$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa File: be5d2c8a-54d2-398d-a73b-78031c15b211.roa (raw, json) Hash identifier: Ek155QygoaEYeuiWNhNY+5y10CpbpFL7V4JY2l7iav8= Subject key identifier: 5D:E3:A0:6A:CE:D5:CD:02:E3:87:C6:B7:D3:BF:F1:A0:CB:19:89:18 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848B7378D9121C0BE258AC2FD80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa Signing time: Thu 30 Jan 2025 11:11:45 +0000 ROA not before: Thu 30 Jan 2025 11:11:45 +0000 ROA not after: Wed 30 Apr 2025 10:11:45 +0000 asID: 30036 IP address blocks: 2604:2e8b:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:8d:91:21:c0:be:25:8a:c2:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 30 11:11:45 2025 GMT Not After : Apr 30 10:11:45 2025 GMT Subject: CN=2d002e04-ff0b-4a0a-afa1-3e709de55d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:bc:52:bb:56:57:da:bd:39:a0:58:df:8b: 7e:65:c8:6b:1a:0a:fc:2b:29:5c:f8:79:08:49:99: b2:e4:94:77:38:cd:a9:d2:83:ea:5f:3c:1d:32:d3: 56:a1:15:2a:0c:0c:29:c5:a4:28:5c:28:c2:11:06: f6:8d:84:14:d0:44:e6:6d:30:ec:5f:f8:f3:a6:21: 3b:cf:ec:e7:97:bf:0f:20:1b:c3:9e:80:fd:9d:55: bf:b6:b7:ed:bd:e7:17:77:d8:d3:5b:d3:98:6a:e6: f3:26:00:34:da:80:85:ea:3d:e4:1c:ef:2a:bb:4c: 46:1f:84:51:63:5a:97:72:b1:08:c7:6f:79:71:4d: 21:7d:1f:f4:09:0f:98:34:56:8a:83:1c:1a:ce:39: cb:fd:2c:14:0e:70:93:59:ee:48:47:70:38:eb:f6: 16:05:ee:9a:3b:28:08:a5:8c:2c:8e:ec:67:56:62: 57:1f:db:df:ef:0a:fc:3d:91:11:75:ce:8f:7a:fa: bf:d7:eb:b8:01:3b:41:f3:1c:80:c3:6b:6b:93:86: f8:ff:14:6e:20:10:9f:ed:fa:10:ef:27:b2:ef:a9: 19:48:66:de:27:a4:9a:0f:dd:7a:ea:fc:be:1b:78: 42:bf:5a:15:14:c5:3a:10:5f:f4:aa:5b:22:8e:09: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:A0:6A:CE:D5:CD:02:E3:87:C6:B7:D3:BF:F1:A0:CB:19:89:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be5d2c8a-54d2-398d-a73b-78031c15b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:33:ec:cd:c7:03:bd:3f:77:c6:7b:c1:fe:56:7c:05:dc:de: 25:ec:e0:63:2a:c6:73:82:74:aa:09:18:07:f7:ca:52:b9:59: 3d:c7:88:7a:91:ea:8b:e9:2d:a1:fc:50:8a:0a:33:e0:6b:bd: 49:8d:fb:49:c2:e5:a0:2d:fe:ce:85:a4:6f:87:3e:49:f0:ab: 53:1c:1b:d9:dc:82:4f:c5:bd:21:58:1c:ab:fe:20:e3:00:d6: 82:f6:fd:e4:2b:bd:8a:73:9a:9f:bc:e8:bd:82:60:fc:52:c9: 92:37:f4:1e:40:bb:f9:b0:00:62:b4:8b:d7:eb:3b:d8:3b:0b: 96:3e:58:71:97:99:5c:5d:ba:be:16:f6:1d:5c:c6:ca:8a:1f: a8:77:23:54:d7:7b:0f:b7:97:42:43:4a:69:de:9a:4c:6b:7b: a0:8f:4c:06:ab:1d:4b:21:e1:da:32:65:83:ea:34:19:31:51: 00:d0:fa:09:f3:3f:97:4b:d6:09:fc:66:61:23:75:34:53:42: 12:e7:1b:29:0e:20:ef:1e:bf:bb:45:ea:a7:94:f1:5d:8c:2a: 6e:84:86:4f:d2:35:c4:c4:55:e4:a7:b1:12:70:18:02:25:b0: 17:0c:5f:5f:69:cf:7a:27:1c:5c:29:a5:56:94:69:e9:2f:ed: 6a:2d:cd:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N42RIcC+JYrC/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDEzMDExMTE0NVoXDTI1MDQzMDEwMTE0NVowLzEtMCsGA1UEAxMk MmQwMDJlMDQtZmYwYi00YTBhLWFmYTEtM2U3MDlkZTU1ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVu8UrtWV9q9OaBY34t+ZchrGgr8Kylc+HkI SZmy5JR3OM2p0oPqXzwdMtNWoRUqDAwpxaQoXCjCEQb2jYQU0ETmbTDsX/jzpiE7 z+znl78PIBvDnoD9nVW/trftvecXd9jTW9OYaubzJgA02oCF6j3kHO8qu0xGH4RR Y1qXcrEIx295cU0hfR/0CQ+YNFaKgxwazjnL/SwUDnCTWe5IR3A46/YWBe6aOygI pYwsjuxnVmJXH9vf7wr8PZERdc6Pevq/1+u4ATtB8xyAw2trk4b4/xRuIBCf7foQ 7yey76kZSGbeJ6SaD9166vy+G3hCv1oVFMU6EF/0qlsijgkE6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF3joGrO1c0C44fGt9O/8aDLGYkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU1ZDJjOGEtNTRkMi0z OThkLWE3M2ItNzgwMzFjMTViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOTPszccDvT93xnvB/lZ8BdzeJezgYyrGc4J0qgkYB/fKUrlZPceI epHqi+ktofxQigoz4Gu9SY37ScLloC3+zoWkb4c+SfCrUxwb2dyCT8W9IVgcq/4g 4wDWgvb95Cu9inOan7zovYJg/FLJkjf0HkC7+bAAYrSL1+s72DsLlj5YcZeZXF26 vhb2HVzGyoofqHcjVNd7D7eXQkNKad6aTGt7oI9MBqsdSyHh2jJlg+o0GTFRAND6 CfM/l0vWCfxmYSN1NFNCEucbKQ4g7x6/u0Xqp5TxXYwqboSGT9I1xMRV5KexEnAY AiWwFwxfX2nPeiccXCmlVpRp6S/tai3Nyg== -----END CERTIFICATE-----Generated at Wed Apr 9 00:01:09 2025 by rpki-client