$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ab6cc6-b815-3a76-87d5-451daa4f77e3.roa File: a2ab6cc6-b815-3a76-87d5-451daa4f77e3.roa (raw, json) Hash identifier: lQLwWoSC23urzOcpWRnjlmVRQOgbuk8KRPc/dnVrQX8= Subject key identifier: AC:87:85:3E:9C:11:C3:1C:32:F1:39:1F:60:D6:FE:41:B8:B2:53:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA464E2D95178A1A3F27850 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ab6cc6-b815-3a76-87d5-451daa4f77e3.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 396547 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:64:e2:d9:51:78:a1:a3:f2:78:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=fa61a06a-5391-4fe4-bd48-b0533ae9c668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:67:61:2f:09:ca:1c:45:6b:c0:9c:cd:64: 13:40:90:fe:40:5d:c4:a2:f8:a6:cc:14:15:4e:1d: e0:f8:01:87:05:dc:d0:d3:66:00:44:41:c0:55:bd: 1b:0c:08:65:2f:39:03:39:eb:24:2e:82:8d:01:b1: 27:ad:0b:cd:8c:3a:60:fa:94:f4:24:08:9b:e5:f2: a3:56:9b:eb:68:76:56:32:44:c7:0c:de:69:17:80: f2:65:2c:ed:9a:d4:df:23:02:8d:a8:f5:0f:be:97: ab:15:a0:c6:dc:fc:4a:17:42:81:fe:78:15:fb:f7: 15:ad:b3:a8:c5:87:03:34:65:08:18:18:e2:cd:9d: 60:0d:b5:60:af:2b:36:0f:ea:77:19:ae:38:b1:1c: d8:17:cf:55:c5:b9:6c:9b:93:0e:f6:5c:44:7a:0e: 51:8e:71:91:ec:2a:be:51:d1:fc:eb:fa:3b:11:20: 87:25:ee:6e:9d:58:a5:6f:e9:43:46:bf:7c:ad:ae: 87:c4:3c:16:a9:53:3f:52:6d:5f:4c:e1:71:a1:6e: 82:45:6c:a9:ba:c3:23:97:54:0a:05:46:6b:af:4a: aa:ee:70:d3:03:ab:43:c1:9c:ee:6d:86:e3:e3:0b: 59:cc:ef:0a:20:b1:cb:f9:45:3c:e8:1b:ae:76:78: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:85:3E:9C:11:C3:1C:32:F1:39:1F:60:D6:FE:41:B8:B2:53:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ab6cc6-b815-3a76-87d5-451daa4f77e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3d:36:24:5c:57:59:9f:63:fd:84:53:aa:5e:f1:cc:5a:c8: d4:fc:ad:79:4b:81:6d:f3:3e:c4:9d:5f:49:7c:ea:04:6c:13: b9:de:83:1e:7b:36:cc:7d:00:a6:b9:bb:3f:6c:46:3b:a1:03: 3a:b4:ba:8b:3b:6a:6d:48:d5:ec:1e:83:8f:89:e1:7f:32:6a: df:1c:33:b2:b3:e2:ea:f8:d1:67:b1:5a:dc:f9:ec:9c:42:dd: 69:8f:01:57:ff:4c:51:de:4e:a9:6e:12:cd:7d:d3:8d:b3:39: ca:7b:14:95:fa:a8:36:18:58:44:7a:d1:1a:a9:f8:36:9e:cf: 3f:a3:4c:03:db:4d:ca:65:44:9f:b9:01:05:c4:66:6d:d1:fb: 19:c4:e4:bd:d3:64:77:b7:2d:e0:ae:eb:83:93:c9:65:91:b6: 9b:7e:b8:86:b8:54:ca:3b:2a:9f:c7:7f:2f:55:a6:93:6c:02: 76:46:03:59:d9:96:42:c9:e8:20:50:44:b7:09:31:21:06:8e: 1c:ed:97:7f:e3:7d:5d:c1:ac:8e:8a:b3:49:af:e6:8b:0a:6f: 4b:34:c9:14:88:ca:4c:d5:5d:6f:36:9b:3c:9f:48:db:fe:4c: 37:07:b0:dc:44:17:83:6d:d7:54:72:ca:74:ac:8f:47:2d:37: 21:d7:4d:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGTi2VF4oaPyeFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmE2MWEwNmEtNTM5MS00ZmU0LWJkNDgtYjA1MzNhZTljNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcpnYS8JyhxFa8CczWQTQJD+QF3EovimzBQV Th3g+AGHBdzQ02YAREHAVb0bDAhlLzkDOeskLoKNAbEnrQvNjDpg+pT0JAib5fKj VpvraHZWMkTHDN5pF4DyZSztmtTfIwKNqPUPvperFaDG3PxKF0KB/ngV+/cVrbOo xYcDNGUIGBjizZ1gDbVgrys2D+p3Ga44sRzYF89Vxblsm5MO9lxEeg5RjnGR7Cq+ UdH86/o7ESCHJe5unVilb+lDRr98ra6HxDwWqVM/Um1fTOFxoW6CRWypusMjl1QK BUZrr0qq7nDTA6tDwZzubYbj4wtZzO8KILHL+UU86BuudngVrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKyHhT6cEcMcMvE5H2DW/kG4slOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJhYjZjYzYtYjgxNS0z YTc2LTg3ZDUtNDUxZGFhNGY3N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnPTYkXFdZn2P9hFOqXvHMWsjU/K15S4Ft8z7E nV9JfOoEbBO53oMeezbMfQCmubs/bEY7oQM6tLqLO2ptSNXsHoOPieF/MmrfHDOy s+Lq+NFnsVrc+eycQt1pjwFX/0xR3k6pbhLNfdONsznKexSV+qg2GFhEetEaqfg2 ns8/o0wD203KZUSfuQEFxGZt0fsZxOS902R3ty3gruuDk8llkbabfriGuFTKOyqf x38vVaaTbAJ2RgNZ2ZZCyeggUES3CTEhBo4c7Zd/431dwayOirNJr+aLCm9LNMkU iMpM1V1vNps8n0jb/kw3B7DcRBeDbddUcsp0rI9HLTch102i -----END CERTIFICATE-----Generated at Sun Apr 13 00:48:10 2025 by rpki-client