$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa File: 36acad54-8ec9-336e-811d-83e816124e48.roa (raw, json) Hash identifier: YevyixaGwhX6XRE3/2xnXUXQUTaa3e6M7HSxL9xPhdc= Subject key identifier: E2:E8:2A:88:3C:D1:6A:1C:2F:0C:27:6F:EE:D5:F5:0C:FF:24:13:70 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858492E13C438CA5D357BAB86C600 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 2001:4c8:101e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c4:38:ca:5d:35:7b:ab:86:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=a576f858-4d70-4a29-ae49-44bf3a85177b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:d7:27:83:8d:2f:86:85:c0:76:cb:09:07: a5:d8:a6:90:56:7b:85:85:6f:a2:55:08:82:04:d3: 97:96:9b:98:e9:74:96:42:b9:a5:cc:45:98:d0:7b: 41:91:e1:81:8f:cd:68:8c:bf:39:74:34:36:da:8f: 3b:c1:e1:c2:45:df:f4:f8:a4:db:31:e0:ab:ba:36: 2a:9e:91:13:ce:1c:e7:6d:7b:60:9f:ab:67:fb:c1: 2f:6f:f1:32:60:b4:58:47:32:fa:93:b4:4d:27:9e: 78:8c:99:55:42:c9:c5:a7:48:6a:56:1f:13:3f:60: 40:27:75:cd:f3:a9:5b:b5:50:23:12:7c:b6:d4:05: 66:77:a2:cf:48:84:55:0a:b8:4e:4c:4c:0c:12:c3: 97:63:98:1c:62:f8:55:9c:e4:bd:cd:3d:75:8f:e8: 46:a1:6e:d2:d4:eb:1d:dd:fe:4f:78:7b:02:28:bb: 64:6e:b4:02:3e:c7:9a:11:c3:1b:f8:8b:ab:df:25: 61:a3:6e:97:d3:fd:a7:e9:4a:fc:d1:4a:1d:4e:5d: c3:69:6f:e5:ac:7e:3e:fd:df:1b:e1:b8:9e:61:7e: 44:90:a3:82:b2:6c:e1:17:bf:34:41:3e:d0:ff:71: e3:9a:a7:f3:83:e0:56:df:3b:32:af:a2:d7:0b:68: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:2A:88:3C:D1:6A:1C:2F:0C:27:6F:EE:D5:F5:0C:FF:24:13:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv6: 2001:4c8:101e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:22:d5:79:b4:f5:13:83:90:3c:5a:a2:1a:83:1f:ce:bd:de: a4:db:09:d2:9c:13:49:d9:87:81:a6:80:81:f1:c0:10:a9:c4: 02:8a:5a:5a:c9:21:ae:eb:67:90:47:09:74:07:cc:17:09:30: f8:4b:55:0b:fe:6e:8c:a9:51:33:6c:5f:bc:c9:47:1a:d8:70: 39:57:71:5f:10:42:8c:22:87:5f:16:cd:48:64:f2:fd:6a:d4: af:ba:b3:6f:39:ac:18:07:bd:dd:5a:71:28:08:8a:7c:81:69: fe:be:39:7e:75:51:aa:96:52:23:87:d8:4a:17:f4:1e:82:49: 8c:a1:b6:33:46:44:41:15:9d:a7:6f:3d:0a:2e:31:5d:be:59: de:04:cd:4e:e0:0b:36:8e:fc:07:9c:1d:26:8d:9f:92:20:b5: 6a:2f:df:37:ce:ca:7e:dd:23:84:54:d0:a0:e0:2c:41:79:f2: 07:ca:7b:f0:7e:71:e2:92:b0:ed:a8:91:f5:38:4e:4d:44:54: db:4c:69:66:0e:e6:96:42:06:7d:5c:85:3a:1e:6f:3f:06:26: da:e3:4e:9b:4f:8f:6a:3d:f3:db:6e:07:0d:76:79:07:b3:27: 38:d1:ac:6c:53:63:53:76:92:2c:23:6b:19:32:cb:7b:77:bc: 43:2a:68:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkuE8Q4yl01e6uGxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk YTU3NmY4NTgtNGQ3MC00YTI5LWFlNDktNDRiZjNhODUxNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2unXJ4ONL4aFwHbLCQel2KaQVnuFhW+iVQiC BNOXlpuY6XSWQrmlzEWY0HtBkeGBj81ojL85dDQ22o87weHCRd/0+KTbMeCrujYq npETzhznbXtgn6tn+8Evb/EyYLRYRzL6k7RNJ554jJlVQsnFp0hqVh8TP2BAJ3XN 86lbtVAjEny21AVmd6LPSIRVCrhOTEwMEsOXY5gcYvhVnOS9zT11j+hGoW7S1Osd 3f5PeHsCKLtkbrQCPseaEcMb+Iur3yVho26X0/2n6Ur80UodTl3DaW/lrH4+/d8b 4bieYX5EkKOCsmzhF780QT7Q/3Hjmqfzg+BW3zsyr6LXC2hbTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLoKog80WocLwwnb+7V9Qz/JBNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMzZhY2FkNTQtOGVjOS0z MzZlLTgxMWQtODNlODE2MTI0ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0i1Xm09RODkDxaohqDH8693qTbCdKcE0nZh4GmgIHxwBCpxAKK WlrJIa7rZ5BHCXQHzBcJMPhLVQv+boypUTNsX7zJRxrYcDlXcV8QQowih18WzUhk 8v1q1K+6s285rBgHvd1acSgIinyBaf6+OX51UaqWUiOH2EoX9B6CSYyhtjNGREEV nadvPQouMV2+Wd4EzU7gCzaO/AecHSaNn5IgtWov3zfOyn7dI4RU0KDgLEF58gfK e/B+ceKSsO2okfU4Tk1EVNtMaWYO5pZCBn1chToebz8GJtrjTptPj2o989tuBw12 eQezJzjRrGxTY1N2kiwjaxkyy3t3vEMqaLM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:36 2025 by rpki-client