$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cbea6b0-29e8-3b19-9169-dc5b37d17b18.roa File: 0cbea6b0-29e8-3b19-9169-dc5b37d17b18.roa (raw, json) Hash identifier: rD+XoIUONdfih8wfmDvZnbmSyAjnB2ZmWmlKyuO9yig= Subject key identifier: 91:39:73:BB:E1:F3:44:F7:A5:89:02:21:FA:F3:48:5E:0D:20:DA:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493243F222B83FD00BE6872C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cbea6b0-29e8-3b19-9169-dc5b37d17b18.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 396577 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f2:22:b8:3f:d0:0b:e6:87:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=430f7f42-fff6-46c9-b83c-409fc37c56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:56:05:a1:3f:1e:12:d5:43:90:6a:92:88: 76:c4:ac:0a:32:6c:0e:39:e3:5e:cd:88:69:d7:ed: 97:50:bd:17:81:15:7d:a0:2e:77:a9:30:a2:2b:78: ea:5a:c5:e3:d7:f8:48:22:a5:75:7e:8c:68:ef:27: 4d:1c:17:74:69:ef:ad:38:58:99:ca:af:4d:88:a1: 8a:f6:f5:5e:bb:46:df:14:66:0c:89:10:1a:9d:fb: bc:3c:64:b6:aa:b4:0a:a0:a5:45:70:a6:38:d5:c5: 38:83:33:16:92:8d:96:e4:ba:59:bb:56:f8:a5:a4: 3a:3d:a9:65:5c:11:5d:8c:21:d8:80:d8:1b:66:3d: 76:1a:3e:bf:0a:2d:00:24:cd:8e:f5:47:34:89:6c: 1c:b1:d4:c9:b5:d5:df:48:ce:4c:e9:6f:bc:c7:1d: 1f:c9:d1:fb:a4:3b:cf:f6:82:cd:76:cb:47:c1:d6: d2:8c:7e:14:af:40:96:e2:41:9e:0e:b9:7c:8b:1a: 96:16:ef:58:b4:47:41:61:0a:a8:3d:60:34:18:61: b7:43:7f:b8:39:dc:55:eb:3e:1b:e0:db:88:6b:f2: 48:25:d2:32:ba:09:96:5a:06:9a:de:49:05:49:60: 25:ed:5e:9d:09:d6:d8:79:03:68:19:4d:fc:a0:0d: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:73:BB:E1:F3:44:F7:A5:89:02:21:FA:F3:48:5E:0D:20:DA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cbea6b0-29e8-3b19-9169-dc5b37d17b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:01:cd:59:72:36:4f:4a:d5:36:42:c9:30:38:5e:0a:fc:f5: 53:68:08:66:d9:96:a8:cb:5c:32:7d:f9:0a:44:1b:b8:6f:63: b5:c7:eb:7e:c5:8e:a8:86:32:cf:68:91:fd:b3:25:9f:9e:b5: 6d:a1:3e:9d:da:04:83:b8:06:a3:2f:b3:c6:9f:d8:fe:ea:00: 46:c5:61:dc:4e:7c:0d:cf:2d:e0:8b:52:2d:16:6c:01:ee:2d: 98:2e:67:05:27:b2:b3:fd:75:1f:a1:9d:df:ec:d9:57:b2:c6: 4c:a2:d9:95:f3:cb:85:12:20:be:02:2a:af:8f:18:3a:f8:d0: 18:c7:e1:58:92:77:f3:4c:31:11:8c:18:50:2d:20:fb:22:fb: b6:fd:40:c8:fd:10:f6:4a:fb:52:a0:05:d6:4b:c7:19:34:d4: f1:89:65:5a:6a:91:fe:b9:bc:eb:5e:1e:15:09:9a:5f:40:d1: b4:7c:f5:10:bd:b6:84:f5:3b:97:0b:f1:0b:e6:e4:e1:05:7e: be:5e:52:8a:e9:34:fd:d5:01:45:4e:d0:ae:99:2a:39:cd:0a: c8:06:f8:47:c4:79:cd:a4:9d:91:24:c5:3e:47:7e:f4:9e:38: 91:d3:3e:62:61:e9:50:76:ea:ca:99:cd:b1:20:0b:67:e7:1e: e6:2f:e8:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/IiuD/QC+aHLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NDMwZjdmNDItZmZmNi00NmM5LWI4M2MtNDA5ZmMzN2M1NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVWBaE/HhLVQ5Bqkoh2xKwKMmwOOeNezYhp 1+2XUL0XgRV9oC53qTCiK3jqWsXj1/hIIqV1foxo7ydNHBd0ae+tOFiZyq9NiKGK 9vVeu0bfFGYMiRAanfu8PGS2qrQKoKVFcKY41cU4gzMWko2W5LpZu1b4paQ6Pall XBFdjCHYgNgbZj12Gj6/Ci0AJM2O9Uc0iWwcsdTJtdXfSM5M6W+8xx0fydH7pDvP 9oLNdstHwdbSjH4Ur0CW4kGeDrl8ixqWFu9YtEdBYQqoPWA0GGG3Q3+4OdxV6z4b 4NuIa/JIJdIyugmWWgaa3kkFSWAl7V6dCdbYeQNoGU38oA03WwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJE5c7vh80T3pYkCIfrzSF4NINpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNiZWE2YjAtMjllOC0z YjE5LTkxNjktZGM1YjM3ZDE3YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8Ac1ZcjZPStU2QskwOF4K/PVTaAhm2Zaoy1wy ffkKRBu4b2O1x+t+xY6ohjLPaJH9syWfnrVtoT6d2gSDuAajL7PGn9j+6gBGxWHc TnwNzy3gi1ItFmwB7i2YLmcFJ7Kz/XUfoZ3f7NlXssZMotmV88uFEiC+Aiqvjxg6 +NAYx+FYknfzTDERjBhQLSD7Ivu2/UDI/RD2SvtSoAXWS8cZNNTxiWVaapH+ubzr Xh4VCZpfQNG0fPUQvbaE9TuXC/EL5uThBX6+XlKK6TT91QFFTtCumSo5zQrIBvhH xHnNpJ2RJMU+R370njiR0z5iYelQdurKmc2xIAtn5x7mL+jV -----END CERTIFICATE-----Generated at Sat Apr 12 00:14:22 2025 by rpki-client