$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4be1a3b2-97ad-308f-9b9c-d23231da2f4a.roa File: 4be1a3b2-97ad-308f-9b9c-d23231da2f4a.roa (raw, json) Hash identifier: DKLQsEvfys5zH8TyaKN7nlS5gz5omDNS15fPunBr1SA= Subject key identifier: 7B:6D:C5:60:45:F1:36:23:47:9C:F4:98:88:9C:F1:98:F2:5D:0E:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493243F3EA17FC4C6A3D60F180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4be1a3b2-97ad-308f-9b9c-d23231da2f4a.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 396574 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f3:ea:17:fc:4c:6a:3d:60:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=fd0831f0-1580-4536-b309-554e0e51db6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:95:f4:67:1d:e2:99:f4:19:74:b5:5c:a2: 58:76:83:c9:48:15:04:f0:65:c3:ed:fc:64:38:a6: 95:85:64:54:6d:32:14:7f:e5:31:bd:3b:8e:88:8f: 98:52:0a:03:41:d3:8a:a6:33:f5:eb:c7:99:0f:b6: 1e:4a:1e:f8:46:ab:4b:f5:00:14:ab:b4:ef:2c:06: ad:e5:9a:f4:7a:6a:f4:44:7a:f5:5a:3e:1a:15:84: 49:32:a4:bc:5e:1e:6d:9d:76:e8:11:21:b0:07:e4: f3:57:f8:71:64:eb:79:ea:f6:40:ca:d8:e5:5f:d3: a0:20:ae:1a:fb:f4:05:0a:58:0e:a6:7e:c7:0a:b6: 6d:e1:b3:18:5e:70:f6:2e:d4:cc:02:e6:12:9f:94: ef:f4:24:8a:23:52:99:3a:c9:37:fe:31:1b:06:55: 0d:6a:05:4e:d3:b7:5f:1a:36:24:62:63:b0:0a:c6: 9a:a0:3c:86:04:2d:52:86:06:e9:a6:da:1d:88:84: 41:5b:42:6a:84:9e:46:77:c1:9b:da:d6:f8:56:ef: 32:f3:48:ca:02:26:ba:3d:28:72:7b:6e:25:aa:31: a0:ed:a9:11:e7:df:b5:b8:63:6c:0c:fb:69:fa:ca: e7:4f:c6:12:84:d9:73:f3:9c:a6:60:88:5a:5d:55: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:C5:60:45:F1:36:23:47:9C:F4:98:88:9C:F1:98:F2:5D:0E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4be1a3b2-97ad-308f-9b9c-d23231da2f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5d:38:a5:fc:1a:56:cb:13:0b:77:fb:7e:bb:33:3f:c9:4b: 0e:5b:91:d6:65:b3:c2:cc:14:20:bc:3a:2a:d8:92:a5:55:ac: d8:73:4f:99:bc:14:0e:b8:2a:d6:e2:9b:dd:74:be:4f:85:a6: ca:b2:ad:84:ad:f4:77:f9:eb:57:99:da:19:e2:85:ab:16:fc: 84:80:00:b5:21:6d:82:60:8f:08:d2:28:40:cf:6f:eb:ea:ea: c3:d5:6e:07:bd:aa:7b:33:ea:e5:a3:23:80:5c:f8:6a:1c:96: 90:ff:aa:fb:7e:2f:c8:1a:ee:4f:77:fd:89:ce:b4:05:d8:c2: 0e:7a:40:26:1d:71:d0:eb:24:3a:95:83:5e:de:ed:7b:83:da: d2:7d:c7:6c:ef:5d:14:65:1f:a4:d5:d6:2e:13:91:b6:d2:82: 63:97:c1:38:47:84:40:9e:22:22:b0:a8:0a:34:09:e4:92:d1: 64:d4:b4:a2:55:2b:81:59:ce:de:bd:1b:65:49:37:0b:6a:1b: 3f:b7:8d:77:d2:11:41:a6:70:43:f9:4f:fc:25:9d:95:2b:e4: db:0c:fe:7e:8f:44:c2:da:df:0e:48:0a:23:dc:3e:94:ad:82: b1:5a:d3:ff:7d:6a:ea:1e:75:57:b0:63:a8:23:95:38:8c:1a: 7d:23:18:97 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/PqF/xMaj1g8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZmQwODMxZjAtMTU4MC00NTM2LWIzMDktNTU0ZTBlNTFkYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc+V9Gcd4pn0GXS1XKJYdoPJSBUE8GXD7fxk OKaVhWRUbTIUf+UxvTuOiI+YUgoDQdOKpjP168eZD7YeSh74RqtL9QAUq7TvLAat 5Zr0emr0RHr1Wj4aFYRJMqS8Xh5tnXboESGwB+TzV/hxZOt56vZAytjlX9OgIK4a +/QFClgOpn7HCrZt4bMYXnD2LtTMAuYSn5Tv9CSKI1KZOsk3/jEbBlUNagVO07df GjYkYmOwCsaaoDyGBC1ShgbpptodiIRBW0JqhJ5Gd8Gb2tb4Vu8y80jKAia6PShy e24lqjGg7akR59+1uGNsDPtp+srnT8YShNlz85ymYIhaXVV+bQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHttxWBF8TYjR5z0mIic8ZjyXQ5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGJlMWEzYjItOTdhZC0z MDhmLTliOWMtZDIzMjMxZGEyZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrXTil/BpWyxMLd/t+uzM/yUsOW5HWZbPCzBQg vDoq2JKlVazYc0+ZvBQOuCrW4pvddL5PhabKsq2ErfR3+etXmdoZ4oWrFvyEgAC1 IW2CYI8I0ihAz2/r6urD1W4Hvap7M+rloyOAXPhqHJaQ/6r7fi/IGu5Pd/2JzrQF 2MIOekAmHXHQ6yQ6lYNe3u17g9rSfcds710UZR+k1dYuE5G20oJjl8E4R4RAniIi sKgKNAnkktFk1LSiVSuBWc7evRtlSTcLahs/t4130hFBpnBD+U/8JZ2VK+TbDP5+ j0TC2t8OSAoj3D6UrYKxWtP/fWrqHnVXsGOoI5U4jBp9IxiX -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:11 2025 by rpki-client