$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db81b353-4112-3243-942d-7c99cdeb3acb.roa File: db81b353-4112-3243-942d-7c99cdeb3acb.roa (raw, json) Hash identifier: a/oQVQ6W73YxQ9wBkvwJZlrcFoB0AEZnD09peCDzoDM= Subject key identifier: C5:26:7C:2E:D4:4E:0C:EB:35:7F:AC:51:F2:C2:10:84:7E:04:5D:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA466FC1A58F3DD3B220780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db81b353-4112-3243-942d-7c99cdeb3acb.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 397211 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:66:fc:1a:58:f3:dd:3b:22:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=0e633c2e-03fb-49ff-addd-e8b42ca0630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:ba:96:43:0b:af:e7:33:08:30:77:ed:2b: 83:c4:d7:40:8f:31:9d:24:e9:3e:37:90:19:9f:ab: d9:db:fc:fb:7e:72:79:5b:4e:88:5d:ea:0c:90:de: 55:da:7f:f6:ac:68:83:59:b7:e3:9d:c5:1f:6d:fb: 79:6d:e1:da:68:07:a2:a9:7c:84:6a:dc:eb:ea:86: 37:a5:6a:14:8e:c1:54:d6:0a:2b:59:eb:64:66:30: 65:14:cb:79:46:0c:7b:7f:11:74:34:82:aa:6d:fd: 03:6a:a8:ef:21:65:6e:e5:92:80:a8:36:13:cf:a6: d5:b7:c7:8c:59:08:33:1c:ae:ac:94:06:0f:ff:7b: 28:ec:ba:41:9f:3d:b9:fe:02:74:94:4a:46:90:08: 51:28:2b:22:b7:26:1e:03:ef:3c:b0:d6:1f:bd:90: 67:96:9c:43:be:a6:a7:05:bb:70:ae:85:5f:5b:2b: 18:43:44:35:e3:dd:72:bd:4b:7c:ff:d9:eb:bf:60: b4:29:61:bd:28:0c:fc:f2:3c:ac:5e:fe:04:da:05: 37:5a:8b:68:91:98:7e:d4:02:67:6a:c1:03:96:08: ce:ea:05:65:49:85:d2:0a:13:fe:6e:0b:65:2f:cd: ad:5d:df:40:29:99:88:97:cf:30:e6:92:63:20:b6: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:7C:2E:D4:4E:0C:EB:35:7F:AC:51:F2:C2:10:84:7E:04:5D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db81b353-4112-3243-942d-7c99cdeb3acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cf:31:57:ae:72:be:1a:6e:13:7b:aa:48:e8:80:8c:f8:b9: ba:b6:34:ae:09:f7:3a:11:0a:ea:8e:e7:19:7d:e7:37:a7:83: 7e:71:6d:c8:84:91:23:ae:da:90:70:9c:f5:e4:c4:3b:05:45: bf:a9:b6:bb:34:82:d6:11:14:f2:96:e8:cd:8e:8b:53:ad:50: 85:0e:ec:e7:5b:bd:fe:a8:f9:7a:09:63:89:e9:d2:6e:e3:cf: af:7b:e3:fa:82:0b:f2:f0:ba:ce:0b:79:f9:72:b2:b9:68:75: eb:28:e9:96:46:29:8e:30:ff:5f:66:50:60:45:f8:7f:9a:65: 39:a3:c2:de:92:8a:ce:c3:46:bc:73:eb:b2:3b:31:90:33:1e: 2b:d9:49:e7:e7:0a:b2:ad:4b:ea:c7:79:0b:d7:fe:ea:8b:5a: 38:d1:35:76:0a:e2:e8:f2:ef:4c:cc:80:8f:c2:d4:3f:0c:50: be:51:d8:5b:fe:3a:dc:67:ab:bc:c5:b7:f7:4f:d7:78:54:f4: 9c:1d:16:a8:f8:80:fa:24:69:f5:82:73:24:e4:48:d3:08:52: e8:ea:68:3d:20:d4:bc:11:af:bc:9a:77:bd:db:38:78:e9:69: fd:39:73:50:1d:1c:7f:0b:6e:3f:71:af:fb:b6:19:1b:05:17: 6c:5e:c1:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGb8Gljz3TsiB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGU2MzNjMmUtMDNmYi00OWZmLWFkZGQtZThiNDJjYTA2MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEy6lkMLr+czCDB37SuDxNdAjzGdJOk+N5AZ n6vZ2/z7fnJ5W06IXeoMkN5V2n/2rGiDWbfjncUfbft5beHaaAeiqXyEatzr6oY3 pWoUjsFU1gorWetkZjBlFMt5Rgx7fxF0NIKqbf0DaqjvIWVu5ZKAqDYTz6bVt8eM WQgzHK6slAYP/3so7LpBnz25/gJ0lEpGkAhRKCsityYeA+88sNYfvZBnlpxDvqan BbtwroVfWysYQ0Q1491yvUt8/9nrv2C0KWG9KAz88jysXv4E2gU3WotokZh+1AJn asEDlgjO6gVlSYXSChP+bgtlL82tXd9AKZmIl88w5pJjILZvYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMUmfC7UTgzrNX+sUfLCEIR+BF3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI4MWIzNTMtNDExMi0z MjQzLTk0MmQtN2M5OWNkZWIzYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtzzFXrnK+Gm4Te6pI6ICM+Lm6tjSuCfc6EQrq jucZfec3p4N+cW3IhJEjrtqQcJz15MQ7BUW/qba7NILWERTylujNjotTrVCFDuzn W73+qPl6CWOJ6dJu48+ve+P6ggvy8LrOC3n5crK5aHXrKOmWRimOMP9fZlBgRfh/ mmU5o8LekorOw0a8c+uyOzGQMx4r2Unn5wqyrUvqx3kL1/7qi1o40TV2CuLo8u9M zICPwtQ/DFC+Udhb/jrcZ6u8xbf3T9d4VPScHRao+ID6JGn1gnMk5EjTCFLo6mg9 INS8Ea+8mne92zh46Wn9OXNQHRx/C24/ca/7thkbBRdsXsFG -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:32 2025 by rpki-client