$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90c53afe-41c1-33d8-89c9-86f496f91900.roa File: 90c53afe-41c1-33d8-89c9-86f496f91900.roa (raw, json) Hash identifier: Mh0EFl94kZ6Cg/A4JaG8jN5OJnJw4sENHzkfl7FS+S8= Subject key identifier: 6A:E7:C6:5D:DE:99:88:44:8C:C0:94:5F:28:11:4C:67:BA:35:5E:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584913AC3F19E348BE98654CF180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90c53afe-41c1-33d8-89c9-86f496f91900.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2001:503:7bbf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3f:19:e3:48:be:98:65:4c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=176b1902-3fcc-4bf8-851b-67c2c33e8f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:af:8e:bf:06:03:cb:87:ea:66:93:94:5a: 14:61:19:33:33:8c:6f:8a:7c:2d:db:a1:7e:e1:3a: cf:b7:ab:67:ed:03:9c:00:20:da:ae:e2:40:e2:60: 9b:26:91:c3:4e:ae:3a:5b:b4:93:f5:93:f1:5e:b2: 6c:db:e5:8c:61:a6:e1:82:02:2f:86:10:f9:a6:de: bb:0f:44:9c:dd:66:c3:76:ff:55:d2:55:49:90:8e: 61:db:f7:3d:f5:e4:45:a7:81:83:7f:07:7b:4a:0e: 43:ef:8d:59:6d:83:fc:e5:94:12:34:d7:d7:c0:51: 6f:81:65:0f:14:92:f3:e1:47:db:5f:7c:17:02:d5: 69:db:01:4a:f6:bf:51:a4:7e:55:83:cd:26:91:84: a0:6f:57:a6:bb:64:04:0e:f1:f5:d5:3b:3e:3e:35: 19:fb:b8:f1:85:4d:53:2b:51:f1:d4:23:a3:6d:35: 22:83:ce:57:14:9e:6b:43:54:78:55:11:9f:f6:95: 1d:9c:06:39:b3:36:ba:71:95:c4:31:af:27:0e:0e: a2:98:71:cd:a8:ec:c2:c4:90:51:00:6c:35:49:5f: 13:fa:37:1e:c0:c8:f4:eb:15:05:af:76:a7:5b:1f: 5a:b5:7e:44:67:5d:88:2b:5b:c7:f0:b8:83:aa:f2: 78:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:C6:5D:DE:99:88:44:8C:C0:94:5F:28:11:4C:67:BA:35:5E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90c53afe-41c1-33d8-89c9-86f496f91900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:7bbf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0a:ad:9e:46:94:32:f0:0d:1d:1a:ff:48:57:f5:63:41:c2: 3e:80:44:94:36:d2:04:21:98:60:fd:8c:69:17:45:c4:b8:7d: e2:34:c9:ac:bc:e8:12:b6:dc:a9:fb:e3:8f:8e:74:c3:0a:3b: ea:21:bd:d6:46:4b:c6:38:78:42:26:18:d6:9b:37:87:26:45: 49:73:e2:6f:b7:aa:b0:7d:d0:2e:e5:bf:d6:79:03:b6:75:1a: 5a:0c:a7:d6:19:52:71:ab:97:2a:1b:d9:11:fe:d0:c2:1c:77: 36:41:2d:e5:b0:ad:23:47:6c:b7:2e:ff:31:96:35:c5:7d:d8: 9e:9c:8b:5e:21:40:68:9b:b5:f4:96:fa:34:f1:f1:68:76:c2: 12:5b:1b:a6:5c:27:c3:00:ed:bc:b1:28:07:12:04:e5:c6:9a: c6:db:fb:b2:e5:d8:69:cc:b1:68:fb:47:df:2b:da:83:2e:30: 62:c7:0f:ea:0a:9a:e7:fa:1d:3f:15:d6:a6:52:50:74:12:b2: 1b:54:2d:fd:67:ee:99:5f:08:ab:de:74:a6:79:27:6e:28:cc: b4:c3:e8:b2:ae:b5:fe:a1:70:62:0f:f7:ed:4f:3e:6d:45:33: 0f:d0:11:b6:2c:32:bd:c6:ca:e4:14:ac:65:fb:3e:9f:5a:95: 80:f1:eb:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrD8Z40i+mGVM8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MTc2YjE5MDItM2ZjYy00YmY4LTg1MWItNjdjMmMzM2U4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWKvjr8GA8uH6maTlFoUYRkzM4xvinwt26F+ 4TrPt6tn7QOcACDaruJA4mCbJpHDTq46W7ST9ZPxXrJs2+WMYabhggIvhhD5pt67 D0Sc3WbDdv9V0lVJkI5h2/c99eRFp4GDfwd7Sg5D741ZbYP85ZQSNNfXwFFvgWUP FJLz4UfbX3wXAtVp2wFK9r9RpH5Vg80mkYSgb1emu2QEDvH11Ts+PjUZ+7jxhU1T K1Hx1COjbTUig85XFJ5rQ1R4VRGf9pUdnAY5sza6cZXEMa8nDg6imHHNqOzCxJBR AGw1SV8T+jcewMj06xUFr3anWx9atX5EZ12IK1vH8LiDqvJ4QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrnxl3emYhEjMCUXygRTGe6NV6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTBjNTNhZmUtNDFjMS0z M2Q4LTg5YzktODZmNDk2ZjkxOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA3u/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0KrZ5GlDLwDR0a/0hX9WNBwj6ARJQ20gQhmGD9jGkXRcS4feI0 yay86BK23Kn744+OdMMKO+ohvdZGS8Y4eEImGNabN4cmRUlz4m+3qrB90C7lv9Z5 A7Z1GloMp9YZUnGrlyob2RH+0MIcdzZBLeWwrSNHbLcu/zGWNcV92J6ci14hQGib tfSW+jTx8Wh2whJbG6ZcJ8MA7byxKAcSBOXGmsbb+7Ll2GnMsWj7R98r2oMuMGLH D+oKmuf6HT8V1qZSUHQSshtULf1n7plfCKvedKZ5J24ozLTD6LKutf6hcGIP9+1P Pm1FMw/QEbYsMr3GyuQUrGX7Pp9alYDx604= -----END CERTIFICATE-----Generated at Wed Apr 9 01:13:38 2025 by rpki-client