$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa File: f3359e85-f33d-3b60-bc7c-daa031cad17e.roa (raw, json) Hash identifier: 0kc5tBze053IFu04hQopJxcsM+5nteXuU+oKpq1ZFlE= Subject key identifier: A9:F5:33:0C:70:2B:4C:EC:92:4F:4E:5E:8C:9C:39:3E:E7:F1:85:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A4BA26963893DB4CF8E99680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396561 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:26:96:38:93:db:4c:f8:e9:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=505c9ea4-35ac-4035-9e74-146d12f19a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:3a:0d:5f:bb:10:e1:50:59:41:7c:a7:87: c8:ab:30:ad:dc:ae:fc:67:34:65:7a:b7:cc:74:f5: 49:5a:9f:2c:f7:e9:8b:3f:38:e6:d9:42:b6:a4:93: 21:4c:da:c7:c8:ce:02:ef:84:c9:fe:9a:87:bb:44: c5:d5:cd:41:4d:13:ba:b5:9d:ba:fb:aa:af:98:43: 2a:b3:79:24:d1:7f:16:8f:cf:0f:77:f6:ba:a0:6f: c6:72:f3:04:b8:f3:c5:17:87:5d:9d:3d:73:80:79: 53:d0:46:cd:dc:f9:3a:e8:4f:4f:9f:00:c8:f6:a0: f2:ad:64:b0:54:5f:31:2b:0e:9b:54:a0:c6:ff:ef: fd:f3:3a:81:e6:88:a7:37:99:40:8d:09:32:61:2c: c5:c9:40:ea:a0:0f:5a:31:6e:ed:6b:cb:95:f2:7f: 19:ea:03:c3:84:c5:bb:63:f4:d2:38:90:38:a0:e5: fd:21:45:5d:02:11:c4:ef:aa:5f:16:07:4b:5d:80: c0:70:2f:ce:fa:71:9d:01:73:d6:8a:20:55:f2:b0: 04:1a:38:44:97:fd:e3:74:f6:01:2d:90:bf:21:71: 19:37:1a:2e:70:42:a7:d7:39:ef:f0:20:82:52:19: 6c:25:d4:27:ae:41:03:36:34:44:4d:d6:b3:19:e7: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F5:33:0C:70:2B:4C:EC:92:4F:4E:5E:8C:9C:39:3E:E7:F1:85:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:78:e7:b8:50:12:e2:7e:d9:5e:56:ab:96:1d:28:7e:3c:6a: a2:c7:85:e3:99:40:fc:e1:1b:dc:3d:a4:e7:d4:d5:0b:6d:42: e1:e9:43:90:64:7c:33:22:db:1c:55:00:dc:70:cb:ad:62:ac: bf:dc:e9:bd:2b:71:08:53:f7:5e:cb:e5:4d:1c:6c:ce:a6:db: 23:61:62:a9:43:d4:45:0a:f0:a5:d7:05:6d:13:37:1b:cc:9c: ef:a1:ee:bd:7a:9d:9b:fd:2e:03:31:36:31:b3:ce:20:6a:9d: 94:c9:0b:cc:a1:ee:dd:8d:1a:09:84:d2:80:dc:2b:6f:de:87: f8:77:e4:bb:a2:fd:48:e6:f5:33:4a:81:e1:83:de:21:92:5f: 83:71:a2:06:7a:56:ee:95:8a:2e:27:99:85:37:2d:1f:4d:be: 81:67:b0:d8:bd:09:62:ea:b2:05:9e:3a:d1:6b:af:2a:30:3f: 5b:28:b5:a0:4d:86:9b:08:00:bb:a2:96:d0:bd:50:5c:af:d6: 84:2f:2b:18:d8:61:ca:88:4c:67:7b:cf:56:f5:e4:89:29:37: 35:fd:64:19:bd:28:52:9f:15:e6:4e:21:ba:99:b0:6e:ab:bc: ea:ce:1b:9f:22:48:8a:b6:eb:e8:eb:3d:f1:46:30:4b:d1:73: 36:1b:f0:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiaWOJPbTPjploAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTA1YzllYTQtMzVhYy00MDM1LTllNzQtMTQ2ZDEyZjE5YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY06DV+7EOFQWUF8p4fIqzCt3K78ZzRlerfM dPVJWp8s9+mLPzjm2UK2pJMhTNrHyM4C74TJ/pqHu0TF1c1BTRO6tZ26+6qvmEMq s3kk0X8Wj88Pd/a6oG/GcvMEuPPFF4ddnT1zgHlT0EbN3Pk66E9PnwDI9qDyrWSw VF8xKw6bVKDG/+/98zqB5oinN5lAjQkyYSzFyUDqoA9aMW7ta8uV8n8Z6gPDhMW7 Y/TSOJA4oOX9IUVdAhHE76pfFgdLXYDAcC/O+nGdAXPWiiBV8rAEGjhEl/3jdPYB LZC/IXEZNxoucEKn1znv8CCCUhlsJdQnrkEDNjRETdazGefTVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKn1MwxwK0zskk9OXoycOT7n8YVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjMzNTllODUtZjMzZC0z YjYwLWJjN2MtZGFhMDMxY2FkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAceOe4UBLiftleVquWHSh+PGqix4XjmUD84Rvc PaTn1NULbULh6UOQZHwzItscVQDccMutYqy/3Om9K3EIU/dey+VNHGzOptsjYWKp Q9RFCvCl1wVtEzcbzJzvoe69ep2b/S4DMTYxs84gap2UyQvMoe7djRoJhNKA3Ctv 3of4d+S7ov1I5vUzSoHhg94hkl+DcaIGelbulYouJ5mFNy0fTb6BZ7DYvQli6rIF njrRa68qMD9bKLWgTYabCAC7opbQvVBcr9aELysY2GHKiExne89W9eSJKTc1/WQZ vShSnxXmTiG6mbBuq7zqzhufIkiKtuvo6z3xRjBL0XM2G/Bf -----END CERTIFICATE-----Generated at Sun Apr 27 07:26:56 2025 by rpki-client