$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa File: aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa (raw, json) Hash identifier: +1vlg4ayC2idgTKtcpGY2CIfmLP9qbCHS/4k45BeNx8= Subject key identifier: CE:95:2A:A9:44:3C:D3:12:8C:25:34:C1:F6:5B:55:89:B5:A8:39:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668F1A65C39A038FDB3200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa Signing time: Tue 06 May 2025 12:43:06 +0000 ROA not before: Tue 06 May 2025 12:43:06 +0000 ROA not after: Mon 04 Aug 2025 12:43:06 +0000 asID: 397207 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8f:1a:65:c3:9a:03:8f:db:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:06 2025 GMT Not After : Aug 4 12:43:06 2025 GMT Subject: CN=c41b9a8c-bb1c-48de-a5f2-bd3120888551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:72:b3:ad:ee:89:ed:1d:55:6c:46:87:e5: 7b:f2:9d:f8:cf:e8:0f:66:0a:0b:28:62:95:c7:bd: ad:c7:8f:06:63:bd:d4:3d:08:a6:bc:38:f2:0f:1d: 70:d3:15:4a:60:38:0f:b9:8b:a7:ab:f7:8f:a8:0d: 55:64:a1:78:f7:e9:5e:88:55:37:64:1e:2e:69:4b: 32:99:bc:12:e5:37:b0:e3:5b:22:36:35:d0:d2:d2: 64:15:24:b7:2f:25:f1:1f:a6:03:51:68:7c:dd:cd: c7:93:30:93:b8:a1:95:b5:55:4c:02:8d:27:b7:0b: 67:69:3c:22:db:b3:f1:30:73:ba:49:82:df:bd:68: 99:e3:b8:46:77:83:c4:01:ca:58:59:02:ec:b6:c9: cd:47:f6:5a:72:8a:5c:07:b5:02:46:14:a3:7a:4b: 92:53:a6:68:57:b5:fc:09:b5:f3:d8:4d:84:df:f0: 8e:a1:4f:bd:68:6d:5f:16:e0:d2:8c:6e:ab:9c:14: 31:ba:a8:0f:73:c9:eb:20:31:33:8b:23:ff:59:18: cb:ec:68:50:bf:62:04:2f:57:ae:ad:64:a2:3a:0c: 5e:f4:2d:e0:03:57:42:43:b5:f4:23:15:62:c5:8b: e8:fa:b6:88:4a:d1:0a:cb:f7:25:9f:b2:79:b9:75: 49:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:2A:A9:44:3C:D3:12:8C:25:34:C1:F6:5B:55:89:B5:A8:39:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ee:6f:28:5f:94:8d:1e:e8:ce:c2:db:1b:da:3d:74:a1:02: aa:a8:ce:ee:b4:5c:66:29:bd:e0:3a:9f:be:17:a9:79:b5:1b: ce:02:c8:86:6a:ef:d0:1f:57:2a:39:7c:17:7e:99:22:e4:90: 47:7c:61:9c:8a:74:27:0c:ce:e6:70:11:de:f9:01:92:18:12: 40:00:24:e0:06:1c:61:7e:fe:84:d3:4d:1f:79:15:33:aa:c5: 4b:08:13:e4:89:14:1b:88:e0:59:eb:91:fa:ee:7b:84:f6:a5: 4a:1b:59:73:94:b3:f0:6f:ef:33:c8:58:68:ff:d7:7e:19:fa: c9:86:d9:63:99:d2:04:b1:54:cc:42:5b:04:8c:43:e9:89:1a: ef:08:38:dc:56:80:98:19:e3:cf:4a:e6:e9:8a:5a:f6:2e:81: cf:64:d0:12:0c:eb:1b:39:85:67:31:0e:7a:98:08:2a:ff:2b: b1:46:8b:36:21:ab:5b:7c:31:ba:40:6a:07:29:69:2e:27:b0: 64:2e:2f:96:c8:18:06:ef:97:73:8c:f9:e5:af:c9:db:a1:1e: 59:83:5c:5b:8c:af:b2:05:36:bc:0a:cf:40:e2:be:30:76:e5: 11:6b:c7:b1:6b:cc:56:71:96:25:0e:1a:b4:13:c7:17:3c:65: c0:72:76:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZo8aZcOaA4/bMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNloXDTI1MDgwNDEyNDMwNlowLzEtMCsGA1UEAxMk YzQxYjlhOGMtYmIxYy00OGRlLWE1ZjItYmQzMTIwODg4NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh9ys63uie0dVWxGh+V78p34z+gPZgoLKGKV x72tx48GY73UPQimvDjyDx1w0xVKYDgPuYunq/ePqA1VZKF49+leiFU3ZB4uaUsy mbwS5Tew41siNjXQ0tJkFSS3LyXxH6YDUWh83c3HkzCTuKGVtVVMAo0ntwtnaTwi 27PxMHO6SYLfvWiZ47hGd4PEAcpYWQLstsnNR/ZacopcB7UCRhSjekuSU6ZoV7X8 CbXz2E2E3/COoU+9aG1fFuDSjG6rnBQxuqgPc8nrIDEziyP/WRjL7GhQv2IEL1eu rWSiOgxe9C3gA1dCQ7X0IxVixYvo+raIStEKy/cln7J5uXVJewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM6VKqlEPNMSjCU0wfZbVYm1qDmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWExMTgxNWUtNzAzMC0z ZTgwLWIyZDgtMDQzOGQwZmIxYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHubyhflI0e6M7C2xvaPXShAqqozu60XGYpveA6n74XqXm1G84C yIZq79AfVyo5fBd+mSLkkEd8YZyKdCcMzuZwEd75AZIYEkAAJOAGHGF+/oTTTR95 FTOqxUsIE+SJFBuI4Fnrkfrue4T2pUobWXOUs/Bv7zPIWGj/134Z+smG2WOZ0gSx VMxCWwSMQ+mJGu8IONxWgJgZ489K5umKWvYugc9k0BIM6xs5hWcxDnqYCCr/K7FG izYhq1t8MbpAagcpaS4nsGQuL5bIGAbvl3OM+eWvyduhHlmDXFuMr7IFNrwKz0Di vjB25RFrx7FrzFZxliUOGrQTxxc8ZcBydh8= -----END CERTIFICATE-----Generated at Sat May 10 23:14:49 2025 by rpki-client