$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f39ef1f-9a63-34c1-bbcf-440402a25ea4.roa File: 3f39ef1f-9a63-34c1-bbcf-440402a25ea4.roa (raw, json) Hash identifier: h248wP6aMB3/BISvaz2aoWBZgsRUrVTGbBnnZGnwj6w= Subject key identifier: 91:44:BE:55:E6:DD:EB:A9:C2:28:FB:68:C2:D8:F3:D1:67:91:28:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493243F3DBFB6DB90072685780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f39ef1f-9a63-34c1-bbcf-440402a25ea4.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 396579 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f3:db:fb:6d:b9:00:72:68:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=7bec5412-6ebf-4142-9479-05d54667501f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:e6:95:a8:a2:a9:03:e3:c1:95:89:31:cb: b5:61:ae:9c:93:c2:38:8b:19:7b:17:92:af:13:40: 25:b7:0a:86:97:12:9f:30:31:8c:d0:35:c1:46:57: ad:e9:39:8f:a6:f9:18:d7:ad:37:47:a5:0b:b3:b8: 59:25:9a:f8:c8:f6:62:ee:6a:56:36:05:5c:8e:83: 48:21:59:8d:59:0d:cb:5b:ee:dd:4e:9b:3b:ab:35: 7e:c5:34:08:d0:fa:4f:91:69:09:a7:a8:1a:3d:7c: 4e:a6:92:11:60:35:ca:3a:73:84:74:dd:f6:32:ba: 0b:58:74:79:41:9d:40:59:c9:e2:67:f6:a0:c5:70: 80:bf:ea:f8:36:b1:d0:c8:f2:72:3e:10:07:5b:03: 93:1d:8e:e1:80:6b:77:01:94:2d:73:08:13:18:0b: 12:c3:b6:56:08:26:07:54:d8:15:58:88:2c:c5:4a: a9:3a:8b:26:84:e4:51:5a:c5:4f:4e:3a:dd:0e:02: e0:45:77:87:98:cf:a1:82:71:92:fe:31:be:9f:85: 80:a8:d2:3e:0c:7c:54:0f:9c:11:c8:71:62:3c:78: 9c:39:5b:85:ee:66:16:4e:e4:20:08:64:74:fa:00: 16:fb:18:d8:11:14:2a:50:03:16:54:be:b2:00:3a: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:BE:55:E6:DD:EB:A9:C2:28:FB:68:C2:D8:F3:D1:67:91:28:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f39ef1f-9a63-34c1-bbcf-440402a25ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a2:3e:81:30:b8:a2:13:7d:e0:c7:76:00:5a:aa:d2:12:4c: 81:0c:9a:d0:5c:2d:3b:43:29:a4:49:54:67:1c:42:8b:8f:3a: 66:1a:5e:b4:45:a5:f4:34:09:34:43:97:42:6b:14:51:fd:8e: d5:6c:c7:f4:ae:d8:37:fa:9e:bb:7d:e4:32:54:b2:e3:67:e6: 2d:87:41:47:28:ee:ee:87:c1:cc:6c:e0:73:bf:11:c7:28:82: 68:8f:c2:95:dc:ad:b7:a3:3c:ae:70:3b:73:e7:0a:d5:06:76: 4e:81:00:a9:55:cb:11:e7:06:cf:d2:f4:d1:65:7a:8c:e6:9e: 31:c2:5f:ea:46:56:ef:4f:f2:d5:49:0e:82:d0:b5:1a:32:05: bb:1b:ab:a4:54:01:7d:ee:5a:c1:de:26:a1:d9:bd:6a:5d:9a: 11:e8:75:f9:de:29:1b:a4:a6:0e:df:b8:83:b6:0b:20:eb:bf: bb:fc:de:57:61:a9:2c:a7:56:78:48:0c:b0:08:f5:48:c8:8a: 2d:d1:d4:fe:52:0a:3f:4e:45:83:d4:72:e2:7e:53:30:c6:dd: 96:0f:11:7d:5e:9e:53:54:9f:4d:2b:eb:3a:2f:39:af:3a:63: e7:91:03:ed:5a:ac:ef:6b:2e:c6:65:1e:b3:b8:83:12:99:39: 5a:0b:3e:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/Pb+225AHJoV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk N2JlYzU0MTItNmViZi00MTQyLTk0NzktMDVkNTQ2Njc1MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOzmlaiiqQPjwZWJMcu1Ya6ck8I4ixl7F5Kv E0AltwqGlxKfMDGM0DXBRlet6TmPpvkY1603R6ULs7hZJZr4yPZi7mpWNgVcjoNI IVmNWQ3LW+7dTps7qzV+xTQI0PpPkWkJp6gaPXxOppIRYDXKOnOEdN32MroLWHR5 QZ1AWcniZ/agxXCAv+r4NrHQyPJyPhAHWwOTHY7hgGt3AZQtcwgTGAsSw7ZWCCYH VNgVWIgsxUqpOosmhORRWsVPTjrdDgLgRXeHmM+hgnGS/jG+n4WAqNI+DHxUD5wR yHFiPHicOVuF7mYWTuQgCGR0+gAW+xjYERQqUAMWVL6yADoQgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJFEvlXm3eupwij7aMLY89FnkSjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YzOWVmMWYtOWE2My0z NGMxLWJiY2YtNDQwNDAyYTI1ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1oj6BMLiiE33gx3YAWqrSEkyBDJrQXC07Qymk SVRnHEKLjzpmGl60RaX0NAk0Q5dCaxRR/Y7VbMf0rtg3+p67feQyVLLjZ+Yth0FH KO7uh8HMbOBzvxHHKIJoj8KV3K23ozyucDtz5wrVBnZOgQCpVcsR5wbP0vTRZXqM 5p4xwl/qRlbvT/LVSQ6C0LUaMgW7G6ukVAF97lrB3iah2b1qXZoR6HX53ikbpKYO 37iDtgsg67+7/N5XYaksp1Z4SAywCPVIyIot0dT+Ugo/TkWD1HLiflMwxt2WDxF9 Xp5TVJ9NK+s6LzmvOmPnkQPtWqzvay7GZR6zuIMSmTlaCz7d -----END CERTIFICATE-----Generated at Sat Apr 12 01:17:15 2025 by rpki-client