$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9472f6dc-c622-3c5c-9709-34007c23b27d.roa File: 9472f6dc-c622-3c5c-9709-34007c23b27d.roa (raw, json) Hash identifier: LE5tZa7XOjDUM8b1zkLSmI6SZjHzRO+cl2vLKg+Lt/g= Subject key identifier: 08:D7:68:29:A1:4F:9D:82:8C:D3:9D:48:5A:95:B8:1E:4B:9F:E6:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C5348D87562BB761B667F938 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9472f6dc-c622-3c5c-9709-34007c23b27d.roa Signing time: Tue 04 Feb 2025 11:27:01 +0000 ROA not before: Tue 04 Feb 2025 11:27:01 +0000 ROA not after: Mon 05 May 2025 10:27:01 +0000 asID: 30036 IP address blocks: 2604:2e8e:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:8d:87:56:2b:b7:61:b6:67:f9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 11:27:01 2025 GMT Not After : May 5 10:27:01 2025 GMT Subject: CN=02a7172e-3ba4-42be-8bdf-f98cb60bf29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:98:e3:00:15:57:da:48:53:c8:87:86:91: 4b:d7:c1:0d:69:6d:ff:1e:b1:fc:6f:b1:f7:83:70: 9e:d8:57:93:9c:be:3f:1a:cb:57:56:1c:27:01:c0: d0:9a:f6:da:c1:cf:23:4d:1d:b3:ab:c2:b1:10:e4: ff:87:56:9a:ef:94:fe:cd:c5:20:05:0f:a9:34:d0: 4d:92:63:4d:6d:aa:b0:ba:5a:47:09:71:33:43:68: 18:af:0e:24:13:3a:70:21:1e:0e:2a:e8:a3:81:0c: 80:66:f2:a2:5c:fa:35:ca:e5:f8:d0:76:0e:45:58: fd:4f:40:8a:2f:e2:7e:ad:40:75:69:c2:aa:73:b8: 74:bf:ec:3b:57:23:eb:9e:d1:9a:9f:45:08:ef:02: e2:70:af:de:07:ab:f5:4d:12:a9:37:bf:39:48:66: 0c:90:29:53:2f:b1:dd:ce:8f:b5:79:cf:e0:0e:a7: 8d:64:31:de:f7:fd:77:b7:73:f9:8a:96:dd:58:25: e4:38:29:c6:63:fd:3c:9f:dd:4f:7f:b6:97:3d:2c: 9a:f9:4a:4b:07:72:40:9c:25:be:e7:f7:69:57:84: c6:67:a0:77:9e:29:64:b8:8c:23:7c:4f:f0:90:06: 92:35:5f:5a:39:1a:ba:00:61:73:09:3d:f3:05:b2: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D7:68:29:A1:4F:9D:82:8C:D3:9D:48:5A:95:B8:1E:4B:9F:E6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9472f6dc-c622-3c5c-9709-34007c23b27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3c:0b:48:31:63:05:c6:71:16:d6:35:5b:17:e4:9c:02:d8: 97:df:3d:95:28:10:96:69:50:ab:a9:52:87:e7:88:3c:7b:51: 70:0e:15:5d:a7:c3:7b:46:8b:fa:4f:b4:eb:ce:eb:e6:73:94: 5b:65:9d:98:54:f3:c6:df:0d:2a:47:e8:c2:5b:3d:28:a2:95: 88:00:86:71:cf:54:cd:e7:52:1b:d5:a3:41:f8:4d:41:bd:3b: 6c:0f:63:57:82:03:84:9b:a6:2e:c2:fe:6f:c9:54:7d:ff:f1: fe:14:6a:98:39:17:03:52:4b:c0:66:d5:65:39:d0:b7:8c:6b: a1:23:0a:2b:23:1a:c4:d9:49:7d:bb:b2:86:4b:16:41:13:90: c7:b6:37:5b:3d:2a:3e:8b:52:2a:87:e2:b8:d4:4f:8d:97:8e: 4e:f2:59:5b:36:df:ec:e7:ad:ea:f6:62:9a:2f:95:09:39:00: 08:56:fe:98:44:ed:f7:8d:31:24:81:0c:32:cf:53:39:f7:47: 95:d9:5d:bf:78:95:e2:b7:fd:47:26:26:3a:fc:d5:4b:73:c7: 02:c1:6f:74:08:d4:0d:17:ec:f4:57:8d:db:78:cb:f7:f9:62: 3b:ca:22:1f:07:71:49:f2:e0:a2:fb:cc:4a:ff:3f:69:3e:d9: b8:67:02:88 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFNI2HViu3YbZn+TgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDExMjcwMVoXDTI1MDUwNTEwMjcwMVowLzEtMCsGA1UEAxMk MDJhNzE3MmUtM2JhNC00MmJlLThiZGYtZjk4Y2I2MGJmMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW6Y4wAVV9pIU8iHhpFL18ENaW3/HrH8b7H3 g3Ce2FeTnL4/GstXVhwnAcDQmvbawc8jTR2zq8KxEOT/h1aa75T+zcUgBQ+pNNBN kmNNbaqwulpHCXEzQ2gYrw4kEzpwIR4OKuijgQyAZvKiXPo1yuX40HYORVj9T0CK L+J+rUB1acKqc7h0v+w7VyPrntGan0UI7wLicK/eB6v1TRKpN785SGYMkClTL7Hd zo+1ec/gDqeNZDHe9/13t3P5ipbdWCXkOCnGY/08n91Pf7aXPSya+UpLB3JAnCW+ 5/dpV4TGZ6B3nilkuIwjfE/wkAaSNV9aORq6AGFzCT3zBbIWZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAjXaCmhT52CjNOdSFqVuB5Ln+YUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTQ3MmY2ZGMtYzYyMi0z YzVjLTk3MDktMzQwMDdjMjNiMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujgww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcDwLSDFjBcZxFtY1WxfknALYl989lSgQlmlQq6lSh+eIPHtRcA4V XafDe0aL+k+0687r5nOUW2WdmFTzxt8NKkfowls9KKKViACGcc9UzedSG9WjQfhN Qb07bA9jV4IDhJumLsL+b8lUff/x/hRqmDkXA1JLwGbVZTnQt4xroSMKKyMaxNlJ fbuyhksWQROQx7Y3Wz0qPotSKofiuNRPjZeOTvJZWzbf7Oet6vZimi+VCTkACFb+ mETt940xJIEMMs9TOfdHldldv3iV4rf9RyYmOvzVS3PHAsFvdAjUDRfs9FeN23jL 9/liO8oiHwdxSfLgovvMSv8/aT7ZuGcCiA== -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:40 2025 by rpki-client