$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa File: 65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa (raw, json) Hash identifier: QXY7QX8lhcPFQDDhPsB1B97HG4zTY+IG/tlcMzfFTik= Subject key identifier: 8A:00:75:DE:7E:50:E8:2F:FC:6A:A3:2C:99:36:DC:95:4D:0D:C7:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498339E22B677C0414AA25D180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 397199 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:e2:2b:67:7c:04:14:aa:25:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=bfe90fff-bae6-4f4c-a817-6b0288dac2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:4f:40:76:23:5e:1b:a7:b6:02:b4:d4:96: 26:09:00:5a:3c:64:01:ad:f9:ef:54:85:2b:d0:e3: bd:b2:93:d1:75:b6:f3:60:3e:a2:68:85:0a:2e:a0: df:4d:a8:6b:54:46:22:34:fa:e1:df:a8:70:d5:09: d5:59:f7:48:fc:92:c6:a4:99:31:5b:04:87:d7:98: 97:e7:88:74:14:04:19:a8:83:8b:0f:f1:6c:38:bb: 15:50:db:fd:d2:a8:5c:98:e3:da:08:89:b4:dc:9a: 19:eb:02:d9:0d:7d:f9:9b:6f:e7:57:dc:fb:95:5e: 09:e2:01:35:59:f8:fc:36:8f:42:bf:e8:01:98:9c: 24:ac:05:65:8d:23:b4:44:5b:ca:6e:e4:8c:a9:53: 6b:ca:df:29:ab:e4:26:80:60:d1:bf:a4:29:f6:f5: 8f:a2:77:8f:6b:fd:3b:86:6b:5e:62:8f:98:85:a3: 9e:8b:75:2b:c8:0c:6e:d4:aa:83:d8:b2:c9:d7:dd: eb:83:eb:68:b7:38:88:ed:37:d6:52:0a:e1:44:c2: 58:2b:a2:72:ba:28:2f:18:ee:92:4b:a1:3d:93:c6: d1:d8:b8:25:4e:3e:4b:11:51:dc:dd:e8:eb:50:97: 01:9b:bf:ac:a8:02:52:91:b3:70:7c:f9:e5:5a:af: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:00:75:DE:7E:50:E8:2F:FC:6A:A3:2C:99:36:DC:95:4D:0D:C7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:85:c6:3b:ca:6a:c9:84:88:1e:eb:36:48:3e:bd:90:a2:4a: e0:ef:8a:16:9b:57:eb:d3:ea:c0:8f:09:4c:d4:dd:e9:28:08: 67:d4:e9:11:d0:4f:ad:f0:db:84:b2:0d:9f:73:4c:36:91:aa: 85:3e:49:06:9b:f9:b0:56:6d:72:9d:d7:2e:4b:54:56:6e:29: b7:1a:34:b2:6e:5c:92:bb:fe:15:56:e1:4f:34:b0:05:79:55: 91:cf:3d:9b:7e:45:cc:25:38:f7:e2:85:d7:e5:3e:54:20:67: eb:55:68:a2:56:bf:68:d8:19:9e:68:d9:cd:59:2b:91:6a:dd: 1a:1a:d1:6e:af:83:a3:db:58:4b:5d:32:8e:24:21:1b:06:af: eb:84:5a:5c:7c:6b:63:cf:82:d9:09:78:37:42:ec:31:7b:79: 4d:85:e8:64:77:ce:49:32:4e:7f:cd:94:14:7a:6e:47:02:76: 6a:0b:d2:bb:e3:43:ae:05:18:3a:a7:74:fd:31:a4:f8:0d:cc: 0d:7b:53:ba:c7:05:01:59:b1:bc:0e:69:7c:41:c4:b9:03:7e: c6:49:3d:07:94:1c:5b:2b:44:f3:46:92:62:ea:92:8c:ba:aa: 67:a8:07:61:ff:f2:10:6e:d8:10:a7:5f:56:cc:89:35:8d:10: f7:61:cb:9d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmDOeIrZ3wEFKol0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YmZlOTBmZmYtYmFlNi00ZjRjLWE4MTctNmIwMjg4ZGFjMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9BPQHYjXhuntgK01JYmCQBaPGQBrfnvVIUr 0OO9spPRdbbzYD6iaIUKLqDfTahrVEYiNPrh36hw1QnVWfdI/JLGpJkxWwSH15iX 54h0FAQZqIOLD/FsOLsVUNv90qhcmOPaCIm03JoZ6wLZDX35m2/nV9z7lV4J4gE1 Wfj8No9Cv+gBmJwkrAVljSO0RFvKbuSMqVNryt8pq+QmgGDRv6Qp9vWPonePa/07 hmteYo+YhaOei3UryAxu1KqD2LLJ193rg+totziI7TfWUgrhRMJYK6JyuigvGO6S S6E9k8bR2LglTj5LEVHc3ejrUJcBm7+sqAJSkbNwfPnlWq9zEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIoAdd5+UOgv/GqjLJk23JVNDcfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjVhYzhkZDUtMDJiNi0z NWQyLWI3ZTUtZTZiY2NhZjhkNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAChcY7ymrJhIge6zZIPr2Qokrg74oWm1fr0+rA jwlM1N3pKAhn1OkR0E+t8NuEsg2fc0w2kaqFPkkGm/mwVm1yndcuS1RWbim3GjSy blySu/4VVuFPNLAFeVWRzz2bfkXMJTj34oXX5T5UIGfrVWiiVr9o2BmeaNnNWSuR at0aGtFur4Oj21hLXTKOJCEbBq/rhFpcfGtjz4LZCXg3Quwxe3lNhehkd85JMk5/ zZQUem5HAnZqC9K740OuBRg6p3T9MaT4DcwNe1O6xwUBWbG8Dml8QcS5A37GST0H lBxbK0TzRpJi6pKMuqpnqAdh//IQbtgQp19WzIk1jRD3Ycud -----END CERTIFICATE-----Generated at Sat May 10 23:13:33 2025 by rpki-client