$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0c41b70-ab30-30ea-a41b-e78ac83e1663.roa File: d0c41b70-ab30-30ea-a41b-e78ac83e1663.roa (raw, json) Hash identifier: CmdN0gg0//Zk25K8xuGTm+dCmdby1YEQs3wONK0F8wM= Subject key identifier: D5:DC:D3:89:40:43:23:C9:69:58:96:0D:4A:1F:F5:09:E9:1D:4D:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496FAF045BF30BEF559590A500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0c41b70-ab30-30ea-a41b-e78ac83e1663.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 396550 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:04:5b:f3:0b:ef:55:95:90:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=be7e885f-b637-40de-b795-464622557aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:6d:9c:8f:a5:b5:93:da:9c:c8:36:ce:45: 0d:c0:03:9e:5a:e3:08:30:2e:a4:50:40:52:6e:3e: e4:2a:e0:88:e3:e2:40:25:10:3c:2b:59:0a:d6:17: 25:58:c4:7d:6d:f6:5c:32:f8:70:43:ea:fc:18:55: a1:bc:06:e0:81:50:db:a2:31:71:60:a4:fd:b7:87: 78:92:16:68:e6:27:c8:6e:4e:5a:08:cb:6c:1d:f4: 1a:2b:3c:34:3a:c6:73:d7:c5:56:4f:62:54:9c:57: f2:4f:4c:b9:a2:fb:1c:e3:05:0a:04:92:a0:53:cb: 35:16:3e:65:6a:6a:6a:69:e7:0f:92:b3:8f:8d:02: cb:11:0a:cf:53:4a:d7:80:a0:d1:77:5f:e8:9d:2a: 00:cc:f7:bd:16:84:22:8d:fe:51:84:d3:a2:9c:1f: 0e:c7:c9:fb:e2:99:60:b0:13:f8:61:50:2c:50:44: 92:ce:4b:13:1b:3e:76:19:7c:3a:88:23:7b:e3:07: 68:76:4e:7b:3e:03:c2:7f:af:4d:74:f7:33:14:ff: 27:b1:95:6a:04:5d:0d:58:45:5f:82:ce:47:47:0e: b3:57:f6:c1:8a:72:3e:b6:04:86:ce:b7:f8:fe:89: c2:17:d2:01:49:de:8f:73:ef:92:0d:4f:12:b5:77: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DC:D3:89:40:43:23:C9:69:58:96:0D:4A:1F:F5:09:E9:1D:4D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0c41b70-ab30-30ea-a41b-e78ac83e1663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:55:d9:b2:93:f2:83:2f:e5:0a:73:4c:5a:9b:d3:8a:c7:19: 1f:2c:5a:f3:87:82:bc:69:1f:1d:cc:aa:d9:73:01:07:f1:3a: 31:d2:43:b7:d4:87:1f:a1:95:cf:5e:d3:f5:ee:7a:1f:77:a9: 1e:6f:5d:70:e2:a9:3a:a8:71:e1:e3:a9:63:1d:5d:bd:66:e8: 9c:f1:d0:49:71:23:8a:e7:f1:bc:15:e3:67:9a:8c:b5:2b:c6: 9c:54:44:73:40:32:d8:02:79:90:5a:63:a9:4c:71:b4:9f:9a: 63:9c:b2:3c:25:38:dc:4f:2f:7f:cc:d5:48:ae:6a:f3:c0:e9: 0b:f1:a5:24:b7:82:44:81:09:a5:8d:ab:c2:bc:3b:ae:40:12: b6:2a:be:77:e7:9b:ec:b5:c1:c4:cd:b2:7e:e7:dd:dd:d2:1c: 1b:3c:39:4a:e2:51:ef:d1:13:01:c7:9b:7a:40:38:46:28:71: c8:7d:88:63:12:c2:78:4a:2e:04:d5:69:25:a9:dc:d9:27:73: bc:21:0e:a3:38:59:53:7b:4e:b3:ff:fc:79:2a:84:81:cf:56: 3a:7b:8c:24:8d:73:80:df:62:08:96:79:01:6a:c6:78:2c:ff: a6:41:97:d3:7d:0b:d4:d6:95:04:46:dc:07:08:58:ea:b3:78: f4:ae:74:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElvrwRb8wvvVZWQpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YmU3ZTg4NWYtYjYzNy00MGRlLWI3OTUtNDY0NjIyNTU3YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibttnI+ltZPanMg2zkUNwAOeWuMIMC6kUEBS bj7kKuCI4+JAJRA8K1kK1hclWMR9bfZcMvhwQ+r8GFWhvAbggVDbojFxYKT9t4d4 khZo5ifIbk5aCMtsHfQaKzw0OsZz18VWT2JUnFfyT0y5ovsc4wUKBJKgU8s1Fj5l ampqaecPkrOPjQLLEQrPU0rXgKDRd1/onSoAzPe9FoQijf5RhNOinB8Ox8n74plg sBP4YVAsUESSzksTGz52GXw6iCN74wdodk57PgPCf69NdPczFP8nsZVqBF0NWEVf gs5HRw6zV/bBinI+tgSGzrf4/onCF9IBSd6Pc++SDU8StXe0lQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNXc04lAQyPJaViWDUof9QnpHU2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBjNDFiNzAtYWIzMC0z MGVhLWE0MWItZTc4YWM4M2UxNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqVdmyk/KDL+UKc0xam9OKxxkfLFrzh4K8aR8d zKrZcwEH8Tox0kO31IcfoZXPXtP17nofd6keb11w4qk6qHHh46ljHV29Zuic8dBJ cSOK5/G8FeNnmoy1K8acVERzQDLYAnmQWmOpTHG0n5pjnLI8JTjcTy9/zNVIrmrz wOkL8aUkt4JEgQmljavCvDuuQBK2Kr5355vstcHEzbJ+593d0hwbPDlK4lHv0RMB x5t6QDhGKHHIfYhjEsJ4Si4E1WklqdzZJ3O8IQ6jOFlTe06z//x5KoSBz1Y6e4wk jXOA32IIlnkBasZ4LP+mQZfTfQvU1pUERtwHCFjqs3j0rnRW -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:10 2025 by rpki-client