$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa File: 9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa (raw, json) Hash identifier: f+oBXhk2Ub1JtlhRz84CaiUWXGF8UtlEQdzkAccRqZM= Subject key identifier: D1:06:FC:79:AE:9F:36:E8:3A:DE:05:1B:C2:99:DC:AC:64:33:9E:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA2AE55C0C0CBB827687C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396550 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2a:e5:5c:0c:0c:bb:82:76:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c18c467b-7ee7-4508-a7c8-7d28026d5e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:af:c8:88:85:30:f7:e0:0c:17:81:57:ac: ac:77:62:df:66:95:88:e1:c3:16:90:3f:cd:fc:20: cd:eb:06:2b:34:b3:ef:dc:de:8d:3f:b4:2d:2a:7c: f4:e8:bd:c4:4c:af:55:7e:bb:cc:4b:cb:4b:37:60: c0:e3:c8:85:42:6f:37:63:60:22:cc:eb:56:d5:9f: 95:d1:64:bd:b0:79:a5:54:b8:f3:9e:d2:5a:05:6b: 51:64:88:39:2d:91:8e:27:07:d0:d6:21:8b:79:31: af:0b:b1:18:56:c3:83:45:a5:14:97:23:8f:7a:59: 0c:ff:97:2e:cc:1e:c8:3e:3b:5f:50:ed:1d:9d:46: f7:13:94:49:28:38:74:fb:af:98:f4:93:f8:e2:0b: af:4a:56:a0:68:68:b1:e6:03:6c:a8:d4:40:d6:de: 3d:86:94:dd:27:b4:4f:ab:1b:81:1e:46:77:c8:e6: 94:f4:47:d2:97:c5:95:c5:93:a3:58:0b:46:72:90: 61:55:c1:9f:15:3d:f4:f2:f5:34:c3:cf:da:56:87: c6:18:5a:58:71:59:7b:ce:6a:b0:07:3f:8c:ab:0a: 98:52:26:f5:56:55:3f:03:4a:1c:49:fc:5b:8f:4e: 46:28:23:01:fd:79:87:9d:43:03:66:3a:17:f2:3f: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:06:FC:79:AE:9F:36:E8:3A:DE:05:1B:C2:99:DC:AC:64:33:9E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7a:b4:6e:7c:55:8e:69:e5:bd:1a:56:d5:7d:fc:44:fc:a7: 41:63:42:c8:02:d7:62:21:b3:38:1f:fb:04:eb:47:6b:0f:e4: a4:35:09:72:23:5e:3e:f2:e3:4c:99:24:ff:14:de:5d:d4:aa: b3:10:3b:da:6b:92:cf:f1:4b:f9:e8:c0:65:b2:62:ce:6f:67: 09:87:a4:12:ac:21:e7:51:fb:7f:f4:37:05:b4:ea:1d:52:83: 38:9c:8b:36:ef:0c:68:51:c5:bf:a0:f8:32:15:7a:55:69:b3: e1:af:84:94:54:df:75:ae:10:a3:fc:49:c4:05:48:29:eb:35: 36:8b:36:6b:d1:a5:5f:64:71:12:36:47:1d:9c:6f:d0:37:4b: 7d:8c:84:d4:47:82:1c:10:56:ee:4a:ed:17:ab:13:85:06:ac: 96:6e:db:5d:f6:af:26:ec:61:d9:f4:4d:0b:35:39:62:8d:a7: 31:5c:44:f0:b5:64:ec:c1:f0:ff:91:db:74:16:e4:c5:d0:e0: 41:16:57:0f:f6:59:00:52:7f:e2:82:9c:0b:65:f2:bb:79:fa: 40:26:be:21:7f:98:57:d7:38:d3:82:82:5c:e3:e1:69:fb:2c: 45:a7:ed:19:e8:07:85:8c:0f:be:01:18:95:86:46:af:5d:18: e1:45:7c:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuirlXAwMu4J2h8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzE4YzQ2N2ItN2VlNy00NTA4LWE3YzgtN2QyODAyNmQ1ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma2vyIiFMPfgDBeBV6ysd2LfZpWI4cMWkD/N /CDN6wYrNLPv3N6NP7QtKnz06L3ETK9VfrvMS8tLN2DA48iFQm83Y2AizOtW1Z+V 0WS9sHmlVLjzntJaBWtRZIg5LZGOJwfQ1iGLeTGvC7EYVsODRaUUlyOPelkM/5cu zB7IPjtfUO0dnUb3E5RJKDh0+6+Y9JP44guvSlagaGix5gNsqNRA1t49hpTdJ7RP qxuBHkZ3yOaU9EfSl8WVxZOjWAtGcpBhVcGfFT308vU0w8/aVofGGFpYcVl7zmqw Bz+MqwqYUib1VlU/A0ocSfxbj05GKCMB/XmHnUMDZjoX8j8BvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNEG/HmunzboOt4FG8KZ3KxkM55MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJlZmI5NDYtODNkNC0z NGFlLThiOGMtODUwYjFiNDZkNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJerRufFWOaeW9GlbVffxE/KdBY0LIAtdiIbM4 H/sE60drD+SkNQlyI14+8uNMmST/FN5d1KqzEDvaa5LP8Uv56MBlsmLOb2cJh6QS rCHnUft/9DcFtOodUoM4nIs27wxoUcW/oPgyFXpVabPhr4SUVN91rhCj/EnEBUgp 6zU2izZr0aVfZHESNkcdnG/QN0t9jITUR4IcEFbuSu0XqxOFBqyWbttd9q8m7GHZ 9E0LNTlijacxXETwtWTswfD/kdt0FuTF0OBBFlcP9lkAUn/igpwLZfK7efpAJr4h f5hX1zjTgoJc4+Fp+yxFp+0Z6AeFjA++ARiVhkavXRjhRXyR -----END CERTIFICATE-----Generated at Sat Apr 26 22:13:12 2025 by rpki-client