$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa File: c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa (raw, json) Hash identifier: ezxwKpWRMqQactDuzNCMyY+QtWVxmPxvdJV2pWoltkQ= Subject key identifier: 9A:45:72:CF:77:62:1F:EF:36:9D:A3:E5:CC:D1:88:4C:55:54:E6:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403983D7668137EE186AC380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 396560 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:83:d7:66:81:37:ee:18:6a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=1e8859a9-fb36-4e9f-9600-d0be26a9201b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:37:b0:8e:b2:d6:fd:fa:9f:2b:18:71:17:80: 72:d8:77:a7:91:d5:89:47:b5:12:c6:04:d8:d4:d7: 5f:1a:ab:38:1f:24:1b:84:f7:67:19:10:c9:3e:b5: 7d:e4:6e:5d:f8:9d:7b:24:09:5b:3e:dc:68:50:4b: f1:c6:ad:78:3f:79:63:77:c2:6c:03:b1:97:9f:f6: fb:07:3b:1c:a4:03:bd:e9:3c:44:3f:65:de:43:52: ea:35:2e:98:af:7b:6a:0e:a1:59:7a:8b:41:12:22: b2:14:59:f5:e9:5e:95:0c:55:e7:d8:62:80:dd:57: 89:49:6f:41:15:12:6a:01:f5:83:56:04:e0:9c:86: bb:49:9f:0c:46:8f:3b:8a:28:ee:ec:2c:23:25:03: a6:89:1d:00:ec:f5:46:42:19:04:5c:42:b2:ef:85: ec:5b:26:37:83:76:35:6f:df:68:3a:45:55:40:8b: 88:cf:aa:2e:bb:a5:3e:fb:0a:fd:df:e1:06:ea:91: fb:ed:f7:5e:20:32:6a:76:5f:54:d8:4b:aa:8c:95: bc:b4:fe:7f:a5:f0:a6:17:26:4d:01:ce:45:21:fe: 33:1a:f2:2a:b5:68:4c:78:5e:01:3d:5b:4c:b7:49: 2b:83:2d:44:36:2d:e5:d5:81:7d:55:07:82:09:6b: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:45:72:CF:77:62:1F:EF:36:9D:A3:E5:CC:D1:88:4C:55:54:E6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f7:1a:92:15:2a:5b:e9:6d:96:85:85:8d:6b:8f:5f:e9:77: 60:dd:c0:7b:3a:64:d6:83:b9:f0:30:a9:1a:c9:af:9a:f9:12: 10:16:36:de:3d:b5:89:e2:1a:e7:1e:91:8f:a8:64:8f:6f:ad: 07:8b:3b:e8:2a:af:39:13:4a:04:de:28:af:68:b4:43:ae:84: 87:6a:68:f4:23:fc:df:68:01:5f:f7:81:59:8e:de:be:bd:8f: 86:b8:2f:3d:e1:31:a1:26:fc:d3:bf:e2:67:30:7c:c8:0a:37: ae:79:fa:36:7d:1e:95:bd:fc:89:74:b8:d3:3d:28:5c:f5:f6: 2d:18:99:ce:30:50:7d:ad:77:01:61:1e:00:55:0f:31:e6:69: dd:7f:c8:23:c4:2b:7b:02:01:69:0b:69:8b:43:10:72:44:bf: 1c:96:0d:8b:f4:f6:95:93:e2:bd:10:5b:2d:93:df:9e:75:4a: bc:6c:69:3d:a0:c2:e6:88:73:56:7a:8c:25:ed:41:fa:1c:c4: 16:68:8d:9c:c4:cc:d9:d2:13:ad:15:08:01:43:e3:89:ae:08: 72:10:54:7a:83:d7:e3:1b:14:59:cf:51:36:38:b3:bb:f0:56: df:82:db:06:fb:ac:ac:3b:75:17:7a:ac:a6:d5:9c:1f:f4:97: 05:d4:72:8d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYPXZoE37hhqw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MWU4ODU5YTktZmIzNi00ZTlmLTk2MDAtZDBiZTI2YTkyMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jewjrLW/fqfKxhxF4By2HenkdWJR7USxgTY 1NdfGqs4HyQbhPdnGRDJPrV95G5d+J17JAlbPtxoUEvxxq14P3ljd8JsA7GXn/b7 BzscpAO96TxEP2XeQ1LqNS6Yr3tqDqFZeotBEiKyFFn16V6VDFXn2GKA3VeJSW9B FRJqAfWDVgTgnIa7SZ8MRo87iiju7CwjJQOmiR0A7PVGQhkEXEKy74XsWyY3g3Y1 b99oOkVVQIuIz6ouu6U++wr93+EG6pH77fdeIDJqdl9U2EuqjJW8tP5/pfCmFyZN Ac5FIf4zGvIqtWhMeF4BPVtMt0krgy1ENi3l1YF9VQeCCWsuKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJpFcs93Yh/vNp2j5czRiExVVOZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzY2NjE3OTAtYzVhMC0z NmI1LTk5YWEtZDk5YWM1MmE0YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCZ9xqSFSpb6W2WhYWNa49f6Xdg3cB7OmTWg7nw MKkaya+a+RIQFjbePbWJ4hrnHpGPqGSPb60HizvoKq85E0oE3iivaLRDroSHamj0 I/zfaAFf94FZjt6+vY+GuC894TGhJvzTv+JnMHzICjeuefo2fR6VvfyJdLjTPShc 9fYtGJnOMFB9rXcBYR4AVQ8x5mndf8gjxCt7AgFpC2mLQxByRL8clg2L9PaVk+K9 EFstk9+edUq8bGk9oMLmiHNWeowl7UH6HMQWaI2cxMzZ0hOtFQgBQ+OJrghyEFR6 g9fjGxRZz1E2OLO78FbfgtsG+6ysO3UXeqym1Zwf9JcF1HKN -----END CERTIFICATE-----Generated at Sun May 11 00:06:35 2025 by rpki-client