$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa File: 38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa (raw, json) Hash identifier: UWyCIg3YCtgrjiEhBrdM2oAaCnT3MCsHCVGUlhsMUd0= Subject key identifier: E1:21:E1:72:7C:A2:04:48:1D:24:24:CF:08:96:8F:7B:DA:DC:59:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB1539AFDB2FAA33E47F960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 211369 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:53:9a:fd:b2:fa:a3:3e:47:f9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=0b1d0ac6-620d-4ac9-9fb4-765ef1412fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:00:fe:c6:8e:f9:c1:42:85:b2:11:e8:33: ca:c2:f1:da:03:14:f4:e2:61:28:c3:a5:65:ac:86: 12:33:08:63:3f:2e:cc:d9:0b:0e:4a:2c:12:3b:b9: 10:c6:eb:ad:41:1f:b1:22:50:c0:9e:90:f1:cc:ae: 76:23:f2:74:37:07:aa:25:c2:3d:ac:52:c9:ab:0f: 11:c3:96:44:e7:c5:1f:3c:d7:b8:3d:5a:f2:24:25: 6c:ad:79:17:5e:64:9d:c8:01:c4:8f:79:92:f4:c8: db:8b:b9:03:fd:56:47:76:ee:7d:5a:7e:ed:a2:6c: 70:ef:af:66:2a:21:5d:5d:39:0f:43:90:d3:1a:11: ae:09:36:0f:78:82:7f:76:8b:5b:39:63:99:17:e0: f2:c6:f7:d3:45:1c:1f:67:7b:23:07:be:3f:a0:36: f5:50:4a:00:9a:e1:db:b3:5f:29:b2:1d:04:98:90: 88:2b:07:e4:ae:8e:ca:13:0b:c7:85:0d:dc:c5:4e: 6c:de:6e:b8:33:a7:89:4b:91:7a:e8:ef:f6:52:56: 46:13:1e:67:a5:fc:66:ce:3f:90:03:21:cd:4f:7b: dc:df:47:da:79:ce:45:e1:43:72:c2:73:5d:6e:b7: 89:2e:94:9b:e6:24:ca:91:2d:b0:7d:36:07:e5:af: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:21:E1:72:7C:A2:04:48:1D:24:24:CF:08:96:8F:7B:DA:DC:59:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a4:4e:5f:be:83:30:35:75:f1:fb:ec:b3:cb:16:33:f5:96: ab:28:d7:74:87:48:92:8b:ff:47:ad:ee:a9:47:a5:0b:d9:0a: 51:ac:c4:de:b5:21:a0:0b:be:a1:ca:f0:3a:e1:18:be:be:cd: 29:f4:c5:99:e7:85:c5:a8:aa:5b:74:f3:e4:4c:d1:bb:25:56: 06:90:04:a6:84:91:4b:98:48:02:01:9b:0e:b9:49:34:0d:5a: 59:29:5a:d8:c4:34:bd:cc:f2:5d:ab:2b:64:12:19:68:35:61: 35:32:b8:2c:c4:c3:6a:fe:7a:4f:e1:99:c9:57:e6:59:9c:bd: d3:f1:b1:9f:67:d7:92:f2:2b:8a:68:39:d7:e2:4f:c0:11:69: f6:ec:6a:29:e8:53:81:f8:4e:d1:cf:13:bc:a9:36:c0:51:f3: 26:2c:0e:74:3f:a9:07:40:3f:d3:6a:e6:1e:44:8a:76:b0:b7: 77:4f:82:7b:63:f1:8a:83:8d:ec:8f:df:50:91:a5:68:cb:3f: 1b:96:cb:7b:61:83:5c:84:b5:ba:70:bf:43:cd:e5:e0:de:bf: 63:4c:13:80:6d:4a:83:06:e4:08:e9:b4:fe:5d:1c:d1:83:24: 77:89:2e:96:6b:25:ae:37:1e:62:04:ca:dc:d2:89:cc:80:2c: 3c:d7:a4:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsVOa/bL6oz5H+WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MGIxZDBhYzYtNjIwZC00YWM5LTlmYjQtNzY1ZWYxNDEyZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IA/saO+cFChbIR6DPKwvHaAxT04mEow6Vl rIYSMwhjPy7M2QsOSiwSO7kQxuutQR+xIlDAnpDxzK52I/J0NweqJcI9rFLJqw8R w5ZE58UfPNe4PVryJCVsrXkXXmSdyAHEj3mS9Mjbi7kD/VZHdu59Wn7tomxw769m KiFdXTkPQ5DTGhGuCTYPeIJ/dotbOWOZF+DyxvfTRRwfZ3sjB74/oDb1UEoAmuHb s18psh0EmJCIKwfkro7KEwvHhQ3cxU5s3m64M6eJS5F66O/2UlZGEx5npfxmzj+Q AyHNT3vc30faec5F4UNywnNdbreJLpSb5iTKkS2wfTYH5a8lzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEh4XJ8ogRIHSQkzwiWj3va3FlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhjYTgzYWUtNzdiYi0z YzBkLWFjYzgtMGM1NjFjZDU4NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmkTl++gzA1dfH77LPLFjP1lqso13SHSJKL/0et7qlHpQvZClGs xN61IaALvqHK8DrhGL6+zSn0xZnnhcWoqlt08+RM0bslVgaQBKaEkUuYSAIBmw65 STQNWlkpWtjENL3M8l2rK2QSGWg1YTUyuCzEw2r+ek/hmclX5lmcvdPxsZ9n15Ly K4poOdfiT8ARafbsainoU4H4TtHPE7ypNsBR8yYsDnQ/qQdAP9Nq5h5Einawt3dP gntj8YqDjeyP31CRpWjLPxuWy3thg1yEtbpwv0PN5eDev2NME4BtSoMG5AjptP5d HNGDJHeJLpZrJa43HmIEytzSicyALDzXpCk= -----END CERTIFICATE-----Generated at Sun May 11 12:23:48 2025 by rpki-client