$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa File: be96d957-e3bf-3be1-87ae-286f9ee71d63.roa (raw, json) Hash identifier: UpFlEEbdmFTdm+oS54GIaEO2l/+jhyZesJ3Cp0wtmPQ= Subject key identifier: 4A:4C:64:71:1A:33:3C:35:AC:27:1C:10:10:49:61:8A:26:E1:FE:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA259284EBF820192F99A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396565 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:25:92:84:eb:f8:20:19:2f:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=28cd375e-14a8-4ae5-80a5-20deb3212d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:30:36:23:e1:5b:55:16:03:0a:86:11:84: ff:97:c1:6d:1e:39:97:a7:fa:bf:dd:47:0c:ab:86: 84:93:6a:11:0e:e1:35:ff:7f:ba:63:44:0d:0c:54: 5d:18:40:7e:e1:4b:be:9e:e8:c9:65:0f:6b:ab:61: 00:36:94:ce:a2:fd:e6:bc:66:4d:9d:6b:de:85:06: 76:96:b0:52:d6:9b:35:67:f3:2d:58:62:33:e1:45: 9b:57:ab:3f:53:ed:e4:41:5c:62:5a:af:cb:cc:0a: 98:ef:78:3e:ad:f4:c1:e7:fc:01:fb:53:e9:ee:e8: 33:16:6e:5b:77:e4:54:cf:b7:6b:ba:4f:b4:ec:f8: 87:a1:14:9d:b9:4f:56:2e:d5:d2:5d:4a:56:48:c5: 46:1b:91:0b:ec:d6:3d:cb:49:22:8d:b6:46:ba:79: 09:19:cd:85:ac:86:01:87:c0:c8:5a:21:46:99:40: 26:40:35:ed:6d:98:b0:e1:e4:3c:2b:94:a2:16:b9: e9:41:e5:91:00:b9:9d:38:b1:05:6c:7e:4d:dd:37: aa:30:81:1d:1b:4a:3b:2c:19:8b:4c:f2:db:2f:12: f9:6e:b4:71:55:8d:8b:d6:fa:54:ee:80:95:ac:9e: aa:86:ac:d0:96:01:c0:1c:4c:22:c9:42:a2:be:de: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:64:71:1A:33:3C:35:AC:27:1C:10:10:49:61:8A:26:E1:FE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96d957-e3bf-3be1-87ae-286f9ee71d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:d3:36:83:75:ac:a6:40:54:5b:2b:6f:f6:5d:8e:47:b4: d4:69:07:46:9d:a8:66:f8:e7:18:ac:4f:c5:33:98:dd:7c:94: 82:f8:a6:35:61:50:98:06:a1:58:a2:94:92:e3:4b:d6:f2:8a: 64:c8:ce:1f:f0:c8:a2:2b:cd:a4:94:65:2f:d1:08:9f:44:6f: 96:1d:12:78:62:77:ae:b7:8c:29:fe:0b:87:70:1f:b4:c3:74: 59:23:a7:fb:0e:e4:49:f8:bf:f5:79:e6:19:34:d0:0d:e3:92: 23:12:6c:de:e8:c9:69:55:07:01:c5:d9:66:d5:cd:07:9e:bb: 0f:78:2b:9d:11:9c:30:94:d3:28:87:cd:b9:3e:9c:25:1b:56: 73:5f:b7:0d:e8:40:b9:2b:50:1a:d0:52:69:22:d8:b3:64:ca: 63:c8:f5:07:50:91:8c:f8:bf:89:d5:6c:d7:37:0d:b1:10:62: e1:9a:e8:06:eb:09:0e:a3:a3:a2:4a:9e:66:21:0a:bd:eb:74: e7:84:a7:22:9c:6a:a7:a3:6a:95:f9:e4:c1:8c:a0:37:e9:c1: c0:0b:17:97:d2:e0:a5:54:6e:ad:71:9b:21:12:02:9b:16:ad: d8:89:d9:ef:94:69:aa:13:b8:74:c7:25:20:39:3a:c6:11:8a: 99:74:8d:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiWShOv4IBkvmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjhjZDM3NWUtMTRhOC00YWU1LTgwYTUtMjBkZWIzMjEyZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV4wNiPhW1UWAwqGEYT/l8FtHjmXp/q/3UcM q4aEk2oRDuE1/3+6Y0QNDFRdGEB+4Uu+nujJZQ9rq2EANpTOov3mvGZNnWvehQZ2 lrBS1ps1Z/MtWGIz4UWbV6s/U+3kQVxiWq/LzAqY73g+rfTB5/wB+1Pp7ugzFm5b d+RUz7druk+07PiHoRSduU9WLtXSXUpWSMVGG5EL7NY9y0kijbZGunkJGc2FrIYB h8DIWiFGmUAmQDXtbZiw4eQ8K5SiFrnpQeWRALmdOLEFbH5N3TeqMIEdG0o7LBmL TPLbLxL5brRxVY2L1vpU7oCVrJ6qhqzQlgHAHEwiyUKivt5jdQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEpMZHEaMzw1rCccEBBJYYom4f4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmU5NmQ5NTctZTNiZi0z YmUxLTg3YWUtMjg2ZjllZTcxZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAj/9M2g3WspkBUWytv9l2OR7TUaQdGnahm+OcY rE/FM5jdfJSC+KY1YVCYBqFYopSS40vW8opkyM4f8MiiK82klGUv0QifRG+WHRJ4 Yneut4wp/guHcB+0w3RZI6f7DuRJ+L/1eeYZNNAN45IjEmze6MlpVQcBxdlm1c0H nrsPeCudEZwwlNMoh825PpwlG1ZzX7cN6EC5K1Aa0FJpItizZMpjyPUHUJGM+L+J 1WzXNw2xEGLhmugG6wkOo6OiSp5mIQq963TnhKcinGqno2qV+eTBjKA36cHACxeX 0uClVG6tcZshEgKbFq3YidnvlGmqE7h0xyUgOTrGEYqZdI0e -----END CERTIFICATE-----Generated at Sat May 10 23:45:11 2025 by rpki-client