$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f31a7cb3-d46a-3886-b9a5-e9607f5ae7ef.roa File: f31a7cb3-d46a-3886-b9a5-e9607f5ae7ef.roa (raw, json) Hash identifier: niehSFNuPqRdKmrKuw8NHfXOpwwSSNhVxDbfRShjoI0= Subject key identifier: 6A:C1:D0:A2:13:99:A1:77:26:88:1C:86:C8:D7:A7:55:24:BF:80:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848C577E4F48F66D0082A3EF180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f31a7cb3-d46a-3886-b9a5-e9607f5ae7ef.roa Signing time: Tue 04 Feb 2025 13:42:42 +0000 ROA not before: Tue 04 Feb 2025 13:42:42 +0000 ROA not after: Mon 05 May 2025 12:42:42 +0000 asID: 30036 IP address blocks: 2604:2e8b:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:e4:f4:8f:66:d0:08:2a:3e:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 13:42:42 2025 GMT Not After : May 5 12:42:42 2025 GMT Subject: CN=63233a53-bb74-475e-976d-067fe66c9fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:0f:76:1a:61:6c:5e:8e:9d:93:0a:01:63: 04:31:9a:85:53:74:8e:8a:49:93:57:6a:58:5c:19: f0:c1:ea:dd:d1:9f:b3:a7:83:40:97:20:16:1f:58: 67:29:98:aa:00:52:1c:ad:7b:6f:0a:83:56:67:12: 90:07:b2:4b:31:e9:33:f9:27:43:55:ad:9c:3c:bc: 1e:c0:ac:f0:b0:8c:28:df:9c:19:f2:80:43:8e:7d: 57:b5:f5:4b:fc:9a:e0:5a:92:bc:21:b5:b0:31:16: f1:00:3f:f6:66:3c:e9:1c:f5:61:f9:54:b5:bb:98: a5:26:45:8e:81:ec:41:22:54:7d:90:1b:02:5f:88: d5:65:21:ba:af:fa:a4:3a:f9:a7:5c:1e:4b:fc:c0: ae:8b:e8:ab:ef:f1:ff:d3:d8:0e:bf:12:9e:46:65: 7d:69:7a:27:a8:5b:6b:cf:89:81:64:88:37:f7:2b: f4:2b:34:e2:ec:bd:24:f6:86:fb:1f:98:7e:fb:b1: bb:ee:09:09:20:dd:1e:46:9b:4e:f5:bd:fa:ec:01: c5:34:6d:6a:40:30:32:d3:5f:95:b5:47:ba:df:93: 6d:d2:6f:54:dd:b3:30:6e:60:74:4d:8a:4c:af:4b: 74:8c:a3:e7:de:18:64:83:1b:79:6b:34:9b:84:d7: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C1:D0:A2:13:99:A1:77:26:88:1C:86:C8:D7:A7:55:24:BF:80:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f31a7cb3-d46a-3886-b9a5-e9607f5ae7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:95:7c:37:ed:3a:95:d0:45:74:a7:01:95:69:10:b3:d5:0d: af:ca:9b:3d:b2:d6:4e:66:da:f5:66:97:80:5c:22:73:2e:05: 03:e5:29:5b:e3:f8:ff:d9:fc:24:ab:51:0a:18:cc:41:5b:8c: 94:f6:5a:9f:2e:7e:95:4e:bc:57:60:2c:68:4a:3f:04:32:05: 8a:55:69:b7:e9:1d:a9:44:d9:20:1c:60:a6:43:14:f1:39:fd: 88:dd:0e:0c:97:af:ba:6d:f4:78:73:a6:0d:58:3b:33:47:88: a0:93:61:95:8c:d2:c8:79:5c:9b:da:f9:f8:a6:2d:fa:04:8f: 8d:b6:4f:62:2c:bc:9d:e2:77:93:69:9a:69:5c:95:07:7c:42: 9e:9e:70:6d:07:57:cd:a4:27:2d:41:79:9d:ec:18:a8:eb:8e: bc:e1:c2:2a:95:e2:4c:0c:26:18:ff:6f:09:e1:ad:a2:49:e1: e7:4f:74:07:4e:06:ba:c4:1f:e3:48:ab:9f:7b:1b:55:93:e2: ca:15:9a:de:3d:94:3e:40:50:00:1a:20:4b:1a:fb:46:21:26: 63:50:d8:7a:c6:77:bb:10:b5:9b:d9:1d:a7:03:b5:cf:92:17: 44:43:6a:fa:57:3c:56:91:ad:31:bb:ec:8c:14:5a:f1:1d:65: 0e:d9:f5:b0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd+T0j2bQCCo+8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIwNDEzNDI0MloXDTI1MDUwNTEyNDI0MlowLzEtMCsGA1UEAxMk NjMyMzNhNTMtYmI3NC00NzVlLTk3NmQtMDY3ZmU2NmM5ZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoIPdhphbF6OnZMKAWMEMZqFU3SOikmTV2pY XBnwwerd0Z+zp4NAlyAWH1hnKZiqAFIcrXtvCoNWZxKQB7JLMekz+SdDVa2cPLwe wKzwsIwo35wZ8oBDjn1XtfVL/JrgWpK8IbWwMRbxAD/2ZjzpHPVh+VS1u5ilJkWO gexBIlR9kBsCX4jVZSG6r/qkOvmnXB5L/MCui+ir7/H/09gOvxKeRmV9aXonqFtr z4mBZIg39yv0KzTi7L0k9ob7H5h++7G77gkJIN0eRptO9b367AHFNG1qQDAy01+V tUe635Nt0m9U3bMwbmB0TYpMr0t0jKPn3hhkgxt5azSbhNeF3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGrB0KITmaF3JogchsjXp1Ukv4BVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjMxYTdjYjMtZDQ2YS0z ODg2LWI5YTUtZTk2MDdmNWFlN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui9Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmpV8N+06ldBFdKcBlWkQs9UNr8qbPbLWTmba9WaXgFwicy4FA+Up W+P4/9n8JKtRChjMQVuMlPZany5+lU68V2AsaEo/BDIFilVpt+kdqUTZIBxgpkMU 8Tn9iN0ODJevum30eHOmDVg7M0eIoJNhlYzSyHlcm9r5+KYt+gSPjbZPYiy8neJ3 k2maaVyVB3xCnp5wbQdXzaQnLUF5newYqOuOvOHCKpXiTAwmGP9vCeGtoknh5090 B04GusQf40irn3sbVZPiyhWa3j2UPkBQABogSxr7RiEmY1DYesZ3uxC1m9kdpwO1 z5IXRENq+lc8VpGtMbvsjBRa8R1lDtn1sA== -----END CERTIFICATE-----Generated at Wed Apr 9 00:08:58 2025 by rpki-client