$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ce3449c-5ca5-37b6-a6df-040cd231ed4a.roa File: 2ce3449c-5ca5-37b6-a6df-040cd231ed4a.roa (raw, json) Hash identifier: ToEZhRkHDqZSTpQPtctL14Ney8D7e9ZE3LjHVM2JFD8= Subject key identifier: 08:CE:41:4F:37:54:91:8B:ED:8B:14:87:D3:32:61:17:17:BC:C8:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA26670DF621625E5F0380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ce3449c-5ca5-37b6-a6df-040cd231ed4a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396615 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:26:67:0d:f6:21:62:5e:5f:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a433a6e0-0ac2-4df7-96ac-424b32763b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:28:53:be:bb:02:e2:ec:f9:74:29:52:af: b5:83:b9:83:af:b5:31:bc:4c:81:1c:56:15:44:0e: 53:b9:31:8f:be:9c:a9:12:2a:be:02:8c:32:20:40: 47:35:c4:53:e4:34:07:f3:3f:3f:21:c7:38:66:b7: b3:5a:75:41:8e:11:36:4d:d5:2f:2d:a3:b6:ad:9e: b3:a4:45:1a:a6:e6:30:f8:72:ee:8a:fe:cc:6f:07: 31:29:48:96:03:97:00:f1:39:35:33:34:41:a1:44: 31:32:16:16:43:f7:39:d4:14:3a:99:f6:33:2e:f0: 5b:53:3c:e2:ac:d4:39:60:cb:c1:31:30:fb:dc:55: 4f:e9:23:d0:d2:92:1e:87:3a:17:31:1b:7a:18:22: 44:58:d5:7f:63:4c:90:74:a6:08:25:83:3a:1a:1d: 25:e0:7d:ba:84:ab:c1:be:d2:77:2b:f1:a6:24:0c: 4e:30:30:2e:c2:42:66:7b:91:d5:47:69:32:39:24: 65:ba:e3:1b:10:ac:9f:4d:0b:47:4f:72:23:fe:89: e0:56:b4:b4:51:55:48:63:70:a6:d1:ae:33:2c:f8: 9c:20:e3:3d:73:a8:ca:18:20:a2:e9:58:d9:0d:41: b8:df:76:c2:65:6f:5c:7a:e1:cb:45:49:6f:ac:02: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CE:41:4F:37:54:91:8B:ED:8B:14:87:D3:32:61:17:17:BC:C8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ce3449c-5ca5-37b6-a6df-040cd231ed4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e1:1f:5e:f4:a4:f4:9a:95:d4:09:13:32:a1:b4:11:7d:a9: 3c:db:48:77:2a:dc:13:2f:f1:36:09:79:3b:86:ec:19:08:d8: 78:5b:73:09:cb:fe:3f:71:96:ab:e8:5a:22:6d:9e:8c:ed:a5: db:62:30:95:58:0c:a5:25:c9:75:71:f4:8b:f3:5c:b8:d9:13: c8:d9:b9:b4:08:0b:11:2a:cf:ab:66:88:69:9d:6e:81:62:d6: b4:ca:34:4a:d5:dd:21:1b:a1:b6:5b:3e:70:03:27:4f:ae:02: cf:b4:84:08:a8:9b:fe:ee:16:4c:9b:4b:08:45:78:16:79:7a: cf:b6:e2:07:4b:7b:e6:e9:b1:a5:a8:fc:5a:40:6b:23:07:96: b1:40:20:db:9a:e7:0d:d5:f3:68:e2:5e:9e:8e:2b:33:d9:12: 14:52:0f:a0:4e:da:75:1a:66:bc:bb:f7:14:46:41:7f:f8:f1: f9:fe:72:fc:8d:7b:d8:38:c4:18:7a:ab:ab:4c:47:01:8d:9b: 8c:36:fb:04:21:4a:67:0a:1f:ce:a0:85:cc:d7:62:90:e5:93: 87:b8:03:15:23:6b:a5:0f:d4:d5:cc:01:48:8c:09:ec:fa:71: 08:27:f5:1c:01:0b:a0:3e:62:f4:c4:3f:22:b6:59:62:9d:23: fd:e0:dc:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiZnDfYhYl5fA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTQzM2E2ZTAtMGFjMi00ZGY3LTk2YWMtNDI0YjMyNzYzYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFAoU767AuLs+XQpUq+1g7mDr7UxvEyBHFYV RA5TuTGPvpypEiq+AowyIEBHNcRT5DQH8z8/Icc4ZrezWnVBjhE2TdUvLaO2rZ6z pEUapuYw+HLuiv7MbwcxKUiWA5cA8Tk1MzRBoUQxMhYWQ/c51BQ6mfYzLvBbUzzi rNQ5YMvBMTD73FVP6SPQ0pIehzoXMRt6GCJEWNV/Y0yQdKYIJYM6Gh0l4H26hKvB vtJ3K/GmJAxOMDAuwkJme5HVR2kyOSRluuMbEKyfTQtHT3Ij/ongVrS0UVVIY3Cm 0a4zLPicIOM9c6jKGCCi6VjZDUG433bCZW9ceuHLRUlvrAJPjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAjOQU83VJGL7YsUh9MyYRcXvMgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNlMzQ0OWMtNWNhNS0z N2I2LWE2ZGYtMDQwY2QyMzFlZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAB4R9e9KT0mpXUCRMyobQRfak820h3KtwTL/E2 CXk7huwZCNh4W3MJy/4/cZar6FoibZ6M7aXbYjCVWAylJcl1cfSL81y42RPI2bm0 CAsRKs+rZohpnW6BYta0yjRK1d0hG6G2Wz5wAydPrgLPtIQIqJv+7hZMm0sIRXgW eXrPtuIHS3vm6bGlqPxaQGsjB5axQCDbmucN1fNo4l6ejisz2RIUUg+gTtp1Gma8 u/cURkF/+PH5/nL8jXvYOMQYequrTEcBjZuMNvsEIUpnCh/OoIXM12KQ5ZOHuAMV I2ulD9TVzAFIjAns+nEIJ/UcAQugPmL0xD8itllinSP94Nwu -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:51 2025 by rpki-client