$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa File: 32de4ec2-dccd-3d59-9c79-022f7580002d.roa (raw, json) Hash identifier: JALgpaGbVSGCHR1/OgWstS9RBRwzFq/w613hTnUr864= Subject key identifier: 7E:8F:85:FD:92:A9:03:CD:30:16:3E:38:63:54:8D:FC:ED:72:5E:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668D2948A56956B615AC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa Signing time: Tue 06 May 2025 12:43:05 +0000 ROA not before: Tue 06 May 2025 12:43:05 +0000 ROA not after: Mon 04 Aug 2025 12:43:05 +0000 asID: 396584 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8d:29:48:a5:69:56:b6:15:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:05 2025 GMT Not After : Aug 4 12:43:05 2025 GMT Subject: CN=33ebe9b5-b9d0-467b-a890-392991d93cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:1b:d9:6e:1f:8b:c3:9f:d7:95:29:db:ce: 36:e4:fd:2d:9f:88:98:55:7b:95:1e:01:a9:a1:6d: c0:2c:78:99:7e:af:f6:e3:41:2a:37:ff:2f:14:c8: c3:80:1e:0d:87:84:88:33:2a:cf:61:d8:37:fd:40: 0e:e8:ae:c0:a6:d5:2f:58:a2:c0:88:f5:3a:27:61: fe:32:d5:8b:6f:65:0b:6d:66:91:10:53:bc:1d:aa: ad:a5:de:9e:04:e4:d1:4f:aa:39:19:3e:4d:8c:c2: c8:ea:39:28:cc:ae:e2:a3:24:3c:89:b9:25:72:2c: 41:be:d7:81:81:39:7d:b5:2c:0f:86:1e:97:03:8f: 0e:bf:e4:8f:0e:a9:46:03:3a:90:ba:99:62:b9:30: 98:0a:10:95:c8:43:53:52:65:9b:58:21:f4:50:ed: 04:4f:0f:88:f0:df:70:43:64:bb:06:a6:95:ac:c4: 69:11:e9:50:fb:40:29:3a:51:5c:9d:31:d2:f3:09: d6:43:9e:0e:62:10:2c:b2:fc:7c:58:e5:9a:5a:8d: f9:e4:0b:b1:ad:1d:bb:e7:87:d2:c0:35:ec:16:f4: 22:4a:3b:19:21:7a:0b:1f:5a:08:d0:be:74:df:56: 39:37:11:32:2a:b0:c1:a8:e4:2d:ae:2d:d3:3e:54: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8F:85:FD:92:A9:03:CD:30:16:3E:38:63:54:8D:FC:ED:72:5E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e2:9c:fc:6e:6d:56:82:d0:f1:8b:19:e7:89:af:13:51:96: 3d:94:68:3b:11:30:fb:bf:ad:67:40:03:dd:97:f4:ff:2b:81: e4:30:24:5c:cb:c6:f3:f1:7c:f6:26:25:11:04:83:aa:42:ff: 8d:94:1a:e1:b5:aa:ef:ba:23:03:ff:77:b3:9e:04:f8:5a:ba: 34:24:ef:1a:ce:67:8d:fe:e0:96:72:bb:33:2f:97:32:56:ea: b1:2f:1d:43:c4:13:36:99:91:ec:68:f5:ab:f0:5f:ac:2b:37: f6:31:84:d2:34:5b:79:b4:89:c2:07:6e:cd:42:a0:2e:de:91: 0c:0a:94:92:be:2d:2f:7e:6c:df:a8:e5:f2:9b:a4:f4:f4:95: c6:02:8f:36:8f:ab:62:0b:fa:b6:68:6b:6d:c3:d5:c0:45:82: 91:db:a3:1f:1d:f1:56:d9:05:27:b8:8d:38:1e:f3:6f:cd:72: 02:0d:91:d9:61:b1:84:59:30:f1:ab:26:72:79:cf:5e:82:f8: 25:28:ff:c6:09:86:f7:5c:51:d6:0b:46:f1:a5:a0:80:e0:12: ca:50:18:c1:7f:10:7f:c4:59:c7:ad:b5:63:38:10:7c:46:c2: bd:b8:7d:a0:e9:68:03:94:a0:0d:d4:27:4e:d0:76:90:62:95: 8c:c2:86:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZo0pSKVpVrYVrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNVoXDTI1MDgwNDEyNDMwNVowLzEtMCsGA1UEAxMk MzNlYmU5YjUtYjlkMC00NjdiLWE4OTAtMzkyOTkxZDkzY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHMb2W4fi8Of15Up28425P0tn4iYVXuVHgGp oW3ALHiZfq/240EqN/8vFMjDgB4Nh4SIMyrPYdg3/UAO6K7AptUvWKLAiPU6J2H+ MtWLb2ULbWaREFO8Haqtpd6eBOTRT6o5GT5NjMLI6jkozK7ioyQ8ibklcixBvteB gTl9tSwPhh6XA48Ov+SPDqlGAzqQupliuTCYChCVyENTUmWbWCH0UO0ETw+I8N9w Q2S7BqaVrMRpEelQ+0ApOlFcnTHS8wnWQ54OYhAssvx8WOWaWo355AuxrR2754fS wDXsFvQiSjsZIXoLH1oI0L5031Y5NxEyKrDBqOQtri3TPlSkPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH6Phf2SqQPNMBY+OGNUjfztcl43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJkZTRlYzItZGNjZC0z ZDU5LTljNzktMDIyZjc1ODAwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfinPxubVaC0PGLGeeJrxNRlj2UaDsRMPu/rWdAA92X9P8rgeQw JFzLxvPxfPYmJREEg6pC/42UGuG1qu+6IwP/d7OeBPhaujQk7xrOZ43+4JZyuzMv lzJW6rEvHUPEEzaZkexo9avwX6wrN/YxhNI0W3m0icIHbs1CoC7ekQwKlJK+LS9+ bN+o5fKbpPT0lcYCjzaPq2IL+rZoa23D1cBFgpHbox8d8VbZBSe4jTge82/NcgIN kdlhsYRZMPGrJnJ5z16C+CUo/8YJhvdcUdYLRvGloIDgEspQGMF/EH/EWcettWM4 EHxGwr24faDpaAOUoA3UJ07QdpBilYzChtI= -----END CERTIFICATE-----Generated at Sat May 10 23:32:25 2025 by rpki-client