$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa File: b668ad56-855d-3d8d-9d31-8f7298d49e29.roa (raw, json) Hash identifier: 3RsKbiWLpw2UtpaT1xeYoRa3iBndFSaYvuQGCaWlTko= Subject key identifier: 2D:AA:73:92:0C:21:EB:C6:D4:20:96:B8:27:B8:E8:3B:8D:0C:7B:B8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C558E989239609691BD34E40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa Signing time: Tue 04 Feb 2025 12:40:17 +0000 ROA not before: Tue 04 Feb 2025 12:40:17 +0000 ROA not after: Mon 05 May 2025 11:40:17 +0000 asID: 30036 IP address blocks: 2604:2e89:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:e9:89:23:96:09:69:1b:d3:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 12:40:17 2025 GMT Not After : May 5 11:40:17 2025 GMT Subject: CN=c9bf79b3-b6ae-4122-9d5e-1de44a016d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:94:5f:d7:e3:e4:fb:42:31:2e:ce:94:65: f3:dd:29:ee:1c:91:3b:c1:16:b8:4f:09:67:9f:74: f1:6c:7f:ca:03:63:c3:10:c7:d0:18:b1:f2:3e:1f: 64:e0:23:0e:b0:fc:a4:35:01:02:5d:ff:e7:71:0b: 7e:8f:1c:30:7d:56:f8:06:06:46:c7:94:fc:e8:76: 0b:b8:d4:0e:9a:8c:be:27:ba:91:19:a4:50:6d:0f: a3:87:ff:16:95:b3:d6:c8:60:e1:6b:9c:32:36:a7: a8:66:b4:2d:8e:08:9b:d2:0a:b2:c1:74:f3:7e:d3: 0c:1b:9a:12:54:e6:32:ad:0d:26:b3:e9:de:fe:2a: 5d:bb:a0:df:e1:a7:e3:17:1f:cb:38:db:34:1e:63: 76:7f:da:cb:8d:8f:e8:89:b3:5e:46:27:fd:1a:6c: f4:32:a8:49:88:46:3a:ee:96:35:ac:ac:ed:cc:30: a7:e3:ca:b4:44:06:bd:cd:b7:3f:a4:ac:53:ef:8e: 50:63:11:9e:63:0c:41:99:25:0e:25:c4:c6:24:03: b4:02:1d:7b:8f:ac:cb:81:07:94:39:90:a5:da:31: 86:67:38:76:57:4c:d2:08:29:56:f7:0e:ad:d2:14: 1a:c7:21:ce:b1:12:04:63:cf:73:0b:46:a5:23:56: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:73:92:0C:21:EB:C6:D4:20:96:B8:27:B8:E8:3B:8D:0C:7B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f3:4e:a8:83:18:ad:83:eb:26:2a:8f:05:d2:4c:bd:b2:f3: 60:6c:47:6c:88:74:16:7a:3b:d9:ec:88:84:b0:41:eb:74:e9: dd:7f:53:43:ea:9c:57:df:9b:97:88:9c:a2:4b:40:8b:aa:0b: f3:9b:68:0c:ac:85:56:59:b2:f8:cc:18:ed:8c:a6:00:22:eb: 6a:4e:c3:35:58:67:a7:c3:c2:cb:7f:45:ef:dc:8a:0f:13:78: b0:9d:79:e2:31:b3:34:39:c1:92:34:40:b1:a9:d4:28:54:08: b1:63:d2:c2:bf:c2:a2:57:5d:6d:a5:77:c6:95:f0:31:f7:ec: f7:9a:03:74:42:a7:72:c2:de:41:8a:7b:61:8d:d9:8f:8f:d8: 7a:d9:c6:3a:46:98:5b:08:cb:4d:9f:0e:11:ce:b2:73:97:7f: 19:57:4e:60:9d:83:60:fa:51:43:27:db:1f:39:66:58:f9:84: 09:1f:90:4f:3b:0c:73:13:1e:23:9a:a2:73:44:a3:c4:ea:50: 27:32:f0:c8:01:3d:50:fc:98:6c:5e:de:99:b9:ef:f6:c6:57: 9f:52:89:20:c7:66:1f:38:8a:5e:ce:31:43:80:7a:67:ca:a0: d5:33:28:af:29:49:b6:f7:a2:9a:51:d6:b7:31:fc:45:71:dd: 16:89:b8:cf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFWOmJI5YJaRvTTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEyNDAxN1oXDTI1MDUwNTExNDAxN1owLzEtMCsGA1UEAxMk YzliZjc5YjMtYjZhZS00MTIyLTlkNWUtMWRlNDRhMDE2ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs42UX9fj5PtCMS7OlGXz3SnuHJE7wRa4Twln n3TxbH/KA2PDEMfQGLHyPh9k4CMOsPykNQECXf/ncQt+jxwwfVb4BgZGx5T86HYL uNQOmoy+J7qRGaRQbQ+jh/8WlbPWyGDha5wyNqeoZrQtjgib0gqywXTzftMMG5oS VOYyrQ0ms+ne/ipdu6Df4afjFx/LONs0HmN2f9rLjY/oibNeRif9Gmz0MqhJiEY6 7pY1rKztzDCn48q0RAa9zbc/pKxT745QYxGeYwxBmSUOJcTGJAO0Ah17j6zLgQeU OZCl2jGGZzh2V0zSCClW9w6t0hQaxyHOsRIEY89zC0alI1Y4nwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC2qc5IMIevG1CCWuCe46DuNDHu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjY2OGFkNTYtODU1ZC0z ZDhkLTlkMzEtOGY3Mjk4ZDQ5ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAT/NOqIMYrYPrJiqPBdJMvbLzYGxHbIh0Fno72eyIhLBB63Tp3X9T Q+qcV9+bl4icoktAi6oL85toDKyFVlmy+MwY7YymACLrak7DNVhnp8PCy39F79yK DxN4sJ154jGzNDnBkjRAsanUKFQIsWPSwr/ColddbaV3xpXwMffs95oDdEKncsLe QYp7YY3Zj4/YetnGOkaYWwjLTZ8OEc6yc5d/GVdOYJ2DYPpRQyfbHzlmWPmECR+Q TzsMcxMeI5qic0SjxOpQJzLwyAE9UPyYbF7embnv9sZXn1KJIMdmHziKXs4xQ4B6 Z8qg1TMorylJtveimlHWtzH8RXHdFom4zw== -----END CERTIFICATE-----Generated at Wed Apr 9 00:27:14 2025 by rpki-client