$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa File: e3887704-5373-32f9-a1ea-296f5f56b845.roa (raw, json) Hash identifier: lvcFYoK3BbnTlkYI7A/PkKwEPv5/GjrwgCS2h437nzE= Subject key identifier: D4:02:2E:FF:8B:72:30:34:63:5A:DA:9C:AD:67:E0:4E:7D:9A:FE:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496FAEF84628A189CB75050740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397202 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:ae:f8:46:28:a1:89:cb:75:05:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=2b623c38-80c8-4c0c-aa4d-b105ad91451b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:d1:47:5d:50:24:eb:5b:ef:7f:94:f9:c2: bd:94:1c:35:fa:0e:8a:8f:3e:38:11:ee:cb:65:e2: 34:52:b2:92:52:2b:3a:fd:df:09:d6:54:0f:18:0f: 67:06:61:7b:7f:af:e5:4e:a7:3a:78:b5:26:1a:7f: 8a:88:9a:92:8c:c5:c8:fd:92:a1:26:7b:bb:9b:ea: e2:e7:bc:d8:d8:cc:b6:cc:17:e3:87:35:43:e4:8f: 86:39:49:2e:9c:4e:c2:b3:60:fb:87:96:07:43:69: 83:da:bd:ad:c9:5d:e6:51:36:db:80:a6:dd:98:ee: 45:a9:ab:f6:33:43:4a:fc:a2:3d:fa:03:c4:24:76: 9f:41:4f:9d:85:b2:80:15:74:04:ae:d8:1c:c1:bf: ee:cb:8e:3b:58:21:59:f4:fd:96:03:4c:e2:96:b6: 83:fc:ef:d0:b3:7c:a8:28:e8:61:11:3c:39:35:96: 4c:40:ec:12:19:df:56:86:a4:ef:56:e5:19:a0:4d: b4:26:bb:5a:19:59:19:2d:d8:e1:46:4a:b5:51:c2: 45:42:ee:0b:f0:15:89:06:09:41:08:a1:9f:fe:ea: 51:9e:8f:0f:38:86:10:e1:2a:2a:99:30:b8:f6:19: d8:92:58:59:56:87:50:93:bc:99:e9:77:e9:64:d7: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:2E:FF:8B:72:30:34:63:5A:DA:9C:AD:67:E0:4E:7D:9A:FE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:13:a7:70:10:2c:38:f3:10:93:e0:da:28:2e:78:fc:2b:03: 4e:a4:78:2d:d5:fc:aa:47:c0:e0:92:81:a3:35:49:e8:56:8a: 94:03:6b:7b:e7:71:ff:37:bb:04:a1:64:e3:0c:eb:79:2f:e4: b7:12:f5:bb:16:ee:36:a0:97:6a:c2:9b:e3:16:b9:8e:b1:a2: 72:e1:de:f6:37:96:68:96:e6:49:68:36:8f:9d:37:4b:a5:21: 67:cc:c3:49:68:d2:4e:e1:a6:46:01:26:ca:83:c5:36:59:f2: 50:06:d9:0d:5b:82:d7:ba:c8:c3:a0:ce:3e:9f:b6:f7:f8:8b: f5:aa:04:e2:31:15:9d:a0:15:54:6f:8c:0a:1c:0e:8a:f4:7f: 03:06:2b:be:0e:01:8c:1a:16:05:af:e4:83:ff:cf:20:be:32: a3:56:ac:9a:0d:95:ba:36:42:81:11:11:f3:cd:7d:f8:1a:bc: b8:5d:ff:c7:82:25:7a:b2:64:11:0c:8f:12:55:81:8d:40:02: 0d:ba:67:74:c2:60:83:0f:4b:5b:c5:d9:73:b2:7a:21:c0:9a: cc:0c:38:8f:fe:97:a4:9b:27:da:0f:ee:11:99:e2:55:1f:2d: 47:d9:d5:3e:13:81:67:61:66:11:0a:e1:ae:e2:94:fb:3d:b9: fb:4c:f2:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElvrvhGKKGJy3UFB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MmI2MjNjMzgtODBjOC00YzBjLWFhNGQtYjEwNWFkOTE0NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7RR11QJOtb73+U+cK9lBw1+g6Kjz44Ee7L ZeI0UrKSUis6/d8J1lQPGA9nBmF7f6/lTqc6eLUmGn+KiJqSjMXI/ZKhJnu7m+ri 57zY2My2zBfjhzVD5I+GOUkunE7Cs2D7h5YHQ2mD2r2tyV3mUTbbgKbdmO5Fqav2 M0NK/KI9+gPEJHafQU+dhbKAFXQErtgcwb/uy447WCFZ9P2WA0zilraD/O/Qs3yo KOhhETw5NZZMQOwSGd9WhqTvVuUZoE20JrtaGVkZLdjhRkq1UcJFQu4L8BWJBglB CKGf/upRno8POIYQ4SoqmTC49hnYklhZVodQk7yZ6XfpZNfTNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNQCLv+LcjA0Y1ranK1n4E59mv6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTM4ODc3MDQtNTM3My0z MmY5LWExZWEtMjk2ZjVmNTZiODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4E6dwECw48xCT4NooLnj8KwNOpHgt1fyqR8Dg koGjNUnoVoqUA2t753H/N7sEoWTjDOt5L+S3EvW7Fu42oJdqwpvjFrmOsaJy4d72 N5ZoluZJaDaPnTdLpSFnzMNJaNJO4aZGASbKg8U2WfJQBtkNW4LXusjDoM4+n7b3 +Iv1qgTiMRWdoBVUb4wKHA6K9H8DBiu+DgGMGhYFr+SD/88gvjKjVqyaDZW6NkKB ERHzzX34Gry4Xf/HgiV6smQRDI8SVYGNQAINumd0wmCDD0tbxdlzsnohwJrMDDiP /pekmyfaD+4RmeJVHy1H2dU+E4FnYWYRCuGu4pT7Pbn7TPIs -----END CERTIFICATE-----Generated at Sun May 11 13:28:52 2025 by rpki-client