$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa File: 0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa (raw, json) Hash identifier: uLEgMtgnx0PlysDGzwDYO9JBWBVpNKpTtZUnOnQDe6o= Subject key identifier: 79:0A:1D:BB:E0:7D:8E:5F:BB:BA:20:CA:3C:23:6F:93:20:72:EB:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA262009ABB611C4E1E900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 397197 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:26:20:09:ab:b6:11:c4:e1:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9a9b8fd8-ecd9-4f91-bd77-e9fa7582e994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:87:13:dd:8a:94:fe:45:dd:26:d1:a4:6f: 36:f2:0b:fc:3b:ad:5d:96:31:18:d2:25:c2:d5:75: 18:45:92:eb:a3:85:61:46:99:7f:6f:0e:19:1c:87: 71:57:33:bc:27:99:77:ac:32:79:b2:da:24:46:73: 52:0e:88:5c:bb:2c:c8:fd:a2:1e:82:d2:a4:29:3b: 26:dd:4e:de:87:6b:99:0b:fb:cc:7f:90:d1:31:be: 46:ad:77:8b:02:81:20:48:e5:a6:eb:ac:0b:dc:70: e6:50:b9:02:67:cf:79:5c:f5:08:39:c6:d5:be:71: 98:d1:0e:32:e5:7b:7f:af:3d:e7:72:65:34:fe:cf: 47:af:23:20:7d:88:f4:aa:65:c0:0a:af:75:0b:39: ff:df:11:00:3a:2c:2b:ee:95:ed:62:6e:d4:80:15: c5:a8:8b:ce:67:37:73:97:ff:c3:57:42:55:08:46: d3:30:cf:ea:c8:b6:43:d4:d4:da:23:1d:08:ef:94: 9b:c1:b8:5a:3a:94:d4:13:e6:4a:e5:9f:5e:9f:5e: b7:f8:71:d3:56:f2:a0:ff:95:bf:83:4f:b2:92:d1: be:33:2c:60:a5:c6:74:7d:c4:cc:22:6c:3c:0d:2c: 4d:76:50:9a:41:e6:c8:b3:8d:09:7a:cc:97:c8:e2: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:1D:BB:E0:7D:8E:5F:BB:BA:20:CA:3C:23:6F:93:20:72:EB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:77:0c:bc:19:c8:7d:79:35:78:b2:18:4d:1c:36:62:ff:19: 94:80:b6:1d:2b:97:b9:ff:fa:72:47:e1:b2:17:2b:c2:e0:3d: 9d:c6:83:2e:50:10:4c:43:c8:20:28:fd:5c:9e:7a:33:b6:f8: d4:82:28:10:e6:da:86:20:d1:55:0d:ce:cb:fb:3d:5e:ac:0f: bf:3b:4c:dd:03:0e:86:14:0d:63:f1:12:23:5b:a7:90:74:80: 3e:5e:88:65:ca:e2:a2:f4:20:bf:a4:ae:0e:57:b3:dd:56:78: 98:63:c9:cb:82:0a:aa:98:70:24:58:13:f9:c2:2c:71:df:1d: 8d:3f:09:bf:1b:93:b7:1c:d8:11:03:96:56:47:e1:0f:54:bd: 8d:4e:ea:b3:a7:7c:b9:b9:3f:87:fb:a7:5c:4d:3b:96:3a:f3: dc:0d:91:bf:0f:4e:41:36:2f:5a:b1:5e:ce:b5:92:93:e7:5b: ed:ff:ef:dd:65:47:6b:38:5b:92:ee:70:9f:64:e0:4d:9c:ef: 46:82:e6:46:75:1b:28:d9:6e:50:24:8e:0a:c9:b8:4b:00:92: ec:73:c6:96:33:99:fd:dd:c1:2f:46:86:5d:2f:6f:ee:cb:69: 42:f6:86:6b:25:2f:d2:2c:13:f4:94:ce:11:1e:fc:0c:83:62: 31:f4:d2:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiYgCau2EcTh6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWE5YjhmZDgtZWNkOS00ZjkxLWJkNzctZTlmYTc1ODJlOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupiHE92KlP5F3SbRpG828gv8O61dljEY0iXC 1XUYRZLro4VhRpl/bw4ZHIdxVzO8J5l3rDJ5stokRnNSDohcuyzI/aIegtKkKTsm 3U7eh2uZC/vMf5DRMb5GrXeLAoEgSOWm66wL3HDmULkCZ895XPUIOcbVvnGY0Q4y 5Xt/rz3ncmU0/s9HryMgfYj0qmXACq91Czn/3xEAOiwr7pXtYm7UgBXFqIvOZzdz l//DV0JVCEbTMM/qyLZD1NTaIx0I75SbwbhaOpTUE+ZK5Z9en163+HHTVvKg/5W/ g0+yktG+MyxgpcZ0fcTMImw8DSxNdlCaQebIs40JesyXyOK4JQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHkKHbvgfY5fu7ogyjwjb5MgcusQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRmYTk0MzEtZTgxMC0z MmFiLTk3MzAtMWUwY2YwY2E4YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBddwy8Gch9eTV4shhNHDZi/xmUgLYdK5e5//py R+GyFyvC4D2dxoMuUBBMQ8ggKP1cnnoztvjUgigQ5tqGINFVDc7L+z1erA+/O0zd Aw6GFA1j8RIjW6eQdIA+XohlyuKi9CC/pK4OV7PdVniYY8nLggqqmHAkWBP5wixx 3x2NPwm/G5O3HNgRA5ZWR+EPVL2NTuqzp3y5uT+H+6dcTTuWOvPcDZG/D05BNi9a sV7OtZKT51vt/+/dZUdrOFuS7nCfZOBNnO9GguZGdRso2W5QJI4KybhLAJLsc8aW M5n93cEvRoZdL2/uy2lC9oZrJS/SLBP0lM4RHvwMg2Ix9NIq -----END CERTIFICATE-----Generated at Sat Apr 26 22:53:58 2025 by rpki-client