$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993d63e9-d72d-32bf-93c3-d060e1aa8313.roa File: 993d63e9-d72d-32bf-93c3-d060e1aa8313.roa (raw, json) Hash identifier: /N+TZuA7Yjd8BVS9kadPWC1S2/qmmYFBJX+1IWLWJWM= Subject key identifier: A4:9A:B4:6F:1B:88:25:44:88:0A:60:3F:B3:BD:2C:A2:0E:52:56:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668C9BCC8FC17B6DCEBE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993d63e9-d72d-32bf-93c3-d060e1aa8313.roa Signing time: Tue 06 May 2025 12:43:05 +0000 ROA not before: Tue 06 May 2025 12:43:05 +0000 ROA not after: Mon 04 Aug 2025 12:43:05 +0000 asID: 397203 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8c:9b:cc:8f:c1:7b:6d:ce:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:05 2025 GMT Not After : Aug 4 12:43:05 2025 GMT Subject: CN=91408124-e80e-40c8-a106-4c8c528e1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:bd:b4:74:a0:00:8c:9f:89:86:ea:ae:68: ac:ff:4c:ee:1a:40:1a:cf:83:85:7a:75:8f:f6:3b: 19:dd:e6:ea:5d:21:3f:9d:94:86:2e:ab:53:56:7f: 13:5f:1e:84:6a:66:c8:7a:95:a9:a6:1b:0d:67:91: d4:da:af:9e:3c:a4:8a:38:6a:8f:d3:33:c6:45:79: 70:00:7e:f0:84:75:e8:a3:b7:04:38:f3:9e:75:4e: 3c:37:62:f5:8a:54:c8:33:94:d4:fa:45:08:40:c0: 36:c8:f3:c9:6c:15:27:d0:b5:f9:08:7c:29:d2:ea: 90:7f:37:3b:ad:bc:4c:08:13:40:78:c5:0b:62:95: e6:13:c9:a3:46:31:67:72:38:e4:ff:64:5d:5c:ca: 02:23:b0:42:44:76:f9:6c:10:be:64:04:36:71:01: 21:42:cd:33:fb:78:f6:13:6a:ba:98:b6:ab:fc:cd: 0a:2a:78:ae:2a:e9:67:29:a6:72:33:5f:2f:1d:70: 43:cf:15:5e:41:8c:ca:d0:83:91:c8:da:83:d1:a6: ed:53:b5:b2:3e:7f:fc:c7:42:09:88:f5:ef:ba:8c: dc:ff:0a:4e:4c:1e:fb:7e:c3:53:66:68:d3:cc:ba: 3f:7f:4c:67:a4:95:6d:c1:45:81:60:1f:a6:b5:08: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9A:B4:6F:1B:88:25:44:88:0A:60:3F:B3:BD:2C:A2:0E:52:56:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993d63e9-d72d-32bf-93c3-d060e1aa8313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ec:7a:d5:61:21:b1:f6:f1:0c:51:61:2b:76:83:65:d0:46: 69:16:1f:cc:34:68:60:88:a2:ae:57:a4:89:ce:7f:11:ba:32: 27:7a:4d:15:15:5d:85:9a:95:b8:b3:c1:e8:1d:7a:68:98:1b: 63:2b:7f:73:56:f0:41:e3:fd:74:4a:79:2b:78:e3:6a:56:29: 41:ba:dc:5e:2e:f9:15:6d:f2:c3:8a:1b:3f:3b:8e:8d:a9:9f: f6:77:57:25:be:ca:d0:3b:c8:eb:20:96:7d:49:2f:f9:16:ec: 15:3c:04:45:94:33:3f:05:89:db:c1:fc:42:e5:7c:61:48:c0: a3:0e:ef:dc:29:32:3f:57:be:fd:74:4e:f2:72:5b:c0:5d:93: e5:be:69:88:3d:08:dc:37:3b:39:80:b9:fd:32:86:50:fe:18: 69:b7:91:60:22:4c:e0:17:1f:f6:1d:49:2c:20:f9:93:c0:51: 90:db:c2:8a:57:4e:09:b6:9e:0e:16:e6:9b:dc:8d:2c:a8:52: 8a:fa:36:3a:34:ee:3e:dc:48:d5:2c:e9:b1:23:2a:71:88:22: b1:8f:41:30:34:4d:c2:c7:36:0a:cc:e2:b9:66:b4:92:c7:91: 02:10:b5:a7:e5:57:71:d0:f1:21:26:bc:e8:81:cf:47:e6:23: b5:7a:d7:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZoybzI/Be23OvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNVoXDTI1MDgwNDEyNDMwNVowLzEtMCsGA1UEAxMk OTE0MDgxMjQtZTgwZS00MGM4LWExMDYtNGM4YzUyOGUxMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV69tHSgAIyfiYbqrmis/0zuGkAaz4OFenWP 9jsZ3ebqXSE/nZSGLqtTVn8TXx6EambIepWpphsNZ5HU2q+ePKSKOGqP0zPGRXlw AH7whHXoo7cEOPOedU48N2L1ilTIM5TU+kUIQMA2yPPJbBUn0LX5CHwp0uqQfzc7 rbxMCBNAeMULYpXmE8mjRjFncjjk/2RdXMoCI7BCRHb5bBC+ZAQ2cQEhQs0z+3j2 E2q6mLar/M0KKniuKulnKaZyM18vHXBDzxVeQYzK0IORyNqD0abtU7WyPn/8x0IJ iPXvuozc/wpOTB77fsNTZmjTzLo/f0xnpJVtwUWBYB+mtQhPMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKSatG8biCVEiApgP7O9LKIOUlaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTkzZDYzZTktZDcyZC0z MmJmLTkzYzMtZDA2MGUxYWE4MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKLsetVhIbH28QxRYSt2g2XQRmkWH8w0aGCIoq5XpInOfxG6Mid6 TRUVXYWalbizwegdemiYG2Mrf3NW8EHj/XRKeSt442pWKUG63F4u+RVt8sOKGz87 jo2pn/Z3VyW+ytA7yOsgln1JL/kW7BU8BEWUMz8FidvB/ELlfGFIwKMO79wpMj9X vv10TvJyW8Bdk+W+aYg9CNw3OzmAuf0yhlD+GGm3kWAiTOAXH/YdSSwg+ZPAUZDb wopXTgm2ng4W5pvcjSyoUor6Njo07j7cSNUs6bEjKnGIIrGPQTA0TcLHNgrM4rlm tJLHkQIQtaflV3HQ8SEmvOiBz0fmI7V613g= -----END CERTIFICATE-----Generated at Sun May 11 00:32:02 2025 by rpki-client