$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa File: 03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa (raw, json) Hash identifier: +iqL0lrPh4BTJneilk2LpkzVOkgpDz3U5LoUVSqst0c= Subject key identifier: 43:25:5E:34:A8:3B:97:D7:C2:FD:17:13:A1:A7:C3:7D:0E:E4:5D:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668C7C54E00F22A0DD64A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa Signing time: Tue 06 May 2025 12:43:05 +0000 ROA not before: Tue 06 May 2025 12:43:05 +0000 ROA not after: Mon 04 Aug 2025 12:43:05 +0000 asID: 396603 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8c:7c:54:e0:0f:22:a0:dd:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:05 2025 GMT Not After : Aug 4 12:43:05 2025 GMT Subject: CN=ab1d3bbb-3583-4e2a-ac37-5bf3c92b140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:0b:63:8a:b4:51:35:24:22:5d:36:d3:9f: e7:f2:94:c9:1d:bf:c7:45:e3:81:34:f0:40:66:c3: 59:b8:10:3a:39:c4:fc:04:67:11:fd:8f:f3:61:49: 52:53:54:21:62:c0:2a:f4:15:89:25:d4:7a:73:da: 92:bb:cd:5d:bf:e0:36:e2:68:13:25:b8:c5:d8:1e: f2:e8:4f:0d:06:c7:a1:81:17:0b:9e:95:ff:67:1e: 37:56:89:62:6d:06:59:76:8e:8e:83:86:bc:4a:6b: 7b:e5:ff:83:6b:68:13:de:2d:b9:fb:82:51:71:52: 81:86:2d:f6:51:1c:20:01:72:07:34:c3:ec:a0:a0: 11:51:bd:c6:f5:f1:e7:46:f8:3c:b1:a7:64:d4:37: a2:bd:6e:da:f1:1d:51:ba:9c:45:8f:9f:a7:6a:ce: 34:c7:c3:0f:de:09:91:ff:97:ff:39:9d:6c:b1:b0: c5:39:a0:fa:98:ad:08:04:2a:47:0e:36:84:6a:1e: d7:94:76:c2:5d:61:20:a2:be:35:91:42:e7:a1:14: 75:bc:92:8d:a1:11:d3:d5:61:45:0e:4b:85:43:0b: af:ea:04:9e:2e:45:17:ab:97:b2:77:c9:d6:58:0d: e6:26:c9:ba:3a:e3:5e:f4:a9:de:8f:82:1d:35:79: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:25:5E:34:A8:3B:97:D7:C2:FD:17:13:A1:A7:C3:7D:0E:E4:5D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e7:5d:fe:55:09:17:27:9c:a0:e9:57:a0:7d:00:b9:f5:d9: 9b:5a:51:81:2e:73:fc:6c:43:ae:66:ea:a5:a6:1d:b6:10:37: ee:c4:22:7d:80:7b:c4:98:c8:3f:7a:ef:3a:66:9b:cf:c3:5e: 30:29:85:3c:f5:d5:a2:fe:69:a0:62:92:fd:52:11:17:05:49: 8d:f7:a8:e8:ac:94:05:98:ed:e3:e5:7b:71:ad:3a:c1:8b:8b: 4a:f2:77:75:de:ae:e8:ed:20:7a:7e:b5:ff:90:79:72:89:9e: ee:43:d6:63:3b:f8:f9:43:38:61:e4:20:d5:3d:2c:c1:a8:01: d3:12:bf:53:92:10:1e:1e:ca:ce:5e:22:69:e2:28:8f:10:5c: ea:62:86:a4:9d:2d:82:88:57:4c:9b:de:87:ff:58:62:3a:21: cb:3d:9b:96:4b:2e:f8:d4:89:02:de:8e:d8:dd:2f:1f:dc:ac: b6:68:02:de:58:b3:95:d3:ab:e2:ec:36:e5:f7:e9:be:a8:dd: 8f:9c:6d:71:c2:bd:e0:8c:51:c1:c9:27:8b:06:49:62:70:35: 4f:2b:3b:27:3f:b1:3d:4b:54:be:71:66:37:4e:89:f5:91:fb: 7b:1e:14:3c:b0:3d:c3:60:f9:8d:47:3f:99:bf:af:27:3c:14: 31:1c:2e:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZox8VOAPIqDdZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNVoXDTI1MDgwNDEyNDMwNVowLzEtMCsGA1UEAxMk YWIxZDNiYmItMzU4My00ZTJhLWFjMzctNWJmM2M5MmIxNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojMLY4q0UTUkIl0205/n8pTJHb/HReOBNPBA ZsNZuBA6OcT8BGcR/Y/zYUlSU1QhYsAq9BWJJdR6c9qSu81dv+A24mgTJbjF2B7y 6E8NBsehgRcLnpX/Zx43VolibQZZdo6Og4a8Smt75f+Da2gT3i25+4JRcVKBhi32 URwgAXIHNMPsoKARUb3G9fHnRvg8sadk1DeivW7a8R1RupxFj5+nas40x8MP3gmR /5f/OZ1ssbDFOaD6mK0IBCpHDjaEah7XlHbCXWEgor41kULnoRR1vJKNoRHT1WFF DkuFQwuv6gSeLkUXq5eyd8nWWA3mJsm6OuNe9Knej4IdNXkaKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMlXjSoO5fXwv0XE6Gnw30O5F0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDNmZjYyZGQtNDZlNC0z MWVhLTlhODUtNWI3NGNhYTYxN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHnXf5VCRcnnKDpV6B9ALn12ZtaUYEuc/xsQ65m6qWmHbYQN+7E In2Ae8SYyD967zpmm8/DXjAphTz11aL+aaBikv1SERcFSY33qOislAWY7ePle3Gt OsGLi0ryd3XerujtIHp+tf+QeXKJnu5D1mM7+PlDOGHkINU9LMGoAdMSv1OSEB4e ys5eImniKI8QXOpihqSdLYKIV0yb3of/WGI6Ics9m5ZLLvjUiQLejtjdLx/crLZo At5Ys5XTq+LsNuX36b6o3Y+cbXHCveCMUcHJJ4sGSWJwNU8rOyc/sT1LVL5xZjdO ifWR+3seFDywPcNg+Y1HP5m/ryc8FDEcLh8= -----END CERTIFICATE-----Generated at Sun May 11 06:24:58 2025 by rpki-client