$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa File: 7e325443-0f22-3427-b95c-d38a907b559b.roa (raw, json) Hash identifier: QI+cshvD+kfgG7lq/UlmJC7sIwAWmO1UXIRk2b19GL4= Subject key identifier: C7:D8:E4:28:66:73:2D:5F:68:8E:5D:44:51:6E:B1:09:64:B1:23:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA4664AD15CD89CECFB8B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 396600 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:66:4a:d1:5c:d8:9c:ec:fb:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=b00feb7a-d08d-4b12-a000-642df063a7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:cf:c9:61:a5:82:17:69:5f:14:43:1b:b2: 5a:da:07:b8:7a:ae:22:a9:b2:ae:d2:ff:77:07:9c: 54:a2:b0:f6:dc:ca:7f:2f:da:e3:6a:c9:ca:c8:f1: 8e:cc:a1:2b:c0:e9:b1:97:84:c2:f3:4e:9c:e1:5b: c3:83:08:6b:48:38:6b:a2:8e:34:2d:49:19:5c:2f: 59:52:25:d2:5e:31:ea:c9:d3:e7:e7:9c:b0:6d:8b: 52:56:a0:62:4c:78:3d:e7:af:bc:ba:68:9c:11:f1: 24:f8:43:c2:53:77:94:8b:d0:8c:b9:09:c6:0a:85: 99:de:4e:6d:bf:96:3c:88:ef:86:98:04:b8:62:45: c9:3b:d2:a1:88:a9:d1:89:84:ee:b1:33:a4:98:67: 58:9b:05:34:85:61:79:78:79:4c:d8:63:cf:1c:32: 27:df:27:12:f6:a1:dd:ee:fe:2f:1f:55:e1:7e:e4: 78:1c:41:d9:84:ea:b3:7c:fb:0c:00:ae:c3:c3:5e: 3d:d5:0a:5b:9c:86:38:da:b4:e4:12:47:7a:85:77: 48:17:b9:4c:04:48:1e:2e:d3:2c:5d:78:5e:9b:b5: f0:17:f1:d5:45:38:22:cc:30:3a:53:39:c1:2b:e3: 57:b0:44:9c:63:52:6c:79:e6:97:20:6e:9b:f0:e5: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D8:E4:28:66:73:2D:5F:68:8E:5D:44:51:6E:B1:09:64:B1:23:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e325443-0f22-3427-b95c-d38a907b559b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:93:3a:9b:93:d9:49:5d:95:ea:b6:21:88:bc:ff:78:79:46: 6f:5a:b2:a2:14:3f:55:7c:0f:55:f7:e9:90:b8:1d:c6:27:8b: 32:9f:b2:e6:70:b5:40:e0:64:5c:6e:a9:98:b0:f4:5d:92:f1: e2:f7:84:83:2d:28:35:9c:be:fd:19:b3:46:28:a8:da:59:1b: 07:e1:fd:26:58:05:17:9d:61:60:63:fe:fa:05:7e:ad:35:66: d0:06:1b:0f:7c:e3:13:d6:a3:3b:e2:b2:b1:d4:41:07:a3:a9: 11:dd:80:3a:d6:09:72:b1:d0:9b:df:fa:50:60:5e:66:2e:c8: 29:85:8f:27:46:db:14:e7:78:bd:c4:88:4a:ee:97:6b:66:1a: ab:1a:48:f8:b5:04:87:e7:68:a9:b9:d6:f6:6f:e5:92:ff:c7: a3:7d:6c:38:64:73:79:e1:b5:3e:c7:65:d5:0e:6b:72:c7:ad: 09:7a:01:d5:7d:2d:b0:0b:b6:52:c3:02:87:4c:d1:bd:db:22: cd:08:1a:b4:5e:cb:b8:45:d2:fa:da:46:e3:1d:92:75:35:61: ed:f2:7c:cd:f6:83:59:d7:0c:8c:db:6b:33:dc:5c:54:2a:4b: 8e:9a:26:6f:d0:42:b7:42:2c:fb:15:1f:c7:de:92:01:2c:93: 04:5e:ae:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGZK0VzYnOz7i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjAwZmViN2EtZDA4ZC00YjEyLWEwMDAtNjQyZGYwNjNhN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJzPyWGlghdpXxRDG7Ja2ge4eq4iqbKu0v93 B5xUorD23Mp/L9rjasnKyPGOzKErwOmxl4TC806c4VvDgwhrSDhroo40LUkZXC9Z UiXSXjHqydPn55ywbYtSVqBiTHg956+8umicEfEk+EPCU3eUi9CMuQnGCoWZ3k5t v5Y8iO+GmAS4YkXJO9KhiKnRiYTusTOkmGdYmwU0hWF5eHlM2GPPHDIn3ycS9qHd 7v4vH1XhfuR4HEHZhOqzfPsMAK7Dw1491QpbnIY42rTkEkd6hXdIF7lMBEgeLtMs XXhem7XwF/HVRTgizDA6UznBK+NXsEScY1JseeaXIG6b8OUcfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMfY5Chmcy1faI5dRFFusQlksSNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2UzMjU0NDMtMGYyMi0z NDI3LWI5NWMtZDM4YTkwN2I1NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMkzqbk9lJXZXqtiGIvP94eUZvWrKiFD9VfA9V 9+mQuB3GJ4syn7LmcLVA4GRcbqmYsPRdkvHi94SDLSg1nL79GbNGKKjaWRsH4f0m WAUXnWFgY/76BX6tNWbQBhsPfOMT1qM74rKx1EEHo6kR3YA61glysdCb3/pQYF5m LsgphY8nRtsU53i9xIhK7pdrZhqrGkj4tQSH52ipudb2b+WS/8ejfWw4ZHN54bU+ x2XVDmtyx60JegHVfS2wC7ZSwwKHTNG92yLNCBq0Xsu4RdL62kbjHZJ1NWHt8nzN 9oNZ1wyM22sz3FxUKkuOmiZv0EK3Qiz7FR/H3pIBLJMEXq44 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:52 2025 by rpki-client