$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa File: 4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa (raw, json) Hash identifier: 1zrukiKztL7cohuLINBlArQXt+0x5rWKDmOSNG7HaAg= Subject key identifier: AD:0D:8C:B5:4B:5A:45:E8:D3:C1:D1:95:C6:77:6F:E2:35:C4:D8:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668C6D2E85852626F62280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa Signing time: Tue 06 May 2025 12:43:05 +0000 ROA not before: Tue 06 May 2025 12:43:05 +0000 ROA not after: Mon 04 Aug 2025 12:43:05 +0000 asID: 396605 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8c:6d:2e:85:85:26:26:f6:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:05 2025 GMT Not After : Aug 4 12:43:05 2025 GMT Subject: CN=aeaec48f-5bdc-4ea5-993e-951bc75fc9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:3d:3d:53:bc:39:9d:62:f4:1f:83:fe:c9: 95:49:6b:ba:26:a9:9d:8d:bc:98:33:03:ea:e8:49: bb:66:75:63:3b:8c:c8:80:a3:e9:2a:51:06:bb:d1: 05:be:d9:3a:26:d8:99:53:ac:5c:b2:4a:e9:e1:89: 57:15:59:91:a0:74:07:23:d0:50:1f:b0:35:e7:94: f3:e2:0e:63:97:48:d4:6c:be:35:73:b2:8d:de:31: 82:79:ba:a8:5d:19:f0:e7:dd:fc:36:cd:31:67:d7: 67:a9:a3:08:50:8f:cc:f2:30:d2:bf:ff:40:5f:a5: 25:64:1c:b9:24:3e:e2:7f:49:69:76:d6:37:b2:4e: fa:49:74:71:39:35:a9:19:19:ff:5b:2e:4c:01:d1: 01:8d:ac:a5:ff:2a:72:af:06:0b:7c:a2:77:b8:52: b7:17:81:5b:59:d7:39:a3:b3:00:06:96:2c:c7:55: c4:1e:eb:21:67:1c:c6:ae:ef:9b:80:2e:2d:e3:d6: 66:d3:8f:2a:38:f1:be:1c:84:9c:4f:a5:9e:5e:b8: ed:68:b8:5d:1f:35:26:86:01:88:3e:e1:57:ae:59: b7:40:fb:0b:bc:66:9f:9b:c5:d0:88:d0:36:45:a9: b7:e0:e5:31:fe:52:51:1b:1b:ed:00:f3:30:1a:40: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:8C:B5:4B:5A:45:E8:D3:C1:D1:95:C6:77:6F:E2:35:C4:D8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6f:7a:f9:97:98:34:fc:85:f0:c4:08:a0:6d:49:29:f1:12: 00:17:ce:80:96:ae:b1:e7:39:ac:85:60:a2:c0:aa:1e:a1:50: 78:e9:5f:8b:36:6b:64:cd:7a:03:3b:48:ac:32:dd:eb:4a:53: 94:31:00:f3:6a:49:1a:bd:d1:f1:f8:c6:4d:07:47:fd:31:b7: e5:1b:db:b5:0b:f0:48:85:ac:1c:18:99:9e:b1:b5:c5:d8:03: 65:26:7d:48:13:96:3d:e1:c3:65:de:be:f4:cc:e6:8f:e3:b0: 3a:6a:e6:94:d4:15:83:dc:1a:81:90:62:dc:ca:81:c1:ab:bc: c4:46:94:e1:57:a8:51:b1:9e:da:42:dc:bc:d6:74:57:9d:5e: 8d:14:0f:4c:bd:10:60:8d:d6:bd:06:0f:6d:18:7b:4a:0c:d3: 8b:16:19:dd:d3:3f:2f:f0:18:67:f0:b4:b5:86:04:38:3e:68: 0c:5d:ec:2b:9f:2d:12:1f:84:45:96:2c:ac:26:7d:85:02:ff: 9e:c2:ed:a1:ab:6a:34:ee:36:30:85:32:40:99:95:ee:bd:1d: c8:33:81:1a:ad:08:86:94:bb:87:a1:8a:ac:56:1b:e1:fd:e4: c0:13:d4:0b:af:f3:28:de:52:38:f1:ed:20:8a:a7:3d:15:a4: e5:b1:13:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZoxtLoWFJib2IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNVoXDTI1MDgwNDEyNDMwNVowLzEtMCsGA1UEAxMk YWVhZWM0OGYtNWJkYy00ZWE1LTk5M2UtOTUxYmM3NWZjOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHA9PVO8OZ1i9B+D/smVSWu6JqmdjbyYMwPq 6Em7ZnVjO4zIgKPpKlEGu9EFvtk6JtiZU6xcskrp4YlXFVmRoHQHI9BQH7A155Tz 4g5jl0jUbL41c7KN3jGCebqoXRnw5938Ns0xZ9dnqaMIUI/M8jDSv/9AX6UlZBy5 JD7if0lpdtY3sk76SXRxOTWpGRn/Wy5MAdEBjayl/ypyrwYLfKJ3uFK3F4FbWdc5 o7MABpYsx1XEHushZxzGru+bgC4t49Zm048qOPG+HIScT6WeXrjtaLhdHzUmhgGI PuFXrlm3QPsLvGafm8XQiNA2Ram34OUx/lJRGxvtAPMwGkADIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK0NjLVLWkXo08HRlcZ3b+I1xNhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVhMTRmZjAtZGZkZS0z YTU0LTkzMDYtYzM2ZDM1ZjE5MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNvevmXmDT8hfDECKBtSSnxEgAXzoCWrrHnOayFYKLAqh6hUHjp X4s2a2TNegM7SKwy3etKU5QxAPNqSRq90fH4xk0HR/0xt+Ub27UL8EiFrBwYmZ6x tcXYA2UmfUgTlj3hw2XevvTM5o/jsDpq5pTUFYPcGoGQYtzKgcGrvMRGlOFXqFGx ntpC3LzWdFedXo0UD0y9EGCN1r0GD20Ye0oM04sWGd3TPy/wGGfwtLWGBDg+aAxd 7CufLRIfhEWWLKwmfYUC/57C7aGrajTuNjCFMkCZle69HcgzgRqtCIaUu4ehiqxW G+H95MAT1Auv8yjeUjjx7SCKpz0VpOWxE3A= -----END CERTIFICATE-----Generated at Sat May 10 23:09:31 2025 by rpki-client