$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d1904a-925a-36a2-a40e-523538a6a4c2.roa File: e9d1904a-925a-36a2-a40e-523538a6a4c2.roa (raw, json) Hash identifier: qTl57+BrFT7wlGX00iDZ3E0SgLKsr2sZPsQTh6j50i4= Subject key identifier: F1:8E:1B:5D:09:AA:45:FF:47:8C:21:E8:7C:29:24:D9:E4:30:E1:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849C3668BBE0CB40C79E97E5E60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d1904a-925a-36a2-a40e-523538a6a4c2.roa Signing time: Tue 06 May 2025 12:43:04 +0000 ROA not before: Tue 06 May 2025 12:43:04 +0000 ROA not after: Mon 04 Aug 2025 12:43:04 +0000 asID: 396580 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:66:8b:be:0c:b4:0c:79:e9:7e:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 6 12:43:04 2025 GMT Not After : Aug 4 12:43:04 2025 GMT Subject: CN=f7bd8d53-68ee-46d9-a521-55add3e7c248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:9a:ad:b0:c0:cb:fd:dc:30:11:a1:68:ed: c2:b0:97:48:01:7c:9b:b1:84:3f:34:bf:b6:00:8f: 40:c5:9b:2a:56:4e:19:69:2a:4a:47:6e:c4:b7:87: 3a:09:be:c7:33:81:cf:ac:39:0f:37:b4:f3:6f:33: cf:95:de:98:ee:6f:2a:f5:cb:22:9a:cc:2f:da:7c: c8:ec:f7:33:3d:1d:2f:52:79:24:10:63:46:2f:e8: 03:1d:02:86:7c:13:ed:d7:72:61:d4:18:db:b1:92: f5:89:26:65:a3:41:15:6e:92:d5:1b:95:ec:b4:f2: e6:98:57:97:96:70:98:84:55:0c:34:6d:fe:79:ae: 0f:33:db:c0:80:eb:9b:3d:1f:55:ca:c4:63:4b:95: 32:29:0d:21:66:5f:9c:82:1a:e3:10:ea:29:72:1a: 0d:81:38:21:73:6a:a2:89:74:70:fd:f4:15:62:7a: 25:05:eb:bc:7b:65:a6:fd:73:82:b8:07:13:f0:3c: 5c:9f:3f:6b:84:32:ca:2a:d3:df:21:c0:3c:9b:29: f5:82:a0:20:fa:cd:da:ce:a3:62:44:f3:96:30:b2: 7c:f8:bb:b9:ee:cb:5b:44:57:dd:d0:38:27:3b:15: 38:dd:64:a3:8e:68:f7:cd:d2:31:8a:14:0b:59:a2: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:1B:5D:09:AA:45:FF:47:8C:21:E8:7C:29:24:D9:E4:30:E1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d1904a-925a-36a2-a40e-523538a6a4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:42:97:c4:be:00:d4:8e:c0:83:eb:9f:26:1e:82:af:2f:a6: 87:7b:71:a4:8a:92:8e:bd:c6:db:01:d2:27:ac:4f:50:b4:23: 6a:93:d5:09:ab:ff:fa:3c:0d:38:c4:de:00:f1:c2:87:97:61: 01:b7:6a:85:66:27:8e:44:c5:5b:c1:99:9b:18:e1:15:96:cd: 00:ab:77:9b:85:af:43:a1:c4:ea:83:7c:1b:4d:04:aa:e7:7b: 46:2f:4e:2f:73:18:c0:cf:4c:d9:3a:4b:b5:1a:c5:d4:d8:2b: d0:b2:48:3d:a0:21:ab:1a:1e:64:b0:a7:57:c0:7f:26:33:24: 39:4c:49:60:65:d0:74:44:41:92:d1:bc:f4:53:6f:ef:1c:07: 85:d3:21:b6:57:bb:43:19:e5:72:da:39:c2:e0:74:b4:0a:07: 3f:e9:b9:85:b0:58:e7:89:a2:4f:81:91:7a:e0:5c:2b:b1:e6: 6a:46:41:51:e9:1c:1a:13:51:a6:8d:aa:73:2f:d2:36:2e:3d: 90:e8:c1:c4:2e:ce:b6:64:ec:f5:4d:c1:4a:c4:9f:82:d9:5a: 62:22:55:31:fc:f6:76:10:3e:a3:8f:26:3a:15:4d:cf:98:a0: 63:9c:0e:7c:5f:82:2d:ce:5f:4d:9a:47:36:bd:f4:7f:83:60: 54:03:f3:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDZou+DLQMeel+XmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUwNjEyNDMwNFoXDTI1MDgwNDEyNDMwNFowLzEtMCsGA1UEAxMk ZjdiZDhkNTMtNjhlZS00NmQ5LWE1MjEtNTVhZGQzZTdjMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM2arbDAy/3cMBGhaO3CsJdIAXybsYQ/NL+2 AI9AxZsqVk4ZaSpKR27Et4c6Cb7HM4HPrDkPN7TzbzPPld6Y7m8q9csimswv2nzI 7PczPR0vUnkkEGNGL+gDHQKGfBPt13Jh1BjbsZL1iSZlo0EVbpLVG5XstPLmmFeX lnCYhFUMNG3+ea4PM9vAgOubPR9VysRjS5UyKQ0hZl+cghrjEOopchoNgTghc2qi iXRw/fQVYnolBeu8e2Wm/XOCuAcT8Dxcnz9rhDLKKtPfIcA8myn1gqAg+s3azqNi RPOWMLJ8+Lu57stbRFfd0DgnOxU43WSjjmj3zdIxihQLWaKVSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGOG10JqkX/R4wh6HwpJNnkMOGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTlkMTkwNGEtOTI1YS0z NmEyLWE0MGUtNTIzNTM4YTZhNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5Cl8S+ANSOwIPrnyYegq8vpod7caSKko69xtsB0iesT1C0I2qT 1Qmr//o8DTjE3gDxwoeXYQG3aoVmJ45ExVvBmZsY4RWWzQCrd5uFr0OhxOqDfBtN BKrne0YvTi9zGMDPTNk6S7UaxdTYK9CySD2gIasaHmSwp1fAfyYzJDlMSWBl0HRE QZLRvPRTb+8cB4XTIbZXu0MZ5XLaOcLgdLQKBz/puYWwWOeJok+BkXrgXCux5mpG QVHpHBoTUaaNqnMv0jYuPZDowcQuzrZk7PVNwUrEn4LZWmIiVTH89nYQPqOPJjoV Tc+YoGOcDnxfgi3OX02aRza99H+DYFQD80c= -----END CERTIFICATE-----Generated at Sun May 11 06:16:20 2025 by rpki-client