$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/299c919a-bbe4-3a78-9a84-68045160493e.roa File: 299c919a-bbe4-3a78-9a84-68045160493e.roa (raw, json) Hash identifier: WRGwIdjnF8+H0vKQBn2a4SkzINzKx42H5R+VqJWAUK8= Subject key identifier: 23:63:C9:1F:30:5B:F2:4A:15:D3:F8:A8:E0:77:BF:6D:3D:BD:85:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668F2A13A3F6F821566228 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/299c919a-bbe4-3a78-9a84-68045160493e.roa Signing time: Tue 06 May 2025 12:43:06 +0000 ROA not before: Tue 06 May 2025 12:43:06 +0000 ROA not after: Mon 04 Aug 2025 12:43:06 +0000 asID: 397204 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8f:2a:13:a3:f6:f8:21:56:62:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:06 2025 GMT Not After : Aug 4 12:43:06 2025 GMT Subject: CN=70cf9b6e-d441-4d33-84eb-52cb63ca6fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:4b:01:ca:a3:66:94:f6:3a:d8:be:0d:d7: d3:d5:e1:a8:80:88:ac:f8:6b:d5:5f:bf:c2:a6:c0: c3:39:a1:37:a4:0e:b9:53:86:46:2b:87:41:5c:68: 2e:e6:f8:97:80:2b:e4:cb:04:cf:48:2a:5a:3e:aa: 9a:bf:87:06:ee:bb:ab:71:68:81:52:ed:2f:bc:55: 32:fb:b7:ef:04:6a:77:a3:73:6a:fc:40:a2:3d:a3: d7:aa:c9:e2:f5:28:18:67:7b:e3:d1:c4:c8:1e:df: 9f:94:82:fc:01:a2:a2:35:d4:80:8f:43:b0:17:46: c4:d0:d9:6c:42:28:9c:6c:97:5d:b1:39:ee:9e:2d: a1:03:6c:58:c2:6e:bf:67:52:09:5d:fb:15:75:45: d0:3f:71:10:50:68:64:e2:47:27:78:28:12:18:0a: 2f:2e:a2:b5:ff:4f:14:77:f6:26:02:0a:44:09:73: 24:bb:5b:7b:93:60:f3:05:a1:a9:8b:d7:e5:dd:f5: aa:5d:0d:e0:33:17:4b:63:02:0a:69:80:2f:72:b6: 5b:4b:e7:f0:e8:58:6c:a4:35:ad:8a:9c:72:02:ea: b9:d4:c5:c9:53:05:66:be:f9:89:56:96:5f:51:70: b0:c0:86:83:74:69:18:12:e9:82:f7:86:d8:4c:05: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:63:C9:1F:30:5B:F2:4A:15:D3:F8:A8:E0:77:BF:6D:3D:BD:85:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/299c919a-bbe4-3a78-9a84-68045160493e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:13:33:22:c8:89:e9:9c:f0:1b:ac:84:96:9d:b3:4a:36:9b: 1a:df:d2:99:00:c7:81:e1:94:06:9f:1e:f6:0f:4b:ba:cf:67: 6f:cf:16:d0:28:e0:06:be:6b:7e:56:88:0e:44:ce:73:19:22: 81:1b:de:e7:97:18:28:45:96:ed:18:3a:b2:67:de:35:f0:6f: fe:4e:53:69:87:94:26:63:f0:0e:b3:cf:e5:26:57:17:46:01: 18:51:84:49:7b:d2:2b:f4:b2:e0:96:06:c0:81:75:d5:ae:c7: 33:45:c4:af:f8:8e:f2:25:32:86:98:96:7e:95:53:92:77:17: ce:7d:52:53:2e:7e:98:d9:e0:15:f6:3a:27:db:03:86:f9:13: 8b:bc:e8:49:40:41:77:eb:f3:b8:c9:48:e0:14:2b:5d:4d:ed: 96:ec:01:66:e6:66:f8:ec:7b:a7:6b:6d:f7:31:65:bc:8b:58: e6:54:88:e2:54:e5:61:b9:f1:98:67:5d:f7:ff:c6:a3:26:96: 76:48:2b:e0:0b:dd:e9:38:5d:99:16:8b:0d:03:8c:f4:f7:85: ad:26:86:d5:4e:e0:32:34:22:bf:74:a9:f8:8f:24:ed:c4:37: 09:4c:0d:cd:66:7d:da:c2:27:53:a0:ee:a7:9b:dc:b2:14:6e: 51:91:b0:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZo8qE6P2+CFWYigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNloXDTI1MDgwNDEyNDMwNlowLzEtMCsGA1UEAxMk NzBjZjliNmUtZDQ0MS00ZDMzLTg0ZWItNTJjYjYzY2E2ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEBLAcqjZpT2Oti+DdfT1eGogIis+GvVX7/C psDDOaE3pA65U4ZGK4dBXGgu5viXgCvkywTPSCpaPqqav4cG7rurcWiBUu0vvFUy +7fvBGp3o3Nq/ECiPaPXqsni9SgYZ3vj0cTIHt+flIL8AaKiNdSAj0OwF0bE0Nls QiicbJddsTnuni2hA2xYwm6/Z1IJXfsVdUXQP3EQUGhk4kcneCgSGAovLqK1/08U d/YmAgpECXMku1t7k2DzBaGpi9fl3fWqXQ3gMxdLYwIKaYAvcrZbS+fw6FhspDWt ipxyAuq51MXJUwVmvvmJVpZfUXCwwIaDdGkYEumC94bYTAWqnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNjyR8wW/JKFdP4qOB3v209vYW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjk5YzkxOWEtYmJlNC0z YTc4LTlhODQtNjgwNDUxNjA0OTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMTMyLIiemc8BushJads0o2mxrf0pkAx4HhlAafHvYPS7rPZ2/P FtAo4Aa+a35WiA5EznMZIoEb3ueXGChFlu0YOrJn3jXwb/5OU2mHlCZj8A6zz+Um VxdGARhRhEl70iv0suCWBsCBddWuxzNFxK/4jvIlMoaYln6VU5J3F859UlMufpjZ 4BX2OifbA4b5E4u86ElAQXfr87jJSOAUK11N7ZbsAWbmZvjse6drbfcxZbyLWOZU iOJU5WG58ZhnXff/xqMmlnZIK+AL3ek4XZkWiw0DjPT3ha0mhtVO4DI0Ir90qfiP JO3ENwlMDc1mfdrCJ1Og7qeb3LIUblGRsEA= -----END CERTIFICATE-----Generated at Sun May 11 00:00:50 2025 by rpki-client