$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa File: 9c00eec4-e9a9-38e0-a790-870bd90c4951.roa (raw, json) Hash identifier: jUDu2W4F+Yz7AQ+JJ9eNqPLOZIHHa6qggafeVOPnXws= Subject key identifier: 25:A0:C0:D7:3A:CE:8C:E9:98:5F:EB:7C:13:C1:67:54:40:CE:FE:0D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C534736F99C9A9C467971C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa Signing time: Tue 04 Feb 2025 11:26:49 +0000 ROA not before: Tue 04 Feb 2025 11:26:49 +0000 ROA not after: Mon 05 May 2025 10:26:49 +0000 asID: 30036 IP address blocks: 2604:2e8b:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:73:6f:99:c9:a9:c4:67:97:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 11:26:49 2025 GMT Not After : May 5 10:26:49 2025 GMT Subject: CN=fae0482d-0957-4fcb-9b32-19b2edddc61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3f:3f:4d:ce:82:ca:0a:aa:0a:f5:77:8a:2e: 4b:76:36:86:b8:d3:d4:29:41:14:44:aa:0f:1d:c3: 41:80:8f:7d:7f:a5:6a:4d:0e:6b:6e:3f:f5:d5:c9: 42:8d:d4:c8:b5:12:08:11:97:47:d9:8d:a5:5b:78: 7a:0f:fc:e2:a3:9b:1c:17:63:b6:b3:cf:3c:ff:c5: 56:85:50:a5:4e:e5:81:24:2d:8e:b3:9b:db:3b:c7: 28:14:68:08:2c:36:9e:a8:d4:8e:72:db:3d:0a:68: 8c:f2:26:fe:93:fe:bd:0f:2d:14:4e:1e:a7:0c:63: cc:46:b3:90:0f:c9:9c:b0:14:a5:2b:1e:0b:85:3a: 76:96:62:a8:74:5e:0b:24:72:57:db:ed:d0:56:82: 0e:50:18:3f:fb:8a:cb:da:fc:d4:cd:26:88:f4:41: 3a:ae:97:a1:75:2b:8b:13:09:e1:c8:bb:65:ab:e8: 07:dd:2a:59:51:1f:71:e0:b5:4c:de:da:ad:0a:df: 34:96:6c:ca:28:cb:9c:19:d9:f1:0b:9e:97:da:85: 83:d4:8e:50:f3:49:92:52:03:70:4d:c1:e1:c8:45: e1:01:f1:02:ca:05:d4:5c:b9:24:51:96:9c:63:d5: 9a:2c:aa:df:00:60:08:4f:66:0f:88:49:3e:8a:6b: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:C0:D7:3A:CE:8C:E9:98:5F:EB:7C:13:C1:67:54:40:CE:FE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:37:94:cf:9d:98:32:5e:8e:52:88:a1:a6:ac:23:11:8f:b5: 71:2d:a1:f6:fe:55:f4:e8:83:67:5d:eb:77:be:c6:43:48:d3: 85:85:a2:25:a0:d1:cb:41:69:e3:fb:a7:0e:98:1f:59:ff:90: fa:57:bc:d5:4a:a2:43:ee:66:7b:36:04:80:a1:39:18:6a:82: 19:14:45:59:99:c2:e0:c2:99:87:1a:58:87:16:de:7d:13:a6: 90:35:95:06:e8:f2:ce:c7:7f:52:b9:be:e4:c9:e7:ac:d5:4b: 16:93:93:a0:0f:66:6b:17:64:65:2b:9f:14:1a:c1:dc:1d:e0: cb:9f:ef:79:18:1e:02:e0:c0:ce:bc:85:03:65:96:bb:08:0b: ab:54:08:28:96:0d:17:b0:78:3a:34:35:f6:fc:85:b5:0a:87: d4:3d:6a:7a:f4:5e:cd:a4:71:dc:d3:b2:e6:95:20:2e:06:7a: 23:f3:4b:f8:7b:dd:38:5c:b1:c5:df:48:31:3f:c9:8f:39:f8: fc:45:b7:6a:88:20:ef:3a:8e:17:6e:94:a8:23:b6:82:ef:9c: 1a:ae:a9:25:b9:6f:61:34:d2:ba:3a:c0:17:ef:de:3b:38:29: 66:a0:ef:bc:3f:ec:f7:d5:1b:6d:47:31:d5:cf:de:b5:fe:8a: 4d:e5:4c:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFNHNvmcmpxGeXHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDExMjY0OVoXDTI1MDUwNTEwMjY0OVowLzEtMCsGA1UEAxMk ZmFlMDQ4MmQtMDk1Ny00ZmNiLTliMzItMTliMmVkZGRjNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD8/Tc6CygqqCvV3ii5LdjaGuNPUKUEURKoP HcNBgI99f6VqTQ5rbj/11clCjdTItRIIEZdH2Y2lW3h6D/zio5scF2O2s888/8VW hVClTuWBJC2Os5vbO8coFGgILDaeqNSOcts9CmiM8ib+k/69Dy0UTh6nDGPMRrOQ D8mcsBSlKx4LhTp2lmKodF4LJHJX2+3QVoIOUBg/+4rL2vzUzSaI9EE6rpehdSuL EwnhyLtlq+gH3SpZUR9x4LVM3tqtCt80lmzKKMucGdnxC56X2oWD1I5Q80mSUgNw TcHhyEXhAfECygXUXLkkUZacY9WaLKrfAGAIT2YPiEk+imtQYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCWgwNc6zozpmF/rfBPBZ1RAzv4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWMwMGVlYzQtZTlhOS0z OGUwLWE3OTAtODcwYmQ5MGM0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKTeUz52YMl6OUoihpqwjEY+1cS2h9v5V9OiDZ13rd77GQ0jThYWi JaDRy0Fp4/unDpgfWf+Q+le81UqiQ+5mezYEgKE5GGqCGRRFWZnC4MKZhxpYhxbe fROmkDWVBujyzsd/Urm+5MnnrNVLFpOToA9maxdkZSufFBrB3B3gy5/veRgeAuDA zryFA2WWuwgLq1QIKJYNF7B4OjQ19vyFtQqH1D1qevRezaRx3NOy5pUgLgZ6I/NL +HvdOFyxxd9IMT/Jjzn4/EW3aogg7zqOF26UqCO2gu+cGq6pJblvYTTSujrAF+/e OzgpZqDvvD/s99UbbUcx1c/etf6KTeVMVg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:03:48 2025 by rpki-client