$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa File: b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa (raw, json) Hash identifier: lSV07SPEUl2xn4HocbB5YwQwiaTKao7tG4ZJZEeRhos= Subject key identifier: FD:27:8A:E8:D8:1C:59:D8:E4:26:1E:93:A6:4B:92:FB:1F:86:59:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA2655B7A16FDF96039D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396570 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:26:55:b7:a1:6f:df:96:03:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1cfdbf16-41f6-4eb7-b284-fe0a5538fd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:76:b8:32:af:11:88:c8:56:85:d6:e6:05: 55:63:e6:f8:de:74:f4:4f:02:97:97:d7:41:b6:34: ec:e8:40:a1:d8:40:cd:9b:00:c6:6a:94:5b:74:69: 9d:52:d9:de:17:8f:0a:8d:cd:a5:91:66:40:9b:1f: ad:3d:43:91:34:54:14:60:62:dd:01:bc:e4:44:0b: 16:17:46:fb:ef:d1:33:cb:1f:7b:0f:b6:5d:84:b9: e0:d7:1f:79:21:16:e1:73:0b:b2:dd:b4:0f:81:f6: 10:7a:29:16:c6:de:26:ca:7f:74:76:49:55:fa:56: 41:8a:3d:73:bf:6e:19:f4:40:31:d4:df:7c:61:71: ef:d5:a7:a6:34:f4:7d:41:b3:e0:7f:85:97:22:a4: 58:28:c0:25:60:7d:c9:f3:b4:8a:be:56:a8:d2:b0: 4c:62:83:d5:14:56:71:f3:57:ee:91:ea:c2:42:e0: 03:6f:02:75:38:2f:ae:3f:c0:7f:de:97:9d:6b:16: d1:44:37:03:86:0d:b6:d1:09:ec:92:0c:f5:18:e8: 0c:24:b3:4e:02:ee:7a:ba:5e:00:19:e2:ae:61:81: cc:7d:03:a3:69:63:db:3a:07:6f:b9:fc:44:b9:a5: d1:81:e7:2f:72:7f:fd:1c:84:9a:2f:09:cf:e6:78: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:8A:E8:D8:1C:59:D8:E4:26:1E:93:A6:4B:92:FB:1F:86:59:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:82:68:78:d4:ff:35:46:03:a0:05:0f:bb:d5:42:10:8a:0a: 18:ee:b6:e6:a8:72:2f:46:df:24:db:f0:e1:e6:97:5e:68:d3: 22:83:86:67:db:de:f5:5e:98:dc:c2:86:f9:08:84:ef:55:fa: 55:ec:e7:c1:66:7c:60:5c:ab:bf:4c:0b:3d:9f:c8:09:dc:86: e8:44:09:70:2e:a0:84:75:68:ef:ac:62:53:4e:c6:9f:c0:62: 7c:2d:c8:ee:f7:a1:73:5b:86:a4:08:49:d7:ae:45:16:2a:5f: 22:41:43:6e:94:fc:33:49:e2:5d:fa:02:50:b3:26:ce:78:55: 02:69:5e:db:6c:0d:10:59:68:07:d8:e9:83:2a:1e:16:42:79: de:83:85:06:ae:fb:8e:89:ae:9b:a1:a6:0b:cf:b5:72:41:44: c1:e1:e5:25:c1:91:ce:bb:91:e2:b4:17:ef:bb:55:4c:b3:d3: 18:be:58:49:af:d7:8a:a4:aa:9b:5c:eb:2c:55:c2:c3:71:bd: dd:5c:c3:64:46:c1:fd:83:1c:d1:a6:51:0a:76:83:e4:3e:6e: b0:ec:c3:2a:8a:5f:51:56:4b:51:77:15:a5:d0:00:c9:02:b0: 13:56:0c:43:d6:36:8b:20:54:37:e7:2d:ff:94:dc:bf:a2:1c: e6:7e:8d:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiZVt6Fv35YDnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWNmZGJmMTYtNDFmNi00ZWI3LWIyODQtZmUwYTU1MzhmZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqh2uDKvEYjIVoXW5gVVY+b43nT0TwKXl9dB tjTs6ECh2EDNmwDGapRbdGmdUtneF48Kjc2lkWZAmx+tPUORNFQUYGLdAbzkRAsW F0b779Ezyx97D7ZdhLng1x95IRbhcwuy3bQPgfYQeikWxt4myn90dklV+lZBij1z v24Z9EAx1N98YXHv1aemNPR9QbPgf4WXIqRYKMAlYH3J87SKvlao0rBMYoPVFFZx 81fukerCQuADbwJ1OC+uP8B/3pedaxbRRDcDhg220Qnskgz1GOgMJLNOAu56ul4A GeKuYYHMfQOjaWPbOgdvufxEuaXRgecvcn/9HISaLwnP5nj10QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP0niujYHFnY5CYek6ZLkvsfhlnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjFmMjhhZTEtMmMxZC0z YWY0LTg5N2QtNjlmZTUyYjdlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAmgmh41P81RgOgBQ+71UIQigoY7rbmqHIvRt8k 2/Dh5pdeaNMig4Zn2971Xpjcwob5CITvVfpV7OfBZnxgXKu/TAs9n8gJ3IboRAlw LqCEdWjvrGJTTsafwGJ8Lcju96FzW4akCEnXrkUWKl8iQUNulPwzSeJd+gJQsybO eFUCaV7bbA0QWWgH2OmDKh4WQnneg4UGrvuOia6boaYLz7VyQUTB4eUlwZHOu5Hi tBfvu1VMs9MYvlhJr9eKpKqbXOssVcLDcb3dXMNkRsH9gxzRplEKdoPkPm6w7MMq il9RVktRdxWl0ADJArATVgxD1jaLIFQ35y3/lNy/ohzmfo1l -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:44 2025 by rpki-client