$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa File: c1be6e65-98e4-3db0-9c6b-e982162e2022.roa (raw, json) Hash identifier: yjjgGkltAUGXFLFGLZY6i9yXaJa44BcORQR5cxzzw84= Subject key identifier: 1D:44:10:85:68:B1:61:F2:7C:F3:F0:D0:31:A9:73:E9:70:07:45:47 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849C0A4E4CA6CC027D980DB3140 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 2001:500:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e4:ca:6c:c0:27:d9:80:db:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=8c2fd512-373e-4f5a-9f89-9f6d4319cbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:65:3c:a6:c0:f4:bf:9c:b0:4e:44:08:e0: f3:24:f9:02:bc:a7:6c:25:af:6e:02:17:2a:3f:78: b9:80:f8:59:24:37:ed:2f:70:29:5e:a8:40:2e:27: 74:27:45:df:0b:60:cc:8a:13:4e:3b:7e:48:90:5d: 48:8b:ee:87:1b:9a:5f:4d:94:e2:84:ae:03:f6:fd: 74:9e:fe:b3:e4:89:c7:02:ad:ac:f1:e1:11:cf:f6: 8b:65:12:b3:b0:ed:f4:5a:65:01:74:d7:24:9b:87: 71:0d:ea:e0:05:00:4d:65:4b:e9:1d:fe:4d:15:df: d8:41:e1:fe:09:74:a0:56:25:a1:a2:c8:17:a2:e9: a4:ca:db:0a:a6:82:62:99:af:1c:e7:39:c4:fd:df: db:71:66:09:48:79:e4:ed:01:fc:8b:e9:83:d6:b3: fa:7a:96:04:96:95:d1:c7:0f:b7:88:73:f6:20:c3: e1:ee:c4:4d:9b:df:dd:e0:69:45:f7:4b:65:95:fc: 00:e2:66:30:c8:a5:11:b4:15:af:4c:65:32:9c:12: e3:e5:3c:a1:69:1e:79:be:21:5c:d1:80:cd:7e:6a: 7c:7f:ff:52:11:36:eb:bb:ac:33:07:d0:22:d3:27: 81:91:d1:fb:b9:84:9c:b5:4d:f1:91:98:49:62:11: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:10:85:68:B1:61:F2:7C:F3:F0:D0:31:A9:73:E9:70:07:45:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cb:21:9c:22:aa:cf:bd:c8:6d:91:57:27:da:5c:9e:52:ee: 0e:82:3a:e6:1b:61:80:9e:df:c9:17:fb:fe:44:d6:8b:69:d1: 7e:4f:dc:51:b8:6f:ec:76:98:bb:18:01:b3:f4:23:ba:f7:9a: 79:e8:06:d5:af:cc:62:51:8b:88:26:6c:c7:9b:05:8a:cc:61: 46:45:81:e4:af:12:cf:57:6b:73:e0:5f:6a:dc:b5:42:e7:40: 75:bc:c3:15:d9:d4:78:19:f9:b6:2e:5e:f3:67:96:10:f9:03: 15:a9:9b:04:2f:c9:e3:82:62:81:25:25:e2:63:9d:46:78:fb: a3:56:a0:b4:e3:ed:d1:a3:ae:68:08:eb:5d:9f:ce:67:7a:56: 6f:ff:11:b1:46:4a:c8:92:1c:8b:7d:eb:55:65:97:64:e4:f2: d8:b1:c1:13:97:25:a7:02:49:85:55:1e:bd:7a:84:2a:8c:f0: f4:98:58:02:d2:6a:cb:94:83:0d:62:ac:14:08:cb:9f:44:fa: 3c:dc:a5:ea:1d:78:21:1a:af:c8:4d:6b:e7:dc:e0:16:cc:54: 99:42:85:35:14:68:c4:d2:49:b2:7d:19:b0:06:97:31:06:6a: 2c:0f:95:c2:fc:2e:6d:7e:37:44:cc:20:a2:83:36:ad:77:b7: b6:4b:98:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApOTKbMAn2YDbMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OGMyZmQ1MTItMzczZS00ZjVhLTlmODktOWY2ZDQzMTljYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14ZlPKbA9L+csE5ECODzJPkCvKdsJa9uAhcq P3i5gPhZJDftL3ApXqhALid0J0XfC2DMihNOO35IkF1Ii+6HG5pfTZTihK4D9v10 nv6z5InHAq2s8eERz/aLZRKzsO30WmUBdNckm4dxDergBQBNZUvpHf5NFd/YQeH+ CXSgViWhosgXoumkytsKpoJima8c5znE/d/bcWYJSHnk7QH8i+mD1rP6epYElpXR xw+3iHP2IMPh7sRNm9/d4GlF90tllfwA4mYwyKURtBWvTGUynBLj5TyhaR55viFc 0YDNfmp8f/9SETbru6wzB9Ai0yeBkdH7uYSctU3xkZhJYhGqLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1EEIVosWHyfPPw0DGpc+lwB0VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYzFiZTZlNjUtOThlNC0z ZGIwLTljNmItZTk4MjE2MmUyMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA7LIZwiqs+9yG2RVyfaXJ5S7g6COuYbYYCe38kX+/5E1otp0X5P 3FG4b+x2mLsYAbP0I7r3mnnoBtWvzGJRi4gmbMebBYrMYUZFgeSvEs9Xa3PgX2rc tULnQHW8wxXZ1HgZ+bYuXvNnlhD5AxWpmwQvyeOCYoElJeJjnUZ4+6NWoLTj7dGj rmgI612fzmd6Vm//EbFGSsiSHIt961Vll2Tk8tixwROXJacCSYVVHr16hCqM8PSY WALSasuUgw1irBQIy59E+jzcpeodeCEar8hNa+fc4BbMVJlChTUUaMTSSbJ9GbAG lzEGaiwPlcL8Lm1+N0TMIKKDNq13t7ZLmFo= -----END CERTIFICATE-----Generated at Sun May 11 08:37:39 2025 by rpki-client