$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa File: 1cc85406-510b-3034-a6c9-8b35ee0248b3.roa (raw, json) Hash identifier: YJ3iRbzql9ABZD7j3KdueJPO7R2TiDg9y0SN3kvGHjY= Subject key identifier: 32:F6:54:CE:E0:85:FA:C4:4B:81:90:83:45:FE:14:DF:A8:3B:8F:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA4665CB5D0BFB47930C040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 396583 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:66:5c:b5:d0:bf:b4:79:30:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c15be706-b4c9-4abd-a0f4-432d5bf5188d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a5:10:50:a6:36:bd:27:10:10:e8:05:31:8d: d1:c5:79:8e:9e:e8:06:38:58:fa:2c:91:b3:a2:57: 6c:72:d1:7e:91:a1:c4:48:7b:38:f2:90:2e:2f:3e: b6:7c:2f:61:20:4e:27:b6:d1:e7:19:64:c9:55:40: e9:e5:f4:ff:75:f2:00:c3:3e:40:fd:c3:0f:82:9c: 3d:d3:66:2e:e7:6d:44:4d:f2:0b:02:94:0d:71:c3: 35:d8:9d:e6:a1:2b:51:83:05:b5:0e:8d:80:5e:bb: 1b:99:f3:c9:c4:b2:fd:d7:9c:c2:4b:19:f7:5d:d5: d7:7e:c9:05:c5:26:f3:b0:97:fd:b6:a5:31:fd:6a: 2b:da:8e:24:ef:96:5f:bd:5e:4e:40:77:1d:a2:47: 40:f4:4c:18:33:7e:69:7c:eb:41:d9:04:15:b7:af: 31:1a:69:c9:70:93:e1:07:8b:00:d1:8e:0c:bf:ff: 4e:38:3b:5d:be:e2:ee:38:51:c7:52:48:c4:c0:9d: 9d:64:29:07:28:d7:5a:ec:73:64:a2:14:e2:55:43: 32:f8:71:57:04:bb:14:61:c5:fd:23:e3:29:e8:a4: d7:20:18:7d:b3:33:81:d7:ab:fd:f7:03:37:c3:d3: 36:58:7c:84:1b:f8:3f:f2:0d:1b:66:5a:cf:d9:1e: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:54:CE:E0:85:FA:C4:4B:81:90:83:45:FE:14:DF:A8:3B:8F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0c:e0:b1:68:8a:75:0d:c4:0f:8d:53:84:51:65:8f:11:15: b0:52:98:79:eb:be:ee:dd:83:ba:4e:b5:7a:04:ee:b4:4b:84: 73:ed:b4:b1:8a:8e:17:45:66:54:f4:66:66:76:5f:be:9e:76: af:55:65:c1:a9:6f:64:ae:9e:ac:77:97:d4:06:ff:1b:e5:b7: eb:fa:78:76:00:86:dc:54:e2:5b:cf:73:d8:a3:1e:dc:d9:c0: 18:4d:c1:c8:ea:df:e0:d3:1c:8e:4e:d3:9c:6f:d3:5d:51:12: 07:67:fc:2f:24:22:8b:09:ff:0a:c8:bb:ae:da:e7:54:64:0d: 35:ac:33:76:86:ca:c8:09:da:03:87:a7:e6:66:af:4f:61:96: 70:3d:f0:dc:5f:94:90:ee:82:72:ed:a4:0f:c3:5f:e1:cf:41: 14:f7:80:cc:9c:be:3b:74:5f:a4:78:ef:d6:ba:b8:5c:3c:71: 88:b3:34:cb:50:ae:bf:72:53:10:ba:0b:2b:a1:4c:f1:d9:21: c8:5d:26:c5:0d:d5:56:4a:4a:eb:a7:4d:d6:51:67:99:4c:a2: ef:37:b7:3f:82:41:fa:9e:e4:6d:6d:19:6b:f9:8c:d2:62:ea: c1:d8:71:2c:27:41:25:88:1e:86:fb:f9:57:ea:dc:7e:64:73: b1:66:25:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGZctdC/tHkwwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzE1YmU3MDYtYjRjOS00YWJkLWEwZjQtNDMyZDViZjUxODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqUQUKY2vScQEOgFMY3RxXmOnugGOFj6LJGz oldsctF+kaHESHs48pAuLz62fC9hIE4nttHnGWTJVUDp5fT/dfIAwz5A/cMPgpw9 02Yu521ETfILApQNccM12J3moStRgwW1Do2AXrsbmfPJxLL915zCSxn3XdXXfskF xSbzsJf9tqUx/Wor2o4k75ZfvV5OQHcdokdA9EwYM35pfOtB2QQVt68xGmnJcJPh B4sA0Y4Mv/9OODtdvuLuOFHHUkjEwJ2dZCkHKNda7HNkohTiVUMy+HFXBLsUYcX9 I+Mp6KTXIBh9szOB16v99wM3w9M2WHyEG/g/8g0bZlrP2R4PjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDL2VM7ghfrES4GQg0X+FN+oO4//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNjODU0MDYtNTEwYi0z MDM0LWE2YzktOGIzNWVlMDI0OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCmDOCxaIp1DcQPjVOEUWWPERWwUph5677u3YO6 TrV6BO60S4Rz7bSxio4XRWZU9GZmdl++nnavVWXBqW9krp6sd5fUBv8b5bfr+nh2 AIbcVOJbz3PYox7c2cAYTcHI6t/g0xyOTtOcb9NdURIHZ/wvJCKLCf8KyLuu2udU ZA01rDN2hsrICdoDh6fmZq9PYZZwPfDcX5SQ7oJy7aQPw1/hz0EU94DMnL47dF+k eO/WurhcPHGIszTLUK6/clMQugsroUzx2SHIXSbFDdVWSkrrp03WUWeZTKLvN7c/ gkH6nuRtbRlr+YzSYurB2HEsJ0EliB6G+/lX6tx+ZHOxZiWV -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:38 2025 by rpki-client