$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecc5b174-dff6-36f8-86a2-1ee49209bf2d.roa File: ecc5b174-dff6-36f8-86a2-1ee49209bf2d.roa (raw, json) Hash identifier: y5NKTGLJwPs0KMEFDXxP48SLSfCM53XafInvHlNCsDg= Subject key identifier: 98:3A:FB:D2:66:59:D4:7E:04:6F:22:95:92:E8:31:2E:C9:52:F9:0D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C264A5AACD2150C3B0F6BB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecc5b174-dff6-36f8-86a2-1ee49209bf2d.roa Signing time: Mon 03 Feb 2025 11:16:30 +0000 ROA not before: Mon 03 Feb 2025 11:16:30 +0000 ROA not after: Sun 04 May 2025 10:16:30 +0000 asID: 30036 IP address blocks: 2604:2e89:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:a5:aa:cd:21:50:c3:b0:f6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 3 11:16:30 2025 GMT Not After : May 4 10:16:30 2025 GMT Subject: CN=a0d113c3-1390-4a1c-91eb-fec1751557c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:d2:25:29:fc:a1:13:d1:d2:f2:71:3f:0f: af:e8:41:ba:fa:7f:17:1e:e1:8a:4a:83:38:3f:64: 7e:e6:f7:c1:73:7e:2a:15:e0:e7:0e:1d:68:85:fa: 75:40:2c:08:cd:a0:66:0c:c5:53:cb:ec:7f:22:b3: d3:99:4d:0e:87:43:fa:c7:26:3a:2a:45:87:79:80: 04:f2:ea:55:7a:32:e3:e9:88:9d:0b:19:cb:ab:75: 74:6f:1a:58:c4:b5:34:4c:f6:3f:27:9c:df:41:3f: 0f:80:a7:f1:cb:db:90:c5:5c:d9:31:d9:f3:76:43: 9a:6e:4f:a0:e0:6b:bd:33:c6:d0:26:be:63:6f:08: ee:00:2d:42:88:d6:b2:43:a3:a9:28:23:4a:d3:33: d8:80:71:05:fc:8f:a0:8e:aa:54:4e:eb:8f:54:ae: 4f:e1:7d:82:83:9f:52:67:59:76:9a:a6:c7:32:c8: 4f:4b:5d:e1:80:b5:66:68:0c:0c:9f:32:2a:20:3d: 0c:3a:b9:12:50:e5:47:9d:c5:54:78:85:af:d5:7a: e9:a2:f6:1c:37:37:2a:aa:7d:b2:b1:38:eb:1c:de: c9:1b:6a:05:03:cd:47:b0:c1:7a:29:ff:90:95:93: fd:18:55:fe:35:9c:36:96:2d:8d:58:15:11:a7:67: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:FB:D2:66:59:D4:7E:04:6F:22:95:92:E8:31:2E:C9:52:F9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ecc5b174-dff6-36f8-86a2-1ee49209bf2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0f:e5:25:23:0a:22:f4:f8:1e:b4:99:c2:ac:b9:45:e3:e1: da:62:2b:1a:ee:d2:73:f9:12:92:2b:c4:0a:d2:4d:14:3c:3e: 33:dc:68:a6:69:28:97:04:23:06:4f:08:fb:2e:cf:69:c0:71: 2f:cc:c6:d6:c7:8f:f4:ed:87:16:78:f2:0c:32:c9:de:e4:dc: e8:da:05:0b:e5:55:92:ca:40:f2:ff:59:37:12:6e:46:73:d3: ba:e6:2c:0c:8a:2c:d8:38:27:42:e2:74:d3:92:3e:6b:a7:7f: f8:e4:31:21:d0:2f:8b:18:bb:44:2c:95:49:68:f1:5a:14:2a: 05:25:58:f6:14:29:89:69:09:ff:9f:1c:81:b1:68:bb:94:40: 6a:2e:d9:a1:ce:84:9d:7c:8c:01:f8:ad:dd:ee:5a:c9:bb:87: 85:01:90:95:14:7d:4d:4f:9a:1d:c7:bc:64:02:ff:20:e7:d0: cb:eb:41:e0:ff:72:4d:07:02:92:31:66:90:64:0a:be:e4:66: 03:ef:2b:20:39:f2:83:97:2b:52:b5:67:95:f5:dd:d6:d5:8b: b6:d6:ea:9c:c3:4e:81:00:5a:2b:d8:37:11:5a:31:f5:a4:5d: 7b:0a:53:e4:cc:31:d1:1b:f6:a9:d6:25:13:e6:6d:ea:2d:5b: 81:10:15:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZKWqzSFQw7D2uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwMzExMTYzMFoXDTI1MDUwNDEwMTYzMFowLzEtMCsGA1UEAxMk YTBkMTEzYzMtMTM5MC00YTFjLTkxZWItZmVjMTc1MTU1N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHTSJSn8oRPR0vJxPw+v6EG6+n8XHuGKSoM4 P2R+5vfBc34qFeDnDh1ohfp1QCwIzaBmDMVTy+x/IrPTmU0Oh0P6xyY6KkWHeYAE 8upVejLj6YidCxnLq3V0bxpYxLU0TPY/J5zfQT8PgKfxy9uQxVzZMdnzdkOabk+g 4Gu9M8bQJr5jbwjuAC1CiNayQ6OpKCNK0zPYgHEF/I+gjqpUTuuPVK5P4X2Cg59S Z1l2mqbHMshPS13hgLVmaAwMnzIqID0MOrkSUOVHncVUeIWv1XrpovYcNzcqqn2y sTjrHN7JG2oFA81HsMF6Kf+QlZP9GFX+NZw2li2NWBURp2fbKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJg6+9JmWdR+BG8ilZLoMS7JUvkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWNjNWIxNzQtZGZmNi0z NmY4LTg2YTItMWVlNDkyMDliZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANA/lJSMKIvT4HrSZwqy5RePh2mIrGu7Sc/kSkivECtJNFDw+M9xo pmkolwQjBk8I+y7PacBxL8zG1seP9O2HFnjyDDLJ3uTc6NoFC+VVkspA8v9ZNxJu RnPTuuYsDIos2DgnQuJ005I+a6d/+OQxIdAvixi7RCyVSWjxWhQqBSVY9hQpiWkJ /58cgbFou5RAai7Zoc6EnXyMAfit3e5aybuHhQGQlRR9TU+aHce8ZAL/IOfQy+tB 4P9yTQcCkjFmkGQKvuRmA+8rIDnyg5crUrVnlfXd1tWLttbqnMNOgQBaK9g3EVox 9aRdewpT5Mwx0Rv2qdYlE+Zt6i1bgRAVFA== -----END CERTIFICATE-----Generated at Wed Apr 9 00:08:58 2025 by rpki-client