$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa File: c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa (raw, json) Hash identifier: VQ36W+QUdWth58fLy8bpf+ZTS1l6+7btsZKkNplepPo= Subject key identifier: AF:C0:6D:11:0D:15:AB:53:E8:0E:82:BF:DD:8A:16:A5:99:11:E5:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C5346035DFD6A31957FA6F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa Signing time: Tue 04 Feb 2025 11:26:40 +0000 ROA not before: Tue 04 Feb 2025 11:26:40 +0000 ROA not after: Mon 05 May 2025 10:26:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:e800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:60:35:df:d6:a3:19:57:fa:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 11:26:40 2025 GMT Not After : May 5 10:26:40 2025 GMT Subject: CN=b92bf860-8929-4ea6-8c55-23f3de369b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:e7:ae:19:0f:2d:6a:88:d7:65:62:ea:77: b9:4c:e2:dc:a5:59:06:c8:d2:27:23:9f:59:af:a6: 31:ee:7d:dd:4a:b0:f2:0d:90:12:97:e5:38:45:c5: 0a:e0:27:4f:f8:8d:ba:c6:85:fb:c5:8d:f9:66:13: a2:52:f5:89:7d:a7:b0:8a:a0:a5:cc:8c:22:77:47: 67:fb:6b:b4:b3:92:6e:bd:74:5e:33:61:7f:08:e9: 17:08:e7:9d:be:05:9f:a0:4f:f5:56:49:9b:67:d6: 09:8a:67:3d:db:eb:da:0b:b1:32:ab:44:94:57:55: 5c:bb:28:8f:87:68:37:80:f1:0c:36:08:a7:5e:0f: a1:f8:ab:b7:4e:ab:77:d1:7f:12:d4:5c:84:bc:9b: 74:e3:fc:4a:a1:10:4b:61:30:fa:ca:2a:ba:1b:48: a1:67:7f:f3:01:01:da:38:9b:1d:86:88:5f:70:7a: 3c:eb:8f:a4:99:54:37:6c:04:33:8c:6e:e5:a2:70: 4d:1a:b0:11:8d:80:b1:da:f9:e2:6b:fe:53:86:27: 9d:d7:e5:03:75:00:d5:d7:49:22:d4:fb:97:d9:fe: 19:ab:8b:30:85:01:e1:7e:0a:c1:dd:70:11:63:d7: e1:c1:ea:b3:1f:53:d2:93:11:9c:01:26:29:ee:bc: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:6D:11:0D:15:AB:53:E8:0E:82:BF:DD:8A:16:A5:99:11:E5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:e800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:97:ce:32:f6:ce:67:ef:14:e5:6d:48:36:f6:37:83:24:d8: ce:49:6a:dc:55:4d:c5:67:44:61:bf:f8:b7:9c:15:f7:c1:c0: ca:fa:d8:39:3c:94:90:8b:0f:fd:b6:05:2c:4f:36:29:1b:6f: 62:db:95:13:fe:ce:2c:76:f8:af:6b:ea:b1:b2:c1:37:16:ff: 89:51:81:a7:22:6a:96:bf:bd:be:b8:6a:fc:49:b9:b7:3f:7d: a8:ce:b7:04:61:49:ee:7f:13:a8:46:0b:94:30:2e:bb:84:48: ac:a8:40:4d:e7:b3:02:a1:45:e0:26:e4:a8:60:6a:06:92:e2: ee:00:61:a7:70:42:ed:e0:48:a8:45:c4:46:a7:9e:52:b8:a7: 21:15:92:51:22:fa:0f:61:00:55:c5:e8:15:5d:a0:a9:cf:5f: 6f:79:2c:6b:47:bb:3b:24:2a:a4:e9:b9:cb:1b:f6:8c:47:75: 97:cf:07:c7:e3:68:30:06:2d:4b:b3:2a:f3:8f:39:12:66:61: 98:e2:f1:98:dc:1b:a2:f3:f4:72:2c:4c:a0:71:fe:7c:d8:d4: 08:78:9e:0b:58:e6:e3:73:22:34:fd:bd:0f:38:61:6b:4d:40: fd:de:94:26:02:b1:10:12:d4:f0:91:66:c5:de:46:ec:e1:ab: 57:34:c6:ee -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFNGA139ajGVf6bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDExMjY0MFoXDTI1MDUwNTEwMjY0MFowLzEtMCsGA1UEAxMk YjkyYmY4NjAtODkyOS00ZWE2LThjNTUtMjNmM2RlMzY5YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnETnrhkPLWqI12Vi6ne5TOLcpVkGyNInI59Z r6Yx7n3dSrDyDZASl+U4RcUK4CdP+I26xoX7xY35ZhOiUvWJfaewiqClzIwid0dn +2u0s5JuvXReM2F/COkXCOedvgWfoE/1VkmbZ9YJimc92+vaC7Eyq0SUV1VcuyiP h2g3gPEMNginXg+h+Ku3Tqt30X8S1FyEvJt04/xKoRBLYTD6yiq6G0ihZ3/zAQHa OJsdhohfcHo864+kmVQ3bAQzjG7lonBNGrARjYCx2vnia/5Thied1+UDdQDV10ki 1PuX2f4Zq4swhQHhfgrB3XARY9fhweqzH1PSkxGcASYp7rxtjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK/AbRENFatT6A6Cv92KFqWZEeVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzljNGU5NTgtNmVjYi0z ZTUzLTgzYjctMjhhNWZmNzQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiugw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEZfOMvbOZ+8U5W1INvY3gyTYzklq3FVNxWdEYb/4t5wV98HAyvrY OTyUkIsP/bYFLE82KRtvYtuVE/7OLHb4r2vqsbLBNxb/iVGBpyJqlr+9vrhq/Em5 tz99qM63BGFJ7n8TqEYLlDAuu4RIrKhATeezAqFF4CbkqGBqBpLi7gBhp3BC7eBI qEXERqeeUrinIRWSUSL6D2EAVcXoFV2gqc9fb3ksa0e7OyQqpOm5yxv2jEd1l88H x+NoMAYtS7Mq8485EmZhmOLxmNwbovP0cixMoHH+fNjUCHieC1jm43MiNP29Dzhh a01A/d6UJgKxEBLU8JFmxd5G7OGrVzTG7g== -----END CERTIFICATE-----Generated at Tue Apr 8 23:56:22 2025 by rpki-client