$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa File: abff4389-a8a1-36b0-8f25-2173ebce19de.roa (raw, json) Hash identifier: VJrCYrU3DWbYZ4acawgZR7021uRrRsFUzXswSJkLYts= Subject key identifier: 4B:AF:04:FA:84:32:D2:69:B6:3B:BF:39:56:88:6C:66:97:41:A1:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403985488F4B7CFEBCBD2B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 396590 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:85:48:8f:4b:7c:fe:bc:bd:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=523aa373-6cc2-4a98-bdbc-01b62a43c7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:bb:84:ab:2d:ab:08:12:c0:63:8e:c0:5d: 01:dd:4a:cf:84:d2:09:82:96:23:5f:86:e0:91:0b: f8:31:92:f7:f8:1e:01:2a:1c:f6:3f:ff:09:1e:ef: cc:a4:69:c1:77:f3:69:d5:23:81:b1:50:1b:46:a0: 61:a7:f9:3b:10:83:f2:40:0f:4f:5e:76:ee:7f:09: f2:63:95:5f:d9:7d:dc:c6:83:58:9e:1a:2b:94:2f: 01:f2:31:2c:43:42:02:bd:5a:90:75:ef:f4:2d:68: 23:e6:91:ee:85:bd:a4:4d:6f:b5:c1:a8:b7:2a:3e: 49:e3:9c:9b:24:ad:38:f4:e6:7f:02:9d:9c:9c:10: c0:b3:6e:1b:99:22:19:3b:03:39:d4:cc:df:cc:39: 34:d5:21:6b:61:d3:4d:be:d5:1b:a7:28:8c:1f:84: 4c:4f:53:ca:c4:67:aa:ca:4e:18:32:88:cb:52:1a: b9:80:f5:34:05:c6:fc:c3:eb:d1:71:d1:fc:0f:54: 0a:f1:60:c9:65:19:04:8c:08:1f:52:5b:f0:5f:29: 28:2e:42:45:02:bd:16:94:43:91:b9:de:4a:b6:6b: 2d:d0:b8:cd:a9:45:b1:df:d4:93:3b:96:42:3a:5d: e6:0e:ab:cf:38:20:f1:91:0e:ae:83:63:6b:e3:8d: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:04:FA:84:32:D2:69:B6:3B:BF:39:56:88:6C:66:97:41:A1:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:87:0e:54:58:01:56:96:7f:d5:a4:3a:90:da:16:72:03:f0: e9:60:b9:43:e2:13:f1:12:a3:fd:b8:48:66:ca:41:29:e5:a3: b6:db:b0:ce:12:36:76:08:7d:d7:05:1c:da:56:b1:fd:95:5a: 6a:43:32:83:d4:65:33:67:c8:31:1e:02:33:a8:12:15:fb:7a: 29:4a:ba:73:30:2f:05:58:7a:23:4d:42:bc:8e:53:7b:27:19: 07:99:e5:1b:87:d3:e5:08:44:53:78:38:af:1f:45:85:2a:56: 3d:74:6a:78:b3:2c:10:c2:d2:c8:8a:4a:c2:d7:7d:4a:9d:d3: e2:87:e6:e6:60:37:df:70:c9:7a:20:4e:91:a9:ad:0b:eb:b9: d5:06:3b:e7:c5:55:4b:e0:37:82:65:ab:03:9e:76:8c:b1:c6: 0a:59:a9:ba:4d:8f:50:17:a4:e7:b7:98:cd:35:1d:e0:47:1f: 9c:21:fe:8c:f2:05:9a:0e:b2:24:77:f3:2f:da:c1:b3:0a:7d: 12:98:78:c2:7d:f5:74:17:73:58:3b:58:2c:64:08:14:74:4f: 19:83:62:d3:11:a3:4a:b0:65:56:1a:4d:9e:f3:c3:aa:45:6a: 7b:fd:bb:25:e5:c4:96:7c:9c:16:90:d3:3b:c5:ab:4a:21:73: f1:b4:88:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYVIj0t8/ry9K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NTIzYWEzNzMtNmNjMi00YTk4LWJkYmMtMDFiNjJhNDNjN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Me7hKstqwgSwGOOwF0B3UrPhNIJgpYjX4bg kQv4MZL3+B4BKhz2P/8JHu/MpGnBd/Np1SOBsVAbRqBhp/k7EIPyQA9PXnbufwny Y5Vf2X3cxoNYnhorlC8B8jEsQ0ICvVqQde/0LWgj5pHuhb2kTW+1wai3Kj5J45yb JK049OZ/Ap2cnBDAs24bmSIZOwM51MzfzDk01SFrYdNNvtUbpyiMH4RMT1PKxGeq yk4YMojLUhq5gPU0Bcb8w+vRcdH8D1QK8WDJZRkEjAgfUlvwXykoLkJFAr0WlEOR ud5Ktmst0LjNqUWx39STO5ZCOl3mDqvPOCDxkQ6ug2Nr441qwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEuvBPqEMtJptju/OVaIbGaXQaGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJmZjQzODktYThhMS0z NmIwLThmMjUtMjE3M2ViY2UxOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFhw5UWAFWln/VpDqQ2hZyA/DpYLlD4hPxEqP9 uEhmykEp5aO227DOEjZ2CH3XBRzaVrH9lVpqQzKD1GUzZ8gxHgIzqBIV+3opSrpz MC8FWHojTUK8jlN7JxkHmeUbh9PlCERTeDivH0WFKlY9dGp4sywQwtLIikrC131K ndPih+bmYDffcMl6IE6Rqa0L67nVBjvnxVVL4DeCZasDnnaMscYKWam6TY9QF6Tn t5jNNR3gRx+cIf6M8gWaDrIkd/Mv2sGzCn0SmHjCffV0F3NYO1gsZAgUdE8Zg2LT EaNKsGVWGk2e88OqRWp7/bsl5cSWfJwWkNM7xatKIXPxtIit -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:21 2025 by rpki-client