$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa File: c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa (raw, json) Hash identifier: x0LlgKrtS8hPIKmX7KHSBllvF7PZYe83r0glvguK6+0= Subject key identifier: A1:0C:C8:4E:BE:5B:C4:33:0C:B6:DC:73:B0:51:76:CC:AF:1E:4B:D8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848B62967ECC6EF4DE16E599E88 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa Signing time: Thu 30 Jan 2025 02:07:26 +0000 ROA not before: Thu 30 Jan 2025 02:07:26 +0000 ROA not after: Wed 30 Apr 2025 01:07:26 +0000 asID: 30036 IP address blocks: 2604:2e8d:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:29:67:ec:c6:ef:4d:e1:6e:59:9e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 30 02:07:26 2025 GMT Not After : Apr 30 01:07:26 2025 GMT Subject: CN=07dc9b99-a344-4095-bab9-e03da799f942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:05:48:45:d7:b4:9b:e6:39:44:c3:ba:66: 41:6d:70:33:58:76:61:e9:35:23:e2:30:7e:55:91: e5:07:35:20:1f:b9:4c:b5:42:6e:e4:9c:5f:fb:63: 0f:32:d3:0a:71:d7:8e:45:41:c2:d6:ff:44:dc:bc: d9:49:85:7e:3d:13:93:b8:08:3d:f0:ef:a4:fa:7d: 16:17:23:88:a1:64:25:1f:31:a7:8c:64:86:5e:c2: 75:ed:a8:a4:70:d1:f1:f8:7b:df:a3:67:df:5e:9c: 04:6f:7e:2b:37:bf:04:c2:4e:50:ad:44:1e:54:0a: b6:64:c0:d8:d1:a5:b2:cb:26:cc:d2:7e:4a:5f:2a: 7f:3c:05:0d:3f:5f:63:75:3f:45:6a:1b:f5:dd:94: 81:33:a3:a6:a0:d1:66:f7:66:ba:0d:11:09:5a:91: b3:f3:01:4b:81:31:17:ff:52:e0:92:70:6b:fc:cb: fe:f9:bf:f0:58:10:6f:a4:a9:04:37:b1:b6:07:7c: 6c:11:0a:ec:c3:07:91:1c:1f:b2:ae:27:c5:0a:7f: bc:ed:9d:b9:fa:13:d5:76:8b:71:c1:61:9e:fa:fc: 29:48:68:7e:39:54:f4:22:42:df:fe:bc:26:3a:9b: 51:c4:c2:74:1a:b8:f6:52:77:82:f8:5f:cd:c2:83: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0C:C8:4E:BE:5B:C4:33:0C:B6:DC:73:B0:51:76:CC:AF:1E:4B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2f35f4a-2a18-38ad-99a2-b21c4a451e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2d:2f:46:a4:e5:75:6e:72:90:4c:81:d9:3a:f5:63:da:f8: 97:c1:4c:91:01:3c:d9:8c:02:9e:dd:47:2d:73:30:5a:58:96: b0:9e:cf:6b:10:6e:67:2d:d2:9c:62:e7:8e:bc:87:c6:53:f7: fd:ec:0a:36:27:a6:5d:90:00:79:2f:77:84:07:eb:80:ce:20: 64:a4:f5:fd:7e:8c:80:29:13:de:bd:f3:79:7e:8a:b6:cd:ec: 70:75:0b:36:a6:e6:0f:4f:ed:cc:9d:82:98:49:bf:ee:e7:72: c2:eb:28:50:39:03:ea:74:46:36:97:8a:0c:a1:1d:52:ec:b1: 33:c0:b0:29:20:f0:30:47:af:fa:f6:db:a9:c2:89:d8:9f:3c: 1e:30:57:6c:2f:ac:86:e2:62:7c:1e:af:da:7a:1b:1a:d3:0d: 48:a5:87:04:f1:33:de:f1:ba:b4:cf:74:91:5f:0c:72:de:26: ab:d4:03:15:50:38:b1:f9:0c:1b:79:2b:27:dd:b2:c7:00:21: a8:91:64:5e:74:6c:8c:42:db:06:e8:7e:74:12:dd:bf:c6:22: c5:4a:ff:e5:34:a9:47:7e:67:05:3f:82:41:ba:e4:54:98:c6: 5e:37:bc:ca:1c:a1:82:8c:3b:2d:92:e6:3c:9c:3a:74:7d:6c: 0c:72:ee:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi2KWfsxu9N4W5ZnogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDEzMDAyMDcyNloXDTI1MDQzMDAxMDcyNlowLzEtMCsGA1UEAxMk MDdkYzliOTktYTM0NC00MDk1LWJhYjktZTAzZGE3OTlmOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurMFSEXXtJvmOUTDumZBbXAzWHZh6TUj4jB+ VZHlBzUgH7lMtUJu5Jxf+2MPMtMKcdeORUHC1v9E3LzZSYV+PROTuAg98O+k+n0W FyOIoWQlHzGnjGSGXsJ17aikcNHx+Hvfo2ffXpwEb34rN78Ewk5QrUQeVAq2ZMDY 0aWyyybM0n5KXyp/PAUNP19jdT9Fahv13ZSBM6OmoNFm92a6DREJWpGz8wFLgTEX /1LgknBr/Mv++b/wWBBvpKkEN7G2B3xsEQrswweRHB+yrifFCn+87Z25+hPVdotx wWGe+vwpSGh+OVT0IkLf/rwmOptRxMJ0Grj2UneC+F/NwoOdwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKEMyE6+W8QzDLbcc7BRdsyvHkvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzJmMzVmNGEtMmExOC0z OGFkLTk5YTItYjIxYzRhNDUxZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujaQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABi0vRqTldW5ykEyB2Tr1Y9r4l8FMkQE82YwCnt1HLXMwWliWsJ7P axBuZy3SnGLnjryHxlP3/ewKNiemXZAAeS93hAfrgM4gZKT1/X6MgCkT3r3zeX6K ts3scHULNqbmD0/tzJ2CmEm/7udywusoUDkD6nRGNpeKDKEdUuyxM8CwKSDwMEev +vbbqcKJ2J88HjBXbC+shuJifB6v2nobGtMNSKWHBPEz3vG6tM90kV8Mct4mq9QD FVA4sfkMG3krJ92yxwAhqJFkXnRsjELbBuh+dBLdv8YixUr/5TSpR35nBT+CQbrk VJjGXje8yhyhgow7LZLmPJw6dH1sDHLuCQ== -----END CERTIFICATE-----Generated at Tue Apr 8 23:56:28 2025 by rpki-client