$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa File: ec89997a-3ac7-3b00-9699-5bf074cf743e.roa (raw, json) Hash identifier: uvSBQGiCRBDQOpbZsrxBI3Z8sfqCF2uUX7Pj+dcC9C8= Subject key identifier: 99:2C:06:F0:A6:4A:91:43:17:87:3C:54:F4:99:1C:73:A5:6D:4C:70 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C580162EF0F7878DC979B2D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa Signing time: Tue 04 Feb 2025 13:59:13 +0000 ROA not before: Tue 04 Feb 2025 13:59:13 +0000 ROA not after: Mon 05 May 2025 12:59:13 +0000 asID: 30036 IP address blocks: 2604:2e89:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:16:2e:f0:f7:87:8d:c9:79:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 13:59:13 2025 GMT Not After : May 5 12:59:13 2025 GMT Subject: CN=f9afc658-a951-416f-b6a2-ddc6fee9c636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:ff:3e:5a:e0:8f:26:e3:bf:96:78:1d:3d: 12:23:25:a8:12:fe:ea:ae:f6:7a:4e:8f:7d:19:8d: 76:56:b8:45:bf:77:9c:db:81:a2:8e:3d:a0:59:8d: b6:ff:d2:fb:bb:4e:bb:5d:48:58:be:f7:f0:59:de: 32:8d:c6:06:63:3f:6f:ef:3d:33:dd:c1:3e:be:b4: 66:ca:20:ab:b6:7b:63:63:63:88:48:69:1a:d2:53: 8a:10:bc:1f:bf:87:13:cb:d6:ac:a5:7a:a3:65:2b: ab:2c:8b:24:c8:b4:1e:30:0c:fd:bd:36:44:25:e4: f6:57:85:29:3d:cc:0f:57:98:d5:1f:40:aa:45:5d: 94:e7:e8:5b:04:5a:7f:02:8d:60:75:00:d6:f2:28: e1:de:3e:f0:ee:cf:e1:4d:79:76:4a:67:3a:62:47: 5d:06:38:6c:a7:2d:c5:3c:79:42:b2:1e:72:81:4f: 45:83:79:95:a5:85:ce:7d:09:ee:17:24:2c:11:66: f7:b3:bb:7e:3f:05:04:b4:16:a3:49:59:ab:d7:25: b4:94:80:f7:cd:66:33:d2:41:ae:97:50:95:0f:fd: 8c:40:57:da:b3:38:3b:a9:94:b8:e6:f7:46:43:1c: 1d:01:b5:3e:6c:d0:3d:4a:c0:11:46:f6:7b:0e:f2: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:06:F0:A6:4A:91:43:17:87:3C:54:F4:99:1C:73:A5:6D:4C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:51:33:46:ec:91:45:8b:d2:db:64:4f:62:8d:8f:74:33:16: c8:ed:8c:a5:22:c3:3b:c1:a6:8d:d2:bf:45:81:ae:b3:9c:0a: e9:88:91:ba:09:e6:16:70:57:2d:df:4f:b4:e5:a0:aa:29:c9: b2:a4:76:ed:db:32:48:12:01:15:91:59:6f:4b:6d:85:42:aa: 72:83:95:81:8f:cb:55:c5:17:22:f3:80:8c:2d:56:f8:43:0a: 77:f5:74:6d:6a:a6:18:5c:13:5d:35:f3:8f:40:3a:4f:56:e2: 05:5d:21:37:a0:bd:c7:dd:5d:53:79:6a:4f:26:84:97:03:e1: a9:b1:24:a4:34:47:2a:2d:40:14:46:93:a7:06:ce:59:10:05: 78:3f:4b:0a:27:9e:16:0d:ee:77:71:ec:8e:da:93:4f:47:be: 6a:30:1e:cf:a2:b4:b9:dd:77:52:8d:85:7a:8d:57:8c:d8:69: 55:ab:cd:e1:50:16:e3:39:67:36:74:eb:80:d4:8c:1e:3f:da: 3c:81:8c:c4:84:00:3f:b4:0c:57:69:89:9e:52:1f:6b:a7:c6: 07:f1:35:45:a8:66:60:c3:43:9c:9b:26:4b:47:29:3b:c3:5b: 87:dd:88:5e:38:9f:68:7d:54:93:98:86:d4:bf:22:21:2d:b1: 41:ca:46:de -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFgBYu8PeHjcl5stAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEzNTkxM1oXDTI1MDUwNTEyNTkxM1owLzEtMCsGA1UEAxMk ZjlhZmM2NTgtYTk1MS00MTZmLWI2YTItZGRjNmZlZTljNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWD/Plrgjybjv5Z4HT0SIyWoEv7qrvZ6To99 GY12VrhFv3ec24Gijj2gWY22/9L7u067XUhYvvfwWd4yjcYGYz9v7z0z3cE+vrRm yiCrtntjY2OISGka0lOKELwfv4cTy9aspXqjZSurLIskyLQeMAz9vTZEJeT2V4Up PcwPV5jVH0CqRV2U5+hbBFp/Ao1gdQDW8ijh3j7w7s/hTXl2Smc6YkddBjhspy3F PHlCsh5ygU9Fg3mVpYXOfQnuFyQsEWb3s7t+PwUEtBajSVmr1yW0lID3zWYz0kGu l1CVD/2MQFfaszg7qZS45vdGQxwdAbU+bNA9SsARRvZ7DvLxUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJksBvCmSpFDF4c8VPSZHHOlbUxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWM4OTk5N2EtM2FjNy0z YjAwLTk2OTktNWJmMDc0Y2Y3NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALFEzRuyRRYvS22RPYo2PdDMWyO2MpSLDO8GmjdK/RYGus5wK6YiR ugnmFnBXLd9PtOWgqinJsqR27dsySBIBFZFZb0tthUKqcoOVgY/LVcUXIvOAjC1W +EMKd/V0bWqmGFwTXTXzj0A6T1biBV0hN6C9x91dU3lqTyaElwPhqbEkpDRHKi1A FEaTpwbOWRAFeD9LCieeFg3ud3HsjtqTT0e+ajAez6K0ud13Uo2Feo1XjNhpVavN 4VAW4zlnNnTrgNSMHj/aPIGMxIQAP7QMV2mJnlIfa6fGB/E1RahmYMNDnJsmS0cp O8Nbh92IXjifaH1Uk5iG1L8iIS2xQcpG3g== -----END CERTIFICATE-----Generated at Tue Apr 8 23:58:43 2025 by rpki-client