3:d2:43:b6: 30:0b:02:65:65:02:fb:ac:00:26:10:49:0e:ae:43: ce:d4:73:84:1d:a5:70:de:71:c6:57:ce:e9:09:b6: 70:95:29:f6:eb:1f:cf:8d:02:62:4d:64:42:33:60: 3e:f1:5e:59:c1:1e:0c:3a:c5:d0:4b:eb:6e:8b:b4: 11:ac:95:e2:bb:3a:31:7e:70:eb:7b:02:0e:c3:67: 92:5b:35:37:77:29:1d:4f:b4:37:d8:3e:27:e4:9f: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:19:E0:97:5B:09:E5:46:C7:D4:94:4C:36:F9:76:E8:2A:A9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/924f6aea-9730-35e8-a879-2f370c8d217a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0e:cf:68:36:7c:46:52:fe:2f:5d:64:1b:12:09:80:3e:81: 95:ed:31:38:10:8f:4f:95:db:2a:55:c8:bf:d7:36:08:be:7d: cc:a2:b1:08:64:e8:1a:8a:a2:3c:15:18:55:40:45:66:c0:5c: ae:c5:62:4e:a9:32:ab:83:50:d3:48:e2:29:b1:af:51:b6:33: 4b:51:e0:73:c3:28:08:07:86:79:54:d5:83:2a:08:06:85:f1: d4:cb:90:d6:a3:15:70:a6:0b:87:12:e1:1f:ea:76:10:9a:3d: 4a:ff:45:41:64:8d:a8:2b:7d:f7:c4:78:ce:71:a5:bc:a0:e3: 3e:e8:aa:0c:dc:dd:91:54:24:1d:f8:45:9d:41:5d:c6:4c:ea: ad:49:95:0c:46:9d:7f:f4:b8:d2:9a:be:e9:60:f0:97:09:75: ec:ca:97:ca:36:77:07:2c:b6:cd:76:97:41:1b:54:3d:0c:40: 2a:5a:80:6f:01:fb:e1:f1:5a:a7:6b:9c:e2:08:f6:53:3d:8a: 34:39:fc:6c:ec:15:77:0b:af:62:b2:82:9f:be:ac:75:c3:9d: 8c:31:5a:9c:01:a5:46:e5:ba:0f:37:91:3f:55:c4:91:e6:2a: 6b:a9:73:99:3b:32:9e:ba:a8:37:41:0d:76:64:44:a9:49:60: 5b:78:d3:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N4G2ct9L9qs0WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDEzMDExMTEzOVoXDTI1MDQzMDEwMTEzOVowLzEtMCsGA1UEAxMk Yjc0YmMyZjAtZDIyYS00YWNjLTllNzYtYTdjYWYxZDQ1NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR6ON9+UMiTMsZTYA1jYbs3pFgjI7qwOorbz q05As0TeLSPZv7GjMsWn06gjmq6s6cC1+nXZ/nYPojH/zYvNHhj67SVjVCXlLViO mXX++ZI9OiM4nTayMpzL58Tksf/M7Xr2/fjOeUyCD7qhxt+jDPBJbWue+vzp/d2Y erfK9004Y0XLviQB+xephtq7ffeRWNzqxO7SM6JARVzSN251OqPSQ7YwCwJlZQL7 rAAmEEkOrkPO1HOEHaVw3nHGV87pCbZwlSn26x/PjQJiTWRCM2A+8V5ZwR4MOsXQ S+tui7QRrJXiuzoxfnDrewIOw2eSWzU3dykdT7Q32D4n5J9LxQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL6DGeCXWwnlRsfUlEw2+XboKqkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTI0ZjZhZWEtOTczMC0z NWU4LWE4NzktMmYzNzBjOGQyMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiIgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApQ7PaDZ8RlL+L11kGxIJgD6Ble0xOBCPT5XbKlXIv9c2CL59zKKx CGToGoqiPBUYVUBFZsBcrsViTqkyq4NQ00jiKbGvUbYzS1Hgc8MoCAeGeVTVgyoI BoXx1MuQ1qMVcKYLhxLhH+p2EJo9Sv9FQWSNqCt998R4znGlvKDjPuiqDNzdkVQk HfhFnUFdxkzqrUmVDEadf/S40pq+6WDwlwl17MqXyjZ3Byy2zXaXQRtUPQxAKlqA bwH74fFap2uc4gj2Uz2KNDn8bOwVdwuvYrKCn76sdcOdjDFanAGlRuW6DzeRP1XE keYqa6lzmTsynrqoN0ENdmREqUlgW3jTww== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:34 2025 by rpki-client