$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3316e71-91b2-3700-8dae-03d57b82394b.roa File: b3316e71-91b2-3700-8dae-03d57b82394b.roa (raw, json) Hash identifier: ohnwTMZzj/GsRRtnEg/f8s82jT107cotUBarjKDQ34Y= Subject key identifier: 52:1C:85:D1:34:EA:C3:55:53:57:28:B3:6A:13:77:DC:CF:B7:E6:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3669124FD96682A0CCA1380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3316e71-91b2-3700-8dae-03d57b82394b.roa Signing time: Tue 06 May 2025 12:43:07 +0000 ROA not before: Tue 06 May 2025 12:43:07 +0000 ROA not after: Mon 04 Aug 2025 12:43:07 +0000 asID: 397199 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:91:24:fd:96:68:2a:0c:ca:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:07 2025 GMT Not After : Aug 4 12:43:07 2025 GMT Subject: CN=0e9f5b3b-2f4d-4d9b-ae34-015076407bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:aa:96:c0:60:38:39:ed:07:cd:54:95:af: 87:33:3d:4f:87:47:65:5a:33:82:66:f6:3d:a6:8b: 7b:04:26:8a:1b:c0:75:fe:4d:85:0f:d4:3d:96:24: 02:8c:fe:93:42:b0:53:bb:47:8c:55:ef:0b:74:53: db:f0:92:e4:6c:c2:b6:30:b8:ce:01:98:00:c3:7e: 22:cb:dc:04:f6:7f:94:40:a6:25:36:b0:0d:fd:dc: dc:bd:1f:a5:a5:23:5b:0c:13:2d:34:e6:1a:58:31: bd:da:6e:9b:1f:a6:34:ac:17:f0:56:bc:96:41:b4: 6d:b1:03:3e:48:02:7c:f9:c5:47:86:16:77:cf:16: 08:43:b9:04:38:35:77:22:7e:7c:56:de:ac:c2:51: 28:ce:0c:53:60:0c:29:d5:49:20:02:21:6e:1e:b4: 9f:84:ee:76:5d:f2:3f:2b:97:00:25:15:62:00:60: 83:98:06:69:3e:9d:43:d0:cd:f2:e8:b6:4d:46:0e: 9a:19:c8:95:c9:e0:cf:a1:ef:b6:5b:34:da:f6:09: b6:e8:22:bf:c9:05:58:72:b6:f8:56:85:e3:10:3c: 63:ba:05:b9:45:f5:3e:ba:14:a9:3d:79:dc:5d:8d: 34:5a:0b:a3:b1:0b:99:71:a1:4c:e4:d5:2b:60:55: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1C:85:D1:34:EA:C3:55:53:57:28:B3:6A:13:77:DC:CF:B7:E6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3316e71-91b2-3700-8dae-03d57b82394b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:33:e4:bb:a8:a3:ab:42:85:b4:ce:eb:4c:ee:fe:34:7a:28: cb:f7:40:71:01:ac:5f:9e:16:a8:07:8a:fd:1d:e2:11:67:de: b9:9c:cc:35:a8:3c:47:cc:b4:d2:5c:d1:dd:23:46:b2:72:26: a3:eb:c7:aa:3d:6c:6e:cc:1e:89:8f:12:af:1f:46:c7:7f:fa: c8:9c:ae:ce:48:9d:5e:48:eb:bf:56:84:8c:bf:5a:be:b1:28: 00:35:31:c9:28:b6:cb:96:91:d3:0b:26:8a:6d:a4:a2:e8:57: 19:ab:4c:d3:fc:71:07:66:b8:04:1b:b7:62:22:04:8f:99:8c: 1d:70:3c:0a:b9:b7:38:52:48:70:1f:0e:a2:4f:58:0a:f1:39: 2b:cc:10:39:90:2d:ea:7b:87:51:e6:bc:23:81:db:fa:e5:da: e8:eb:bc:23:1e:11:51:3e:d4:91:d1:41:38:2c:fa:b9:7e:0e: ee:c7:49:11:30:5b:64:0e:e5:54:10:4a:b4:ef:3f:b9:93:63: 8c:76:09:e7:71:90:4a:97:3a:0b:da:eb:8f:ec:20:8a:9d:c3: 67:4c:6b:e3:90:03:51:8e:15:e4:b5:e3:43:4d:32:c7:f4:a9: 3b:48:95:6b:00:41:2b:eb:31:39:65:f1:1c:01:d2:9d:4a:f0: 03:68:81:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZpEk/ZZoKgzKE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwN1oXDTI1MDgwNDEyNDMwN1owLzEtMCsGA1UEAxMk MGU5ZjViM2ItMmY0ZC00ZDliLWFlMzQtMDE1MDc2NDA3YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjheqlsBgODntB81Ula+HMz1Ph0dlWjOCZvY9 pot7BCaKG8B1/k2FD9Q9liQCjP6TQrBTu0eMVe8LdFPb8JLkbMK2MLjOAZgAw34i y9wE9n+UQKYlNrAN/dzcvR+lpSNbDBMtNOYaWDG92m6bH6Y0rBfwVryWQbRtsQM+ SAJ8+cVHhhZ3zxYIQ7kEODV3In58Vt6swlEozgxTYAwp1UkgAiFuHrSfhO52XfI/ K5cAJRViAGCDmAZpPp1D0M3y6LZNRg6aGciVyeDPoe+2WzTa9gm26CK/yQVYcrb4 VoXjEDxjugW5RfU+uhSpPXncXY00WgujsQuZcaFM5NUrYFVdCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIchdE06sNVU1cos2oTd9zPt+ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjMzMTZlNzEtOTFiMi0z NzAwLThkYWUtMDNkNTdiODIzOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGAz5Luoo6tChbTO60zu/jR6KMv3QHEBrF+eFqgHiv0d4hFn3rmc zDWoPEfMtNJc0d0jRrJyJqPrx6o9bG7MHomPEq8fRsd/+sicrs5InV5I679WhIy/ Wr6xKAA1MckotsuWkdMLJoptpKLoVxmrTNP8cQdmuAQbt2IiBI+ZjB1wPAq5tzhS SHAfDqJPWArxOSvMEDmQLep7h1HmvCOB2/rl2ujrvCMeEVE+1JHRQTgs+rl+Du7H SREwW2QO5VQQSrTvP7mTY4x2CedxkEqXOgva64/sIIqdw2dMa+OQA1GOFeS140NN Msf0qTtIlWsAQSvrMTll8RwB0p1K8ANogeI= -----END CERTIFICATE-----Generated at Sun May 11 12:27:11 2025 by rpki-client