$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa File: d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa (raw, json) Hash identifier: /I4kDwcXCl1PBtYherC0AsXlNxTpJo2UNCD5f1didM8= Subject key identifier: A4:D8:C7:34:39:77:44:DE:D3:0E:05:02:76:02:06:9F:62:D2:3E:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C577FC7F9F020AD8896E75C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa Signing time: Tue 04 Feb 2025 13:42:53 +0000 ROA not before: Tue 04 Feb 2025 13:42:53 +0000 ROA not after: Mon 05 May 2025 12:42:53 +0000 asID: 30036 IP address blocks: 2604:2e8e:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:fc:7f:9f:02:0a:d8:89:6e:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 13:42:53 2025 GMT Not After : May 5 12:42:53 2025 GMT Subject: CN=fc05b2e2-3351-48e0-80cf-90c559002eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:8b:19:25:ab:48:c4:38:48:07:88:36:05: f5:a9:cf:f6:69:70:94:55:15:b0:7c:4a:2a:54:4c: 40:46:8d:9b:ad:1a:9d:c5:e8:eb:18:a8:2d:6a:86: d7:9f:37:2e:e4:04:c5:94:33:7e:c8:c3:4d:d7:00: 33:d7:e2:53:03:eb:17:b7:ce:e4:19:7a:ff:a4:62: 1b:3c:de:7c:9f:9f:29:e4:b9:02:9d:c1:5b:01:c6: ad:f5:33:06:9b:11:4e:43:36:2e:f8:8f:21:4c:b8: 98:81:3e:6f:33:ef:46:04:1a:d7:16:99:b5:b2:f3: 6b:6f:ee:d3:b6:b9:0e:07:22:69:3a:aa:b3:ab:a7: ad:fc:9b:77:86:ff:03:42:c6:51:69:24:37:07:59: 65:3f:c3:09:d0:c9:47:30:aa:21:95:76:6b:46:d0: 47:42:ab:f7:1d:85:60:06:b9:e8:42:91:f8:15:e5: 64:64:4a:32:63:5c:b7:79:c6:07:ba:b0:39:da:2f: 56:92:ba:71:28:2b:18:c6:51:2d:af:2a:34:4e:90: 42:7c:12:ba:20:40:92:8c:ce:21:88:b2:26:89:42: db:9b:b2:4c:3e:60:69:95:d5:35:e7:95:89:7d:a5: 1c:09:3d:f1:0c:5e:61:c3:16:3f:01:d5:ac:f4:47: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D8:C7:34:39:77:44:DE:D3:0E:05:02:76:02:06:9F:62:D2:3E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:27:d9:a1:b0:46:5f:1d:f1:bd:26:92:7a:0c:70:8e:e6:50: 72:cb:ae:a0:49:9d:03:30:5c:4f:d0:bc:2a:d9:b3:aa:3b:df: fe:92:92:77:ab:cb:43:63:00:a8:af:e7:62:eb:f7:f1:7d:5a: fb:cf:a2:4f:e6:97:e7:d5:fb:39:39:da:3f:28:59:dc:b0:13: ff:d3:25:65:dd:d2:61:5d:6f:24:c8:a2:ea:8a:c9:81:e3:f2: 75:2d:45:00:f7:b6:ea:5a:4f:e3:ca:b3:3b:bc:42:e9:92:f0: 23:c9:05:9f:3d:2a:81:91:7c:36:68:e1:8b:7e:5d:15:e0:1a: c3:df:f8:1e:1f:7f:70:4b:99:aa:6b:73:bc:ab:55:02:94:8b: 7e:81:e9:37:7e:c0:e0:c2:ed:17:e9:3a:c6:d2:e9:7d:f7:c2: c2:81:04:12:d9:5c:f0:68:36:d8:df:87:e2:1d:1d:d4:c8:79: 52:cc:e1:95:af:7e:d6:3f:6d:f3:48:03:c1:ba:af:f7:39:93: b8:ac:aa:ba:5b:8c:64:35:69:22:e2:89:1c:d1:12:fe:57:f1: 73:70:21:60:bf:e2:c6:89:6f:7d:6e:9f:5e:1f:2d:c1:cd:21: ce:72:43:cc:33:dd:0e:eb:1f:13:79:75:a3:32:7b:08:36:2f: d1:03:70:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd/x/nwIK2IludcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEzNDI1M1oXDTI1MDUwNTEyNDI1M1owLzEtMCsGA1UEAxMk ZmMwNWIyZTItMzM1MS00OGUwLTgwY2YtOTBjNTU5MDAyZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAGLGSWrSMQ4SAeINgX1qc/2aXCUVRWwfEoq VExARo2brRqdxejrGKgtaobXnzcu5ATFlDN+yMNN1wAz1+JTA+sXt87kGXr/pGIb PN58n58p5LkCncFbAcat9TMGmxFOQzYu+I8hTLiYgT5vM+9GBBrXFpm1svNrb+7T trkOByJpOqqzq6et/Jt3hv8DQsZRaSQ3B1llP8MJ0MlHMKohlXZrRtBHQqv3HYVg BrnoQpH4FeVkZEoyY1y3ecYHurA52i9WkrpxKCsYxlEtryo0TpBCfBK6IECSjM4h iLImiULbm7JMPmBpldU155WJfaUcCT3xDF5hwxY/AdWs9Efg0QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKTYxzQ5d0Te0w4FAnYCBp9i0j6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDFmMjY5NDItMTQ2OC0z MjMxLWE0ZWYtOGVjMmExZDk2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujhAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcifZobBGXx3xvSaSegxwjuZQcsuuoEmdAzBcT9C8Ktmzqjvf/pKS d6vLQ2MAqK/nYuv38X1a+8+iT+aX59X7OTnaPyhZ3LAT/9MlZd3SYV1vJMii6orJ gePydS1FAPe26lpP48qzO7xC6ZLwI8kFnz0qgZF8Nmjhi35dFeAaw9/4Hh9/cEuZ qmtzvKtVApSLfoHpN37A4MLtF+k6xtLpfffCwoEEEtlc8Gg22N+H4h0d1Mh5Uszh la9+1j9t80gDwbqv9zmTuKyquluMZDVpIuKJHNES/lfxc3AhYL/ixolvfW6fXh8t wc0hznJDzDPdDusfE3l1ozJ7CDYv0QNwCA== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:26 2025 by rpki-client