$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa File: ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa (raw, json) Hash identifier: xZq1dbtO3XGoD918odOcnHtY1GeMudBM67y1FRxadhM= Subject key identifier: CA:43:72:1F:11:9C:3D:66:B9:88:DE:E9:5A:EE:7B:5A:80:97:A8:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C36689FCA8A290E2EAAEB4C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa Signing time: Tue 06 May 2025 12:43:03 +0000 ROA not before: Tue 06 May 2025 12:43:03 +0000 ROA not after: Mon 04 Aug 2025 12:43:03 +0000 asID: 396545 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:89:fc:a8:a2:90:e2:ea:ae:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:03 2025 GMT Not After : Aug 4 12:43:03 2025 GMT Subject: CN=f8328e22-7cc4-4e18-94c0-c01c6d815eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:a6:35:69:9a:1f:2c:cf:a3:88:fb:b4:de: 24:7b:e0:65:c5:3a:1d:ef:35:de:37:b0:ee:8c:01: 87:e6:f8:3c:59:aa:20:e9:14:ff:0f:3e:17:2f:67: 8a:0d:74:13:e6:ea:58:03:13:c5:32:e4:6e:4a:5b: d7:23:0f:e3:e4:13:ea:0c:b4:78:b8:d3:35:e3:21: a6:37:e2:b8:d8:b7:be:70:cf:cd:02:59:47:97:cc: 12:b8:93:fd:7f:6a:a6:da:c0:38:98:a9:6e:c3:d2: a9:ce:33:2d:54:c5:72:dc:c0:67:a7:7a:9d:48:bc: c6:73:df:96:47:66:15:4e:35:f1:c4:0a:29:9d:71: ae:24:2e:60:74:4d:b8:19:7d:bc:ce:00:19:bc:10: 45:77:19:5e:ff:6d:16:71:13:89:3c:be:c8:0d:a5: 02:96:45:19:f4:c6:c5:31:b5:5d:7b:b2:09:50:3c: 33:b9:c3:4e:7e:49:08:91:cf:35:a6:ae:67:ff:bf: 93:f7:b1:25:76:5f:15:db:d1:c7:73:da:a1:24:68: b5:20:fc:0f:2a:01:82:3f:72:63:7b:83:fe:e1:0b: 2b:87:80:d5:cb:19:8a:1a:3a:df:2e:d3:71:08:1d: 5b:3a:eb:e6:3b:50:42:e5:4d:dd:92:1b:96:18:a6: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:72:1F:11:9C:3D:66:B9:88:DE:E9:5A:EE:7B:5A:80:97:A8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dc:22:a3:09:a0:bc:82:25:b3:5b:8b:cd:30:d2:be:c5:ad: 1d:e9:da:80:f8:1c:8d:03:74:ec:37:09:b5:41:fd:e3:94:22: f5:69:13:bc:e0:5a:15:0d:21:07:e6:ae:6c:e2:2f:b0:bf:f6: 26:de:49:41:18:cc:e4:9c:a5:53:0c:9d:c3:65:b4:18:44:f5: e4:36:4a:41:14:bc:4b:0a:97:f1:e5:7b:d8:9c:15:1c:5e:2c: 8c:ac:b1:09:96:46:e4:bb:8d:4f:7b:8d:02:2f:90:73:ba:42: 5b:17:bc:c2:b1:31:68:ac:f5:3e:ee:11:5d:e9:28:59:6f:db: f3:5e:9b:db:97:f8:f5:ea:67:d8:85:45:6a:4c:79:95:21:6a: f9:67:07:6d:87:7a:4f:ac:ad:9d:16:f9:12:c6:13:0f:58:8c: 82:b7:46:45:ed:2b:c2:1d:66:0e:b9:65:0c:e4:52:4a:2f:f8: 60:d6:30:cd:2e:b0:70:e6:d0:7f:b4:92:2f:ce:5c:eb:dc:06: 83:82:f0:22:bc:b4:04:c4:b2:66:35:58:d7:f9:d6:0c:e7:f1: 24:4a:89:6f:b5:4f:9e:06:33:b5:8d:45:97:1f:64:43:9e:a9: 0c:ec:74:a2:8f:7d:73:93:8e:76:5d:d9:d5:3c:27:9c:c6:08: 45:96:ab:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZon8qKKQ4uqutMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwM1oXDTI1MDgwNDEyNDMwM1owLzEtMCsGA1UEAxMk ZjgzMjhlMjItN2NjNC00ZTE4LTk0YzAtYzAxYzZkODE1ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswSmNWmaHyzPo4j7tN4ke+BlxTod7zXeN7Du jAGH5vg8Waog6RT/Dz4XL2eKDXQT5upYAxPFMuRuSlvXIw/j5BPqDLR4uNM14yGm N+K42Le+cM/NAllHl8wSuJP9f2qm2sA4mKluw9KpzjMtVMVy3MBnp3qdSLzGc9+W R2YVTjXxxAopnXGuJC5gdE24GX28zgAZvBBFdxle/20WcROJPL7IDaUClkUZ9MbF MbVde7IJUDwzucNOfkkIkc81pq5n/7+T97Eldl8V29HHc9qhJGi1IPwPKgGCP3Jj e4P+4Qsrh4DVyxmKGjrfLtNxCB1bOuvmO1BC5U3dkhuWGKb/9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpDch8RnD1muYje6Vrue1qAl6gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ1YjFmZmEtNGQ2ZC0z ZjJhLWI3ZWItYzY5OWYyY2Y4ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHncIqMJoLyCJbNbi80w0r7FrR3p2oD4HI0DdOw3CbVB/eOUIvVp E7zgWhUNIQfmrmziL7C/9ibeSUEYzOScpVMMncNltBhE9eQ2SkEUvEsKl/Hle9ic FRxeLIyssQmWRuS7jU97jQIvkHO6QlsXvMKxMWis9T7uEV3pKFlv2/Nem9uX+PXq Z9iFRWpMeZUhavlnB22Hek+srZ0W+RLGEw9YjIK3RkXtK8IdZg65ZQzkUkov+GDW MM0usHDm0H+0ki/OXOvcBoOC8CK8tATEsmY1WNf51gzn8SRKiW+1T54GM7WNRZcf ZEOeqQzsdKKPfXOTjnZd2dU8J5zGCEWWq6E= -----END CERTIFICATE-----Generated at Sat May 10 23:17:38 2025 by rpki-client