$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa File: 5256def5-4931-3d31-9c86-b0f630cdf8a0.roa (raw, json) Hash identifier: KRk8V8hQpoiKb3HIqzL3fHlGu6jWq3cqK+hinzUBgUo= Subject key identifier: 2A:A2:08:E2:13:A2:5F:69:1D:36:66:E8:F5:C5:EC:4F:BC:4B:0E:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668A2DF93EAE7B710DCCA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa Signing time: Tue 06 May 2025 12:43:03 +0000 ROA not before: Tue 06 May 2025 12:43:03 +0000 ROA not after: Mon 04 Aug 2025 12:43:03 +0000 asID: 396542 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8a:2d:f9:3e:ae:7b:71:0d:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:03 2025 GMT Not After : Aug 4 12:43:03 2025 GMT Subject: CN=aae5ac5d-cf50-40ee-82d7-bf8cb3521bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:4d:8c:e2:c3:30:5f:e9:68:36:67:65:bf: 87:f1:a1:ab:26:2b:a9:56:a1:98:27:b1:8f:81:92: a7:8a:5c:3e:51:40:f4:b1:16:bd:af:a2:e5:af:d4: 55:7a:c3:b0:c0:67:0d:8e:3a:0f:29:84:35:2a:b1: e0:65:9a:93:be:26:17:ad:58:15:f5:a3:cc:3a:6f: d1:a7:bd:7e:41:09:69:64:28:ee:a0:23:d7:e9:41: b5:79:dd:89:a1:8f:04:90:26:99:94:cb:09:81:58: c3:c1:4a:f3:69:6f:0e:e3:12:19:12:b0:9b:1e:ff: 3d:a9:16:e6:ea:dc:a9:4a:95:01:be:59:7d:3f:4a: 30:37:63:1a:e9:90:fb:23:c4:af:84:5d:01:c5:ae: 75:c8:f4:7c:44:1e:8c:60:c6:72:9f:5a:b2:23:3c: fb:bb:19:64:9d:0b:74:7a:48:a4:98:df:e2:b5:49: b9:ba:7e:be:33:f0:9b:39:80:0c:bb:54:69:f9:8d: 03:e5:53:d7:a1:12:ed:f0:5d:88:44:2f:dc:0d:06: c6:a5:b7:ae:13:52:3a:94:aa:21:f7:22:d9:26:a1: 43:99:90:6d:0f:4c:f8:cd:75:e0:04:3c:36:e4:3f: 36:ce:20:2b:57:a5:c2:37:d7:c5:75:8b:0c:1a:e2: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A2:08:E2:13:A2:5F:69:1D:36:66:E8:F5:C5:EC:4F:BC:4B:0E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ac:2a:20:a4:d2:b5:cc:98:b9:ed:8c:99:a6:08:62:ed:28: 97:c0:23:65:d3:f4:d0:80:d5:0c:8e:17:72:6e:f1:5f:67:0e: 79:b6:7e:61:27:0d:d6:9c:c4:a7:87:62:43:e5:1b:4b:ef:4d: 62:65:7a:7f:7f:2d:f1:ac:57:6f:e6:7e:7a:c7:47:f8:37:f7: 3d:e9:f3:6f:02:bd:a6:c1:8c:38:74:27:29:7d:12:c1:aa:0b: 0e:07:d4:43:bd:31:63:6c:21:b1:17:18:aa:e1:c9:43:7c:ef: 62:b9:fc:26:e7:00:7c:f6:61:92:0f:84:fa:ea:ed:12:af:25: c0:c5:aa:45:60:d0:58:b9:67:7b:ec:7f:8b:be:a7:4f:78:ef: 89:c7:48:16:5a:bf:75:3a:e6:b5:84:65:1b:0b:d5:ee:e3:43: bc:f6:92:02:9d:a5:0a:ec:8e:73:87:96:9b:2c:d1:ae:dd:3a: f7:19:fb:19:3a:61:ff:4e:a1:87:ba:ad:be:f8:99:c5:d3:57: 60:56:e4:89:6f:0f:f0:73:f9:5e:99:d9:db:d8:51:9b:00:0f: 0b:02:ff:26:25:94:ae:fe:a2:71:30:89:8a:ab:eb:59:e5:ed: 08:36:c1:8c:fe:e9:68:ff:48:4c:42:2b:3c:14:1b:25:36:c7: 3a:d0:3a:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZoot+T6ue3ENzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwM1oXDTI1MDgwNDEyNDMwM1owLzEtMCsGA1UEAxMk YWFlNWFjNWQtY2Y1MC00MGVlLTgyZDctYmY4Y2IzNTIxYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTdNjOLDMF/paDZnZb+H8aGrJiupVqGYJ7GP gZKnilw+UUD0sRa9r6Llr9RVesOwwGcNjjoPKYQ1KrHgZZqTviYXrVgV9aPMOm/R p71+QQlpZCjuoCPX6UG1ed2JoY8EkCaZlMsJgVjDwUrzaW8O4xIZErCbHv89qRbm 6typSpUBvll9P0owN2Ma6ZD7I8SvhF0Bxa51yPR8RB6MYMZyn1qyIzz7uxlknQt0 ekikmN/itUm5un6+M/CbOYAMu1Rp+Y0D5VPXoRLt8F2IRC/cDQbGpbeuE1I6lKoh 9yLZJqFDmZBtD0z4zXXgBDw25D82ziArV6XCN9fFdYsMGuIF7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCqiCOITol9pHTZm6PXF7E+8Sw68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI1NmRlZjUtNDkzMS0z ZDMxLTljODYtYjBmNjMwY2RmOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACusKiCk0rXMmLntjJmmCGLtKJfAI2XT9NCA1QyOF3Ju8V9nDnm2 fmEnDdacxKeHYkPlG0vvTWJlen9/LfGsV2/mfnrHR/g39z3p828CvabBjDh0Jyl9 EsGqCw4H1EO9MWNsIbEXGKrhyUN872K5/CbnAHz2YZIPhPrq7RKvJcDFqkVg0Fi5 Z3vsf4u+p09474nHSBZav3U65rWEZRsL1e7jQ7z2kgKdpQrsjnOHlpss0a7dOvcZ +xk6Yf9OoYe6rb74mcXTV2BW5IlvD/Bz+V6Z2dvYUZsADwsC/yYllK7+onEwiYqr 61nl7Qg2wYz+6Wj/SExCKzwUGyU2xzrQOnE= -----END CERTIFICATE-----Generated at Sun May 11 13:27:55 2025 by rpki-client