$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa File: e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa (raw, json) Hash identifier: vLrDRTfPqQ0mKYpeins84nFjR8DGdKsI8TFxVTLI5Bk= Subject key identifier: 53:8C:64:F5:11:4E:8B:E8:07:37:20:18:FD:F5:F5:5B:00:E2:DD:2E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849134FCE8E070861C0EFD4DA80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa Signing time: Tue 04 Mar 2025 10:54:59 +0000 ROA not before: Tue 04 Mar 2025 10:54:59 +0000 ROA not after: Mon 02 Jun 2025 09:54:59 +0000 asID: 30036 IP address blocks: 2604:2e8c:6c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:4f:ce:8e:07:08:61:c0:ef:d4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 4 10:54:59 2025 GMT Not After : Jun 2 09:54:59 2025 GMT Subject: CN=b9184ebc-7126-4e10-9b5d-d601a7aa4604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:82:d7:9d:81:c2:35:f8:bd:bc:c3:a0:15: 15:dd:57:51:26:d3:9f:dc:7a:83:a6:10:40:82:b8: 42:04:dd:0f:17:cf:d8:8c:f4:55:23:54:7b:d0:55: da:6a:03:67:c8:8b:70:22:b1:ad:42:a8:a7:c9:9e: 16:09:f5:52:c0:8b:71:7a:52:01:c0:ef:36:ad:59: a9:ef:2f:8d:83:03:50:d4:a6:26:59:a9:aa:69:49: 20:65:4f:be:1e:f6:fa:14:c3:2f:1d:0e:55:12:6e: 4b:ee:e4:3a:f2:09:3c:39:b2:af:9f:c9:73:7e:62: 30:6c:69:d9:e7:fe:13:32:40:ac:90:d8:ac:64:2b: ee:15:cf:f2:9a:61:74:a0:3c:c4:aa:e3:09:3a:d5: 5e:ff:03:cd:ad:2b:e7:e0:10:32:6e:77:47:6d:d3: fd:26:33:02:e9:ac:22:ff:90:21:ab:98:ab:7d:e8: d3:99:70:c3:88:59:16:9e:d5:f7:15:be:84:42:49: e9:e3:7c:d8:07:81:00:15:5a:80:8b:82:57:df:92: ec:13:ab:d3:ae:a0:e2:d1:7e:44:d4:b1:1b:a7:60: 44:e5:5b:0e:36:76:12:ba:c6:e8:2c:1c:7b:8b:00: bb:56:d5:0b:e4:94:83:8c:93:0e:5a:35:c0:fa:84: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:64:F5:11:4E:8B:E8:07:37:20:18:FD:F5:F5:5B:00:E2:DD:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:6c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c8:50:cf:01:cb:4c:c6:44:6e:46:0e:ff:13:fc:49:f2:a4: 39:83:dc:9d:61:dc:aa:05:8c:47:b3:c4:58:a9:47:f4:b3:2c: 37:e2:c5:db:09:e7:81:2c:e5:6a:9f:56:74:09:0c:70:e6:0c: 88:73:3a:02:16:de:3e:10:89:5b:b9:6c:5a:e2:70:0c:25:93: c8:a9:be:39:a3:f3:1b:ce:51:db:04:e2:1a:f6:f0:b5:4d:2e: 5c:35:75:19:6c:6a:64:33:d3:c1:e8:d9:e8:6d:45:2d:10:eb: 9a:73:23:51:5d:12:66:a5:79:4e:ed:7e:6f:f4:2d:a9:09:21: bb:2e:b3:70:be:3d:ed:a3:20:dd:47:27:00:cf:bd:9e:18:05: 35:ce:57:1c:8e:1b:67:a2:a5:77:bf:f8:70:0a:ed:d1:7b:84: 40:ba:85:77:ce:2a:0d:9f:10:fe:45:87:fa:fb:be:d5:34:b9: f7:66:3a:49:8f:97:8e:86:8a:52:8a:5e:d2:52:61:10:3e:e7: 6f:a8:76:c0:6a:fe:33:cf:de:d8:05:3f:d3:69:6c:9f:db:b4: b0:78:d5:37:38:8a:dc:dd:9a:45:f7:ab:88:47:c4:ea:63:2b: 92:4d:4f:78:9c:85:b0:d8:1c:00:64:e6:be:37:d3:f8:ef:48: 20:f7:b8:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT86OBwhhwO/U2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNDEwNTQ1OVoXDTI1MDYwMjA5NTQ1OVowLzEtMCsGA1UEAxMk YjkxODRlYmMtNzEyNi00ZTEwLTliNWQtZDYwMWE3YWE0NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oGC152BwjX4vbzDoBUV3VdRJtOf3HqDphBA grhCBN0PF8/YjPRVI1R70FXaagNnyItwIrGtQqinyZ4WCfVSwItxelIBwO82rVmp 7y+NgwNQ1KYmWamqaUkgZU++Hvb6FMMvHQ5VEm5L7uQ68gk8ObKvn8lzfmIwbGnZ 5/4TMkCskNisZCvuFc/ymmF0oDzEquMJOtVe/wPNrSvn4BAybndHbdP9JjMC6awi /5Ahq5irfejTmXDDiFkWntX3Fb6EQknp43zYB4EAFVqAi4JX35LsE6vTrqDi0X5E 1LEbp2BE5VsONnYSusboLBx7iwC7VtUL5JSDjJMOWjXA+oRzsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFOMZPURTovoBzcgGP319VsA4t0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTAyMWE4YzEtYTJmMi0z NDA1LThhMzUtYzgyMGZlNTk2YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujGww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJMhQzwHLTMZEbkYO/xP8SfKkOYPcnWHcqgWMR7PEWKlH9LMsN+LF 2wnngSzlap9WdAkMcOYMiHM6AhbePhCJW7lsWuJwDCWTyKm+OaPzG85R2wTiGvbw tU0uXDV1GWxqZDPTwejZ6G1FLRDrmnMjUV0SZqV5Tu1+b/QtqQkhuy6zcL497aMg 3UcnAM+9nhgFNc5XHI4bZ6Kld7/4cArt0XuEQLqFd84qDZ8Q/kWH+vu+1TS592Y6 SY+XjoaKUope0lJhED7nb6h2wGr+M8/e2AU/02lsn9u0sHjVNziK3N2aRferiEfE 6mMrkk1PeJyFsNgcAGTmvjfT+O9IIPe4qw== -----END CERTIFICATE-----Generated at Wed Apr 9 00:03:38 2025 by rpki-client