$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f02853f3-d251-3764-87db-f5e91589a7d4.roa File: f02853f3-d251-3764-87db-f5e91589a7d4.roa (raw, json) Hash identifier: M34LA1/6j3WRXGrmoc81QCl6h9Jq35jt2wUEmHa5GiE= Subject key identifier: 3E:F8:7D:1A:1D:54:AE:E9:A7:AB:E3:C1:F9:DF:3C:D8:97:7C:B9:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496FAF00B668C81F18E56EDE60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f02853f3-d251-3764-87db-f5e91589a7d4.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397193 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:00:b6:68:c8:1f:18:e5:6e:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=48eca8d2-ba50-40f4-b9c5-47f0c920b50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:bb:79:be:a0:a2:c7:93:bd:9e:d6:c0:68: c9:eb:4c:cb:08:e4:6c:b2:cf:fe:16:d6:e6:e1:29: 4b:98:fb:96:86:d2:91:95:ba:e6:8f:8d:50:b7:d4: 55:f3:78:d9:a7:79:b5:b5:ca:90:81:12:42:91:02: 0e:65:b9:aa:b6:bd:94:00:4e:fa:f9:ce:1c:57:50: aa:01:d4:72:34:aa:fb:9e:64:b0:0e:3e:e5:57:a3: 89:ee:42:77:16:28:4b:b7:47:d4:ed:03:34:ad:f2: 2d:eb:10:59:9d:75:9b:dc:70:b0:da:9b:e9:04:8f: bf:c6:d7:30:99:ab:c5:33:58:ce:9b:bc:72:7f:99: c4:f4:f1:86:ca:f8:e0:8c:a0:90:a6:0d:fb:a4:60: 36:37:c7:2c:78:a8:ed:15:ec:eb:2c:45:f0:51:21: 40:e0:13:70:8a:9b:c0:fe:7a:ce:c0:83:c4:f1:8d: 9e:e9:28:4a:8e:1d:d3:f5:c9:c6:65:c2:8a:ac:ba: 43:f6:b4:ae:ef:d5:ad:e4:07:c7:e1:2f:5e:3f:64: b6:a2:fd:df:71:4b:a7:34:66:d1:21:d6:f1:b5:f8: ff:0c:45:2d:ca:65:81:c7:cc:c8:74:1a:35:26:95: 00:2d:08:18:35:f7:b7:ef:ac:86:a6:3f:08:01:1f: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F8:7D:1A:1D:54:AE:E9:A7:AB:E3:C1:F9:DF:3C:D8:97:7C:B9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f02853f3-d251-3764-87db-f5e91589a7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:b6:d8:35:f2:5b:a2:28:e6:3b:b1:90:42:d4:e6:35:e9: 03:5a:69:b7:50:51:a4:a6:6a:d8:0e:9d:16:41:65:ea:f6:1e: c2:f0:5e:d8:b8:9e:33:03:70:97:60:93:5a:5a:ab:2a:b5:ae: 52:20:db:92:ed:99:da:fe:bd:a3:dc:56:ac:cb:d7:4e:5a:3c: ea:4b:43:43:20:94:5d:01:b3:f4:15:a0:f3:e6:f4:5a:39:fa: 2b:3e:a5:c9:5a:c1:6a:d4:65:c0:17:58:80:a8:d0:a6:c5:a8: e1:17:ce:00:67:35:ae:a6:68:58:59:6a:57:11:00:27:ae:1b: 64:37:f5:f7:c9:11:60:a2:e7:c5:5c:15:b1:21:30:13:bc:6f: 47:6a:43:db:d4:b7:e9:b5:3c:62:26:42:48:f7:7e:17:42:65: 31:1e:44:62:39:06:85:cb:0d:a3:b9:70:32:c4:6a:a8:b1:76: b4:99:67:3e:56:67:11:55:41:8f:cf:4f:58:85:42:68:4f:77: 37:29:26:66:d7:a5:26:be:ce:96:bd:df:39:31:cc:ba:87:1f: 6c:c4:e4:da:1b:5a:c5:72:3c:12:3d:c8:11:70:d4:4d:9b:3c: 53:15:11:b5:a3:65:de:b2:7b:c5:98:33:ac:dc:cf:47:75:f0: 74:d5:a6:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElvrwC2aMgfGOVu3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NDhlY2E4ZDItYmE1MC00MGY0LWI5YzUtNDdmMGM5MjBiNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU27eb6goseTvZ7WwGjJ60zLCORsss/+Ftbm 4SlLmPuWhtKRlbrmj41Qt9RV83jZp3m1tcqQgRJCkQIOZbmqtr2UAE76+c4cV1Cq AdRyNKr7nmSwDj7lV6OJ7kJ3FihLt0fU7QM0rfIt6xBZnXWb3HCw2pvpBI+/xtcw mavFM1jOm7xyf5nE9PGGyvjgjKCQpg37pGA2N8cseKjtFezrLEXwUSFA4BNwipvA /nrOwIPE8Y2e6ShKjh3T9cnGZcKKrLpD9rSu79Wt5AfH4S9eP2S2ov3fcUunNGbR Idbxtfj/DEUtymWBx8zIdBo1JpUALQgYNfe376yGpj8IAR8MkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD74fRodVK7pp6vjwfnfPNiXfLlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjAyODUzZjMtZDI1MS0z NzY0LTg3ZGItZjVlOTE1ODlhN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaV7bYNfJboijmO7GQQtTmNekDWmm3UFGkpmrY Dp0WQWXq9h7C8F7YuJ4zA3CXYJNaWqsqta5SINuS7Zna/r2j3Fasy9dOWjzqS0ND IJRdAbP0FaDz5vRaOforPqXJWsFq1GXAF1iAqNCmxajhF84AZzWupmhYWWpXEQAn rhtkN/X3yRFgoufFXBWxITATvG9HakPb1LfptTxiJkJI934XQmUxHkRiOQaFyw2j uXAyxGqosXa0mWc+VmcRVUGPz09YhUJoT3c3KSZm16Umvs6Wvd85Mcy6hx9sxOTa G1rFcjwSPcgRcNRNmzxTFRG1o2XesnvFmDOs3M9HdfB01aa/ -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:17 2025 by rpki-client