$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa File: 9da71338-4f42-3df5-ac4d-a986c0adfd27.roa (raw, json) Hash identifier: r+jrnSmLUbrBIZH6ZGCU1mPYHHyJ6Y3+Fe3Uf6d/OGc= Subject key identifier: 31:58:5E:9E:6F:15:BF:F1:AB:B0:1E:CB:D9:DA:2B:CF:3A:3A:70:2E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C55FF22061894F325185BC60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa Signing time: Tue 04 Feb 2025 12:54:27 +0000 ROA not before: Tue 04 Feb 2025 12:54:27 +0000 ROA not after: Mon 05 May 2025 11:54:27 +0000 asID: 30036 IP address blocks: 2604:2e8e:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:f2:20:61:89:4f:32:51:85:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 12:54:27 2025 GMT Not After : May 5 11:54:27 2025 GMT Subject: CN=54e6b7bc-ec65-4fc1-b96d-42b5dd7c6f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:7d:b8:d4:f5:a1:28:45:aa:c0:4f:b1:e3: 63:01:cb:e2:36:d4:b9:c7:90:96:25:b1:fd:ee:c5: 90:36:d4:85:29:7c:48:b3:fd:b4:cf:65:36:9e:d4: 27:f7:30:c3:c4:c4:7d:26:d8:0a:85:14:6f:bc:fd: 11:d1:35:21:5d:85:ac:c5:03:c0:ce:65:c3:52:28: 47:b8:55:b8:4a:33:09:b4:81:be:b0:32:0f:35:13: bd:82:b2:be:d8:68:5a:7a:bc:b7:aa:46:4d:85:c9: 08:12:ae:8c:65:8f:01:8a:72:18:14:25:6e:55:6f: 8a:17:c4:aa:99:f9:7e:9d:e0:be:98:80:6a:70:76: 8f:ac:e1:34:1f:c3:d6:40:40:9c:06:4a:a1:fc:8c: f6:bb:c6:3c:02:28:d4:97:b9:59:9e:21:02:7e:c6: 8d:9e:39:4a:73:b7:07:22:72:4e:78:a0:2c:56:48: 57:96:1f:8d:64:d4:3a:31:ed:96:ae:dd:51:8b:c4: 5d:de:26:1d:f8:d2:3e:3a:9e:b4:42:48:d3:49:1c: d2:6b:08:00:1a:4d:71:99:be:2e:89:c3:8e:29:4a: f2:2a:16:0f:4b:e2:3b:8c:ff:4a:13:ac:b9:50:08: 37:ce:ae:d5:2e:fa:05:41:97:f4:37:b9:e5:5f:ce: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:58:5E:9E:6F:15:BF:F1:AB:B0:1E:CB:D9:DA:2B:CF:3A:3A:70:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7f:f7:35:cd:47:ff:5f:ae:19:dc:2b:e7:1d:d6:07:48:8c: d9:b8:df:de:dd:bc:8b:79:a8:5c:b0:07:0c:17:7a:e4:7f:23: 9a:e3:82:77:6b:98:25:48:17:5d:3e:85:0b:98:ec:1d:00:56: 00:26:29:2f:9b:d4:9b:e2:f8:06:86:a7:6b:6b:e3:5f:84:5c: 47:ee:f1:25:a8:8f:97:29:39:99:57:c8:b0:4a:0e:de:5d:99: bf:c8:3e:b2:0e:6d:81:50:f2:87:87:8c:0c:9a:e8:31:61:03: eb:f5:a8:2c:8c:3f:6e:3f:50:0c:c3:05:f8:1d:e9:c6:cc:5e: 99:0d:62:f2:43:1d:c7:7f:a8:be:0c:c3:ed:91:2d:53:7c:d5: 37:5a:ff:76:fd:c6:49:5b:43:7e:06:35:3b:3c:a6:e9:30:ae: 37:78:26:f4:5b:cd:cd:b5:96:73:72:cb:a5:ae:21:b3:79:95: 50:59:53:7c:bb:82:a0:07:a5:be:87:b2:df:58:91:39:fa:0e: aa:4f:60:1a:1f:3c:c5:43:42:43:07:03:0a:74:c7:ab:77:10: 09:d0:ed:ad:1a:78:5f:34:62:c6:c1:a0:e7:61:6a:d2:85:43: 76:76:70:68:92:6f:4b:67:c5:54:99:23:1e:37:9a:59:f6:37: be:35:95:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFX/IgYYlPMlGFvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEyNTQyN1oXDTI1MDUwNTExNTQyN1owLzEtMCsGA1UEAxMk NTRlNmI3YmMtZWM2NS00ZmMxLWI5NmQtNDJiNWRkN2M2ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufd9uNT1oShFqsBPseNjAcviNtS5x5CWJbH9 7sWQNtSFKXxIs/20z2U2ntQn9zDDxMR9JtgKhRRvvP0R0TUhXYWsxQPAzmXDUihH uFW4SjMJtIG+sDIPNRO9grK+2Ghaery3qkZNhckIEq6MZY8BinIYFCVuVW+KF8Sq mfl+neC+mIBqcHaPrOE0H8PWQECcBkqh/Iz2u8Y8AijUl7lZniECfsaNnjlKc7cH InJOeKAsVkhXlh+NZNQ6Me2Wrt1Ri8Rd3iYd+NI+Op60QkjTSRzSawgAGk1xmb4u icOOKUryKhYPS+I7jP9KE6y5UAg3zq7VLvoFQZf0N7nlX86iRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDFYXp5vFb/xq7Aey9naK886OnAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWRhNzEzMzgtNGY0Mi0z ZGY1LWFjNGQtYTk4NmMwYWRmZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujogw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhn/3Nc1H/1+uGdwr5x3WB0iM2bjf3t28i3moXLAHDBd65H8jmuOC d2uYJUgXXT6FC5jsHQBWACYpL5vUm+L4Boana2vjX4RcR+7xJaiPlyk5mVfIsEoO 3l2Zv8g+sg5tgVDyh4eMDJroMWED6/WoLIw/bj9QDMMF+B3pxsxemQ1i8kMdx3+o vgzD7ZEtU3zVN1r/dv3GSVtDfgY1Ozym6TCuN3gm9FvNzbWWc3LLpa4hs3mVUFlT fLuCoAelvoey31iROfoOqk9gGh88xUNCQwcDCnTHq3cQCdDtrRp4XzRixsGg52Fq 0oVDdnZwaJJvS2fFVJkjHjeaWfY3vjWV2Q== -----END CERTIFICATE-----Generated at Wed Apr 9 00:19:59 2025 by rpki-client