$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af1832a8-941a-3901-944b-03d5f34945a7.roa File: af1832a8-941a-3901-944b-03d5f34945a7.roa (raw, json) Hash identifier: uBFBoDXDKoEx53f3lL+R5mV1qAQNtG2MrZ4y1Y94WLA= Subject key identifier: 95:51:DA:7D:62:D1:D6:79:37:FC:BD:38:19:E1:BD:40:86:3D:F2:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668DE9B39900DFD08B7AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af1832a8-941a-3901-944b-03d5f34945a7.roa Signing time: Tue 06 May 2025 12:43:05 +0000 ROA not before: Tue 06 May 2025 12:43:05 +0000 ROA not after: Mon 04 Aug 2025 12:43:05 +0000 asID: 397197 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8d:e9:b3:99:00:df:d0:8b:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:05 2025 GMT Not After : Aug 4 12:43:05 2025 GMT Subject: CN=bd1990ab-7149-4328-954d-ce463d272297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:ae:4a:be:df:6c:30:c2:3f:74:12:cc:26: 5a:f8:bf:db:49:7f:1e:2a:a6:9a:a2:4b:80:de:5d: 43:ef:8f:e0:a9:8c:75:4b:9e:c1:fe:49:99:c0:1a: 93:89:e9:a8:0b:2d:6e:64:50:24:34:27:3d:79:54: 78:5a:20:2b:d1:81:3d:a2:f3:75:fe:8e:52:95:39: e2:8c:30:7b:b0:7c:5c:7f:8d:40:2d:9d:e9:08:f9: 56:56:c8:03:73:fc:d6:bd:c7:1b:56:32:bd:1c:e2: cb:c8:72:3f:44:1f:93:3b:bd:d8:9f:de:80:73:57: 17:81:30:8f:e7:d8:ed:93:3d:64:ee:29:fd:a6:52: 19:66:d2:f6:38:24:bc:da:6f:bd:1c:d4:37:70:98: f7:e6:ed:df:c0:9f:e7:8f:0e:2e:66:83:d6:14:6f: 19:5d:4a:0f:95:c7:0d:4c:ed:83:50:5b:89:16:41: 9a:0a:53:1e:d0:5e:74:06:2b:c8:b2:69:d4:1c:13: 47:f5:c4:c1:90:e8:ed:7c:cc:9b:f4:68:b4:f0:b0: 15:ea:1d:65:f6:8f:c7:7b:12:a1:ab:d2:f0:77:99: 62:9b:59:b7:ef:61:ab:da:7a:be:60:7e:75:9b:9b: 69:c1:a4:79:d1:38:d8:74:5b:7c:21:5e:1c:4f:c7: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:DA:7D:62:D1:D6:79:37:FC:BD:38:19:E1:BD:40:86:3D:F2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af1832a8-941a-3901-944b-03d5f34945a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:48:91:5c:d6:91:c8:97:9d:29:b9:db:4b:1e:24:61:14:95: 42:b0:aa:c5:91:c2:7a:47:8d:38:31:a5:58:de:9b:70:03:43: 46:9f:c8:2e:7a:3e:04:b3:74:4a:16:b6:f5:d6:f7:0f:5a:57: 29:42:99:55:88:f3:c8:f2:14:72:2f:f8:58:10:e0:7a:33:99: 92:06:32:52:b5:2d:9a:d8:d0:96:d8:61:1e:b1:7b:70:f9:85: 65:cb:24:3b:0f:37:49:54:6d:d2:88:2a:85:5f:e1:7b:bb:92: 14:80:8e:ff:e8:dd:86:48:c9:9c:1b:ae:ad:dd:27:1b:75:b7: 50:fe:b5:93:ec:fd:90:87:56:58:17:57:b7:2c:00:bb:5e:5a: a8:77:74:9a:97:be:f2:b0:4b:8d:52:c7:40:c4:0c:e7:ea:97: 50:3a:e5:a8:f3:3b:d2:52:1a:de:63:28:33:b1:a1:32:43:53: ee:88:8b:b2:21:af:1b:c3:59:23:89:d3:6a:9d:c5:af:89:b0: a3:1f:c7:b7:38:3f:91:cb:f6:19:32:53:9d:94:bf:b3:d1:9b: cf:60:d5:11:2b:ad:c7:dd:d8:e5:6b:6b:8c:a0:8a:96:58:ec: 8e:50:d1:85:ba:f6:d0:82:34:a7:a9:81:44:a3:7a:71:9d:33: 5a:79:dc:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZo3ps5kA39CLesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNVoXDTI1MDgwNDEyNDMwNVowLzEtMCsGA1UEAxMk YmQxOTkwYWItNzE0OS00MzI4LTk1NGQtY2U0NjNkMjcyMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5GuSr7fbDDCP3QSzCZa+L/bSX8eKqaaokuA 3l1D74/gqYx1S57B/kmZwBqTiemoCy1uZFAkNCc9eVR4WiAr0YE9ovN1/o5SlTni jDB7sHxcf41ALZ3pCPlWVsgDc/zWvccbVjK9HOLLyHI/RB+TO73Yn96Ac1cXgTCP 59jtkz1k7in9plIZZtL2OCS82m+9HNQ3cJj35u3fwJ/njw4uZoPWFG8ZXUoPlccN TO2DUFuJFkGaClMe0F50BivIsmnUHBNH9cTBkOjtfMyb9Gi08LAV6h1l9o/HexKh q9Lwd5lim1m372Gr2nq+YH51m5tpwaR50TjYdFt8IV4cT8eUuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVR2n1i0dZ5N/y9OBnhvUCGPfI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYxODMyYTgtOTQxYS0z OTAxLTk0NGItMDNkNWYzNDk0NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBIkVzWkciXnSm520seJGEUlUKwqsWRwnpHjTgxpVjem3ADQ0af yC56PgSzdEoWtvXW9w9aVylCmVWI88jyFHIv+FgQ4HozmZIGMlK1LZrY0JbYYR6x e3D5hWXLJDsPN0lUbdKIKoVf4Xu7khSAjv/o3YZIyZwbrq3dJxt1t1D+tZPs/ZCH VlgXV7csALteWqh3dJqXvvKwS41Sx0DEDOfql1A65ajzO9JSGt5jKDOxoTJDU+6I i7IhrxvDWSOJ02qdxa+JsKMfx7c4P5HL9hkyU52Uv7PRm89g1RErrcfd2OVra4yg ipZY7I5Q0YW69tCCNKepgUSjenGdM1p53Hc= -----END CERTIFICATE-----Generated at Sun May 11 00:57:39 2025 by rpki-client