$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa File: 1ef053cc-bac0-3910-9233-dd7c632a17d3.roa (raw, json) Hash identifier: 3ACMUPZuu9491PLYNgXc7jN5ZJPplpRI3fyZYMBb33s= Subject key identifier: 0A:15:65:05:DA:AD:DD:F6:DB:A8:5B:99:C8:73:E8:81:C3:2B:19:31 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F43285849C0A4D7C143918754A7942A80 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 29955 IP address blocks: 2001:49d0:1c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d7:c1:43:91:87:54:a7:94:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=d80c54e3-f435-4d78-b3e0-a637881659d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:ea:cf:1d:c5:f6:24:35:e9:2c:f6:e3:06: 8b:bb:da:ce:d8:7d:30:f6:3a:34:19:d5:19:02:9d: 2d:46:d6:ea:8f:37:93:1b:4b:83:87:2b:19:da:a3: 97:dc:5e:fa:90:39:e8:63:7a:3f:ca:ba:fa:f2:59: 74:ad:26:3d:04:81:c1:ea:b2:48:56:af:29:3c:cb: 36:f3:0f:e5:0f:bd:61:b3:d3:9b:97:ae:62:00:d8: 51:89:7f:4c:1b:67:33:b5:11:38:75:cc:79:87:fd: 9d:34:a2:a7:58:81:4a:c6:01:0a:7d:9b:6a:cd:4e: ef:e9:30:54:a2:14:da:48:a3:e1:77:12:00:ef:c2: cb:8f:aa:e1:be:12:64:22:2c:18:50:dc:09:32:7d: 74:b6:5d:27:26:f3:2e:2c:e7:17:9f:be:d7:ad:06: 42:7c:48:cf:19:8f:41:06:a4:ac:d7:4c:41:68:67: 59:85:2c:b7:b2:55:31:21:ec:74:44:43:80:3b:38: 46:d3:3e:b8:9b:d2:4d:d0:b1:0d:f5:c6:90:49:0a: 09:27:36:87:e6:7e:8a:25:c7:56:15:cd:a2:47:e9: a7:64:f5:82:a6:b8:cc:4c:a1:b9:88:cd:3b:c3:88: 34:ea:7a:17:57:76:ec:69:44:6b:23:6c:da:31:ed: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:15:65:05:DA:AD:DD:F6:DB:A8:5B:99:C8:73:E8:81:C3:2B:19:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:1c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:13:96:b9:d3:17:70:b9:c7:9c:81:6f:26:6d:ba:84:7c:4f: e3:37:87:5a:6c:0d:3e:50:c5:ec:48:04:99:22:d9:04:e3:32: 4b:4a:a2:fb:67:3f:e2:ad:c1:54:5c:64:65:37:aa:1e:2d:39: ce:29:f6:48:e1:90:f9:ba:3e:53:f3:df:56:0e:07:0e:9a:1b: 52:be:b7:6b:2e:c2:1d:9b:f2:8c:29:1d:42:e4:d8:06:44:6c: 5d:45:a4:61:0e:79:71:52:96:48:29:d1:19:d0:17:ad:19:da: 25:9d:40:10:29:e8:6a:a9:fa:94:76:38:94:8c:40:c5:15:cf: d5:14:bf:60:73:64:e3:b4:e7:7f:ac:d8:57:fb:af:01:04:9d: dd:e5:d8:48:9b:9a:cc:84:11:7e:0a:10:86:cd:2b:f2:ef:e2: 2a:2d:b7:ec:e4:d5:89:e0:1c:a8:d1:59:b4:b0:b6:40:38:d3: 8f:0f:4c:29:b9:ff:c6:4c:87:09:4c:79:a8:e4:08:5a:96:1b: 0e:cb:d6:4c:11:b7:63:dd:48:c2:1f:67:92:d8:24:6a:8d:f2: 37:c3:11:73:ce:a6:78:2c:76:8d:18:d5:d0:54:c4:dd:8e:17: d8:5f:8b:bc:03:82:2c:7c:98:37:5e:0b:5d:9a:b1:32:75:a1: f2:30:da:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApNfBQ5GHVKeUKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDgwYzU0ZTMtZjQzNS00ZDc4LWIzZTAtYTYzNzg4MTY1OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouLqzx3F9iQ16Sz24waLu9rO2H0w9jo0GdUZ Ap0tRtbqjzeTG0uDhysZ2qOX3F76kDnoY3o/yrr68ll0rSY9BIHB6rJIVq8pPMs2 8w/lD71hs9Obl65iANhRiX9MG2cztRE4dcx5h/2dNKKnWIFKxgEKfZtqzU7v6TBU ohTaSKPhdxIA78LLj6rhvhJkIiwYUNwJMn10tl0nJvMuLOcXn77XrQZCfEjPGY9B BqSs10xBaGdZhSy3slUxIex0REOAOzhG0z64m9JN0LEN9caQSQoJJzaH5n6KJcdW Fc2iR+mnZPWCprjMTKG5iM07w4g06noXV3bsaURrI2zaMe3xyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoVZQXard3226hbmchz6IHDKxkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvMWVmMDUzY2MtYmFjMC0z OTEwLTkyMzMtZGQ3YzYzMmExN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAFJ0AHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQTlrnTF3C5x5yBbyZtuoR8T+M3h1psDT5QxexIBJki2QTjMktK ovtnP+KtwVRcZGU3qh4tOc4p9kjhkPm6PlPz31YOBw6aG1K+t2suwh2b8owpHULk 2AZEbF1FpGEOeXFSlkgp0RnQF60Z2iWdQBAp6Gqp+pR2OJSMQMUVz9UUv2BzZOO0 53+s2Ff7rwEEnd3l2EibmsyEEX4KEIbNK/Lv4iott+zk1YngHKjRWbSwtkA4048P TCm5/8ZMhwlMeajkCFqWGw7L1kwRt2PdSMIfZ5LYJGqN8jfDEXPOpngsdo0Y1dBU xN2OF9hfi7wDgix8mDdeC12asTJ1ofIw2lk= -----END CERTIFICATE-----Generated at Mon May 5 14:45:05 2025 by rpki-client