$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b38f8dd-2ee6-3edd-8e48-dbc55548f4d1.roa File: 2b38f8dd-2ee6-3edd-8e48-dbc55548f4d1.roa (raw, json) Hash identifier: cY3jRA2Pr6m0E8c7FBz9YpLCDH6LiFfsweHzMrfUI88= Subject key identifier: D7:71:F7:10:01:61:CB:48:80:42:3C:D5:43:6F:37:38:C3:40:FF:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA29AAF7BB13C8F5312700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b38f8dd-2ee6-3edd-8e48-dbc55548f4d1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 20362 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:29:aa:f7:bb:13:c8:f5:31:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3920a026-7add-44ef-9ecb-bed66dc86387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:a9:d9:5a:51:9d:96:a5:51:5d:7e:ec:e4: 9b:28:0b:97:c3:27:00:47:10:c5:10:a4:f1:0c:91: 7a:29:68:5d:8b:81:c9:a5:e8:a7:ff:63:c4:3c:2a: d8:35:df:d0:7f:6e:c7:ba:e7:5c:fa:eb:30:e2:c9: 6c:4a:53:a0:5c:b0:80:21:03:b2:9d:2a:b7:a7:7d: 99:fa:6e:c5:ea:cc:46:87:b2:eb:66:20:bd:92:c9: 36:1c:df:99:9f:ec:27:b9:81:3c:24:a8:df:9a:27: 88:e8:bc:82:3f:c4:55:1d:99:7f:d5:a5:d1:e2:f2: 32:8a:ad:6e:d5:ed:a2:a8:0a:95:7d:f7:d8:62:11: be:4b:b0:b5:a5:b7:fe:39:9a:62:36:82:d0:81:10: 9d:1c:af:4a:ce:0b:22:1d:93:0f:02:76:96:ce:73: 14:42:bb:e8:2d:94:e9:1d:70:f3:c3:e2:03:a3:f5: 5e:1c:9e:4d:f3:41:2e:6f:9a:51:a9:77:ef:93:79: 32:f5:e5:31:70:69:28:c7:6b:8f:f3:81:a7:4e:66: 64:4f:88:c0:d6:dd:88:1c:6f:ff:52:af:b9:53:7f: f9:6a:80:2d:bf:f5:35:9b:e1:68:d5:ca:5d:f7:c6: 50:1a:fa:df:8f:08:19:05:72:ed:b5:08:25:6d:7a: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:71:F7:10:01:61:CB:48:80:42:3C:D5:43:6F:37:38:C3:40:FF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b38f8dd-2ee6-3edd-8e48-dbc55548f4d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:68:a6:77:5a:21:1f:85:f8:f4:0c:60:14:ea:27:97:55:a8: d9:a4:c4:df:1c:d7:11:90:05:34:15:8a:69:2c:65:c3:4c:9f: e4:7c:c9:33:2f:e2:a3:63:8b:25:fc:11:c4:d0:b4:6c:ac:f4: 96:21:c8:8e:58:cb:67:99:bd:d3:28:85:2c:dd:64:c1:de:d2: a3:97:4f:dd:ca:c7:70:36:df:8b:15:36:82:c4:0d:e7:eb:71: 98:5f:fe:0c:65:48:3e:3b:61:33:a4:0b:9b:cd:54:c1:e7:9b: 79:f0:26:b3:dc:77:91:cb:c4:86:54:ba:09:3d:6e:5b:cb:d9: d1:c8:03:be:05:c5:e3:3b:33:ca:d0:4b:c0:68:8f:0b:b8:52: a7:52:21:2e:64:dd:ab:cf:38:20:37:f0:5f:c6:b2:0e:ad:ac: 61:1c:78:99:76:2d:0f:7a:6a:43:ab:29:c8:f6:1e:83:20:79: e6:b5:75:53:74:68:ff:97:af:bd:62:af:cd:f5:4b:89:32:11: 6d:45:ca:7e:75:51:1b:18:81:85:a6:58:d1:64:4c:ba:80:d4: 1b:c6:b0:b6:a0:fd:0d:23:50:1f:6d:ef:35:e4:1d:7c:f5:3d: a4:f9:8b:62:6e:1b:cd:41:e6:8d:84:df:34:67:da:4c:09:d1: 85:9d:66:96 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuimq97sTyPUxJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzkyMGEwMjYtN2FkZC00NGVmLTllY2ItYmVkNjZkYzg2Mzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSGp2VpRnZalUV1+7OSbKAuXwycARxDFEKTx DJF6KWhdi4HJpein/2PEPCrYNd/Qf27Huudc+usw4slsSlOgXLCAIQOynSq3p32Z +m7F6sxGh7LrZiC9ksk2HN+Zn+wnuYE8JKjfmieI6LyCP8RVHZl/1aXR4vIyiq1u 1e2iqAqVfffYYhG+S7C1pbf+OZpiNoLQgRCdHK9KzgsiHZMPAnaWznMUQrvoLZTp HXDzw+IDo/VeHJ5N80Eub5pRqXfvk3ky9eUxcGkox2uP84GnTmZkT4jA1t2IHG// Uq+5U3/5aoAtv/U1m+Fo1cpd98ZQGvrfjwgZBXLttQglbXrx6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNdx9xABYctIgEI81UNvNzjDQP8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIzOGY4ZGQtMmVlNi0z ZWRkLThlNDgtZGJjNTU1NDhmNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJaKZ3WiEfhfj0DGAU6ieXVajZpMTfHNcRkAU0 FYppLGXDTJ/kfMkzL+KjY4sl/BHE0LRsrPSWIciOWMtnmb3TKIUs3WTB3tKjl0/d ysdwNt+LFTaCxA3n63GYX/4MZUg+O2EzpAubzVTB55t58Caz3HeRy8SGVLoJPW5b y9nRyAO+BcXjOzPK0EvAaI8LuFKnUiEuZN2rzzggN/BfxrIOraxhHHiZdi0PempD qynI9h6DIHnmtXVTdGj/l6+9Yq/N9UuJMhFtRcp+dVEbGIGFpljRZEy6gNQbxrC2 oP0NI1Afbe815B189T2k+YtibhvNQeaNhN80Z9pMCdGFnWaW -----END CERTIFICATE-----Generated at Sat May 10 23:04:03 2025 by rpki-client