$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a7aedc8-d901-35ae-9e6a-e3513801a928.roa File: 8a7aedc8-d901-35ae-9e6a-e3513801a928.roa (raw, json) Hash identifier: q7yy8sB1PfPF40Jf3YAW5FQoeSj6SBgrWy+Tkz9fWA0= Subject key identifier: 7D:73:03:9E:E8:86:16:33:CD:FF:5D:8A:1D:C4:FA:16:78:22:3A:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668E9A6D8F8793326E8DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a7aedc8-d901-35ae-9e6a-e3513801a928.roa Signing time: Tue 06 May 2025 12:43:06 +0000 ROA not before: Tue 06 May 2025 12:43:06 +0000 ROA not after: Mon 04 Aug 2025 12:43:06 +0000 asID: 396602 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8e:9a:6d:8f:87:93:32:6e:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:06 2025 GMT Not After : Aug 4 12:43:06 2025 GMT Subject: CN=2680e828-1bab-40a6-9bd7-dc022553fc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:6b:0c:a5:fa:d4:57:b4:40:ab:b6:25:29: 82:8a:a7:69:d4:da:83:30:8f:c2:2a:f2:86:f1:d0: f8:f2:f1:3e:8f:cc:dc:3f:15:db:d2:64:c4:a9:08: 97:35:83:40:39:c6:2c:75:35:28:f9:13:65:c1:b5: 22:cc:90:e2:ef:dc:f0:68:63:5d:28:93:00:1a:cb: 79:75:e3:42:c4:43:13:37:0a:34:50:83:54:7a:a4: be:8f:f0:03:db:73:17:2d:23:24:0b:5a:47:c6:74: 7a:32:3b:65:bc:f2:4b:f8:45:da:3a:4b:3b:d6:13: e9:2f:c1:4c:66:55:cc:d4:fc:f1:9a:86:d2:15:e7: 8a:0c:5e:23:10:de:35:59:dc:ae:21:49:91:d9:14: 01:65:ec:51:0c:27:04:68:c9:47:18:11:b6:20:92: 25:12:c3:03:8a:79:13:8b:b1:35:b0:35:65:e1:8b: c6:4b:0f:ec:32:e9:1a:f5:2e:96:59:b5:f3:eb:30: 30:60:04:61:4f:20:5b:66:4b:95:bc:29:fd:07:f2: 0b:83:16:bf:09:97:c9:5d:75:ee:da:a4:4a:7a:78: 47:be:8d:ec:93:0c:88:ea:54:36:80:8a:b5:1a:f6: 79:b8:df:d6:c2:3f:77:20:52:0d:89:22:df:e1:e8: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:73:03:9E:E8:86:16:33:CD:FF:5D:8A:1D:C4:FA:16:78:22:3A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a7aedc8-d901-35ae-9e6a-e3513801a928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cb:7b:0e:28:2b:b0:3a:a6:d0:19:c6:4c:65:40:80:18:32: e4:bb:0d:70:6d:52:2a:6a:41:f4:00:ed:6e:ab:27:41:5a:b2: d0:93:d4:24:e9:4d:99:e0:35:65:01:79:e7:36:ad:25:dd:e4: 37:31:87:d4:7b:b3:de:ef:d1:ab:41:9b:b5:a1:75:49:92:6b: e1:59:ea:31:79:4c:37:08:8d:28:70:29:51:93:67:06:28:77: 0c:54:d4:1b:51:fd:1c:88:d0:2c:0e:73:c4:66:f2:8e:23:05: bd:95:40:b1:6d:48:46:33:16:d9:ec:53:31:b8:25:d9:7b:05: bd:3d:cf:de:e6:08:c7:16:18:da:4e:f1:1e:68:ec:40:6d:7d: 9f:7e:2a:1d:a3:df:80:ae:ba:9d:7f:95:d5:6d:86:be:fd:6f: bb:fb:94:95:b3:ed:e0:1c:6b:33:25:ea:bc:6e:30:44:87:ca: 4a:d8:c8:d4:eb:b4:a1:39:6c:3d:91:b0:21:cc:f9:d0:b0:cc: 9b:2d:1d:ee:7d:67:c4:b8:a1:6f:65:00:4f:69:8d:36:27:e8: f0:8d:b0:50:8f:34:b1:84:f1:cd:29:cb:e2:02:b6:18:17:54: 6f:aa:5f:ca:ee:c3:3b:64:5c:b9:87:d9:2e:95:82:a3:7e:d6: af:7a:df:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZo6abY+HkzJujcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNloXDTI1MDgwNDEyNDMwNlowLzEtMCsGA1UEAxMk MjY4MGU4MjgtMWJhYi00MGE2LTliZDctZGMwMjI1NTNmYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS1rDKX61Fe0QKu2JSmCiqdp1NqDMI/CKvKG 8dD48vE+j8zcPxXb0mTEqQiXNYNAOcYsdTUo+RNlwbUizJDi79zwaGNdKJMAGst5 deNCxEMTNwo0UINUeqS+j/AD23MXLSMkC1pHxnR6MjtlvPJL+EXaOks71hPpL8FM ZlXM1PzxmobSFeeKDF4jEN41WdyuIUmR2RQBZexRDCcEaMlHGBG2IJIlEsMDinkT i7E1sDVl4YvGSw/sMuka9S6WWbXz6zAwYARhTyBbZkuVvCn9B/ILgxa/CZfJXXXu 2qRKenhHvo3skwyI6lQ2gIq1GvZ5uN/Wwj93IFINiSLf4ejFMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH1zA57ohhYzzf9dih3E+hZ4IjrrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE3YWVkYzgtZDkwMS0z NWFlLTllNmEtZTM1MTM4MDFhOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfLew4oK7A6ptAZxkxlQIAYMuS7DXBtUipqQfQA7W6rJ0FastCT 1CTpTZngNWUBeec2rSXd5Dcxh9R7s97v0atBm7WhdUmSa+FZ6jF5TDcIjShwKVGT ZwYodwxU1BtR/RyI0CwOc8Rm8o4jBb2VQLFtSEYzFtnsUzG4Jdl7Bb09z97mCMcW GNpO8R5o7EBtfZ9+Kh2j34Cuup1/ldVthr79b7v7lJWz7eAcazMl6rxuMESHykrY yNTrtKE5bD2RsCHM+dCwzJstHe59Z8S4oW9lAE9pjTYn6PCNsFCPNLGE8c0py+IC thgXVG+qX8ruwztkXLmH2S6VgqN+1q96300= -----END CERTIFICATE-----Generated at Sun May 11 10:10:25 2025 by rpki-client