$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa File: e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa (raw, json) Hash identifier: jpXNsEAOR7L7GoTE+IUee1TQGpZC0CsEQH5P7ZqUXnQ= Subject key identifier: BC:AE:70:2F:A0:C0:17:93:A6:4A:E8:84:03:DB:78:9A:41:CC:F5:59 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849194176DCB1A72A1EFAB9CF80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 2604:2e88:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:76:dc:b1:a7:2a:1e:fa:b9:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=d9eff683-7afe-4f69-b9bb-a894086796ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:43:64:32:27:81:bd:08:b5:b5:f1:2c:86: 77:f4:37:8f:39:e8:0c:fc:a3:ad:cb:67:75:f9:67: 22:89:21:62:0e:26:b2:e7:70:fb:5d:94:01:78:e7: 2e:e1:3d:50:a3:0c:7e:e2:d4:ce:ef:d7:94:69:74: a3:1a:c0:dc:57:6f:d7:54:c7:f1:23:87:4a:d4:ae: 7b:6c:a3:a3:39:87:82:83:47:3c:54:79:6f:4b:da: 8d:d1:b2:42:c2:5c:4c:ec:81:e2:ce:fe:9c:f1:a8: ea:70:63:f1:a6:5d:03:14:c9:61:8b:2f:93:d4:81: a3:f3:91:85:46:e2:f4:37:37:18:92:b9:75:e2:a5: dd:9b:4f:79:e3:ff:7d:b8:50:87:39:51:17:51:cc: 83:0e:bf:2e:87:08:27:b6:4b:4e:10:71:bf:35:8e: 48:80:a3:ec:36:2d:bc:6a:7f:e3:7a:35:a4:05:97: 6b:20:db:d3:1b:30:81:ee:ca:ae:01:0e:e3:ef:15: af:3e:6f:18:8e:8d:17:b2:6f:f4:b6:b4:1c:6e:fd: 77:f2:11:a6:6e:8a:41:c3:f9:4c:ce:a5:d5:85:3a: 0f:3f:c1:a0:45:98:15:ed:41:0e:a5:44:6f:3e:1b: 02:58:44:41:0c:cf:d5:e3:c5:56:be:fc:14:8e:a4: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AE:70:2F:A0:C0:17:93:A6:4A:E8:84:03:DB:78:9A:41:CC:F5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:94:4a:b0:62:4a:f8:7b:7c:b1:7c:11:62:e5:34:0d:47:45: 34:84:03:ce:f6:d6:7b:34:94:66:06:0f:b5:26:de:f8:af:10: d8:b4:58:b1:58:37:5f:d1:9c:34:b5:c2:96:19:e2:02:33:90: 85:24:0a:d3:04:14:c5:e0:91:94:eb:76:6b:c8:df:8c:a0:f0: 47:89:bb:94:6a:9d:36:05:b3:1a:00:47:0b:b3:51:0c:43:c6: 1c:0d:ac:59:fb:af:62:80:93:77:7a:a2:3a:b5:f0:2c:c5:a5: 3b:c0:0f:6a:12:ab:28:88:34:f7:97:26:0a:1f:05:b8:a5:b1: 0d:a9:62:c3:ac:b1:5c:0e:00:8d:8a:ec:d2:3a:7b:8a:d3:57: ae:ed:e6:e4:61:0e:6f:6f:4a:c6:7d:7c:1f:3e:a7:4a:0b:d1: 5e:33:88:3a:b5:c5:ca:c0:84:d6:64:3b:ad:bf:b8:ec:ac:00: bb:14:d3:b6:4d:1a:32:d9:f0:bf:d1:be:59:5d:01:9a:08:33: 22:fb:70:47:26:dc:b7:28:77:e8:bb:91:ff:08:b7:b3:d0:01: 37:4e:f0:86:7b:57:a0:5e:bd:d6:1f:3a:6d:cf:d1:d0:21:6d: 36:c7:3e:27:1f:0e:c7:6f:1d:6b:f9:96:06:2e:44:d1:36:fb: 27:10:f7:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkZQXbcsacqHvq5z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDllZmY2ODMtN2FmZS00ZjY5LWI5YmItYTg5NDA4Njc5NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFhDZDIngb0ItbXxLIZ39DePOegM/KOty2d1 +WciiSFiDiay53D7XZQBeOcu4T1Qowx+4tTO79eUaXSjGsDcV2/XVMfxI4dK1K57 bKOjOYeCg0c8VHlvS9qN0bJCwlxM7IHizv6c8ajqcGPxpl0DFMlhiy+T1IGj85GF RuL0NzcYkrl14qXdm0954/99uFCHOVEXUcyDDr8uhwgntktOEHG/NY5IgKPsNi28 an/jejWkBZdrINvTGzCB7squAQ7j7xWvPm8Yjo0Xsm/0trQcbv138hGmbopBw/lM zqXVhToPP8GgRZgV7UEOpURvPhsCWERBDM/V48VWvvwUjqRDrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLyucC+gwBeTpkrohAPbeJpBzPVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZThmMWFkNTYtZTRjZi0z NmU4LWI3MzktMTBiYWFmMDllMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJpRKsGJK+Ht8sXwRYuU0DUdFNIQDzvbWezSUZgYPtSbe+K8Q2LRY sVg3X9GcNLXClhniAjOQhSQK0wQUxeCRlOt2a8jfjKDwR4m7lGqdNgWzGgBHC7NR DEPGHA2sWfuvYoCTd3qiOrXwLMWlO8APahKrKIg095cmCh8FuKWxDaliw6yxXA4A jYrs0jp7itNXru3m5GEOb29Kxn18Hz6nSgvRXjOIOrXFysCE1mQ7rb+47KwAuxTT tk0aMtnwv9G+WV0BmggzIvtwRybctyh36LuR/wi3s9ABN07whntXoF691h86bc/R 0CFtNsc+Jx8Ox28da/mWBi5E0Tb7JxD3AQ== -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:30 2025 by rpki-client