$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97b78a8e-3c36-352c-bdd0-ee6c7820f9e9.roa File: 97b78a8e-3c36-352c-bdd0-ee6c7820f9e9.roa (raw, json) Hash identifier: mDKFv8iQwCPlD7k0kxKIkHwpBZKBm3M9qvBXUDFul5U= Subject key identifier: 8B:E6:4B:64:23:7C:67:A6:95:A7:A0:19:D1:2C:79:1F:C7:E5:EF:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA2AB1DFC9B829E4DD5440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97b78a8e-3c36-352c-bdd0-ee6c7820f9e9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 20172 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2a:b1:df:c9:b8:29:e4:dd:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ad0cc3b4-a324-4a5f-9fbf-a22d011f5f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:ca:30:21:e4:1f:7e:3a:b3:6c:3a:66:08: 68:8e:e1:b5:a2:ef:dc:be:a1:12:2d:b3:e4:c9:a1: ed:9d:8b:59:97:39:78:75:65:da:97:bd:14:49:b5: 9e:2a:61:1e:54:7d:06:ce:cb:07:4c:2c:a1:8f:f1: 78:b2:7f:10:68:81:13:a7:b3:72:0f:e8:59:ba:a8: d8:da:7c:ec:47:2a:70:8a:37:e6:9c:96:ea:6b:e5: ea:58:ed:5f:de:06:63:59:9a:83:0d:0e:d6:10:ef: cc:05:3b:5c:a4:4a:84:7a:09:a0:11:80:6c:cf:72: 47:92:7f:43:c7:26:c2:ab:32:cd:e6:86:e5:04:71: 3d:1f:3d:cd:da:54:f3:d9:d3:c6:81:f0:03:71:3b: 3e:64:37:a3:76:ef:b9:4b:0e:ae:4a:e9:6d:0b:28: 82:e0:c4:0e:ab:c7:4a:f3:72:31:86:a6:53:d3:3b: 8a:32:2e:03:74:e8:be:e2:a2:09:15:12:27:5e:c5: a9:eb:20:b1:3b:51:55:39:ce:b5:64:db:e2:ad:46: a0:5b:11:8d:9b:16:9f:a9:11:30:c0:3c:20:e4:d3: 0a:d4:27:02:71:eb:55:97:fe:77:74:51:02:96:f0: a7:d6:6e:6f:61:14:24:92:99:e2:d6:74:05:82:2e: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:4B:64:23:7C:67:A6:95:A7:A0:19:D1:2C:79:1F:C7:E5:EF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97b78a8e-3c36-352c-bdd0-ee6c7820f9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4e:8a:e9:74:ea:64:14:8e:d2:d5:6e:67:7e:60:63:45:ef: aa:76:0e:ac:1a:55:3a:c1:80:8a:e7:95:78:9e:a8:33:cf:ec: f6:69:1a:04:16:af:b1:d7:1b:6e:5b:5b:65:83:4a:d8:12:94: 2a:fe:25:66:8d:63:5d:f3:a7:dc:b1:bc:22:69:c7:a7:6c:27: a1:b7:ba:17:66:71:d6:07:e0:95:87:ac:9e:49:e8:68:05:e8: 9d:22:7a:a0:a7:ec:d7:35:41:5e:8e:c9:84:c5:d8:ce:ec:4a: 60:2b:76:b6:45:ad:b9:d3:64:c6:d6:63:dc:56:c8:31:e5:cb: f4:28:b3:cb:d3:60:75:c6:f2:c6:d6:bd:09:4c:6d:a0:40:eb: 2e:0e:a2:8e:4a:b1:b0:2e:7d:43:d8:f9:5d:85:7d:8d:28:ef: 0b:26:1b:89:c5:97:2d:f8:d9:bc:dc:13:d1:a5:df:71:09:3a: d6:d8:9e:57:97:09:2f:fd:fe:98:3b:45:d1:39:f5:be:ed:38: 98:bb:29:93:91:97:32:ce:54:2e:05:3b:92:60:34:07:3b:73: 6a:c7:65:48:fe:b1:f2:56:d4:d7:d0:08:90:52:dc:62:5d:37: 04:e0:ec:5c:c5:ff:99:c6:2c:23:91:f0:70:9a:05:64:aa:30: cc:d5:9c:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiqx38m4KeTdVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWQwY2MzYjQtYTMyNC00YTVmLTlmYmYtYTIyZDAxMWY1ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3zKMCHkH346s2w6ZghojuG1ou/cvqESLbPk yaHtnYtZlzl4dWXal70USbWeKmEeVH0GzssHTCyhj/F4sn8QaIETp7NyD+hZuqjY 2nzsRypwijfmnJbqa+XqWO1f3gZjWZqDDQ7WEO/MBTtcpEqEegmgEYBsz3JHkn9D xybCqzLN5oblBHE9Hz3N2lTz2dPGgfADcTs+ZDejdu+5Sw6uSultCyiC4MQOq8dK 83IxhqZT0zuKMi4DdOi+4qIJFRInXsWp6yCxO1FVOc61ZNvirUagWxGNmxafqREw wDwg5NMK1CcCcetVl/53dFEClvCn1m5vYRQkkpni1nQFgi4BZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIvmS2QjfGemlaegGdEseR/H5e9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdiNzhhOGUtM2MzNi0z NTJjLWJkZDAtZWU2Yzc4MjBmOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUTorpdOpkFI7S1W5nfmBjRe+qdg6sGlU6wYCK 55V4nqgzz+z2aRoEFq+x1xtuW1tlg0rYEpQq/iVmjWNd86fcsbwiacenbCeht7oX ZnHWB+CVh6yeSehoBeidInqgp+zXNUFejsmExdjO7EpgK3a2Ra2502TG1mPcVsgx 5cv0KLPL02B1xvLG1r0JTG2gQOsuDqKOSrGwLn1D2PldhX2NKO8LJhuJxZct+Nm8 3BPRpd9xCTrW2J5Xlwkv/f6YO0XROfW+7TiYuymTkZcyzlQuBTuSYDQHO3Nqx2VI /rHyVtTX0AiQUtxiXTcE4Oxcxf+ZxiwjkfBwmgVkqjDM1Zx8 -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:21 2025 by rpki-client