$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa File: 786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa (raw, json) Hash identifier: hdSqd5DuVlOUBbv741SWHz4H0B6nxcWi2+fzxoMcyUo= Subject key identifier: 59:AD:93:7D:F2:46:F5:E0:48:73:7F:94:DD:3F:71:C1:EE:91:AE:9C Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F43285849C0A4E0E9D5C33E9A1D3DF600 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 2495 IP address blocks: 2001:49d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e0:e9:d5:c3:3e:9a:1d:3d:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=921a9031-3b32-4eda-87b0-89a2b19d7691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:c7:e9:26:d4:c9:73:c6:f0:4c:69:75:57: 45:90:9f:fd:22:f3:e2:cb:04:dd:13:db:00:d8:25: 2c:e9:3b:d7:4b:72:cc:5c:59:85:1d:fe:9f:a1:43: bc:44:e3:df:b3:80:0d:c9:eb:f2:d6:26:65:ed:dd: d5:a9:2f:7c:a0:c8:ab:53:cb:28:42:84:ea:4d:ca: 57:7d:47:fb:27:83:9a:0c:72:6d:99:5a:bd:0d:a8: 1e:0a:65:5a:59:83:b5:dd:62:b3:37:55:0f:60:2b: 01:9a:67:2b:77:7e:67:4b:1e:e0:db:ce:77:76:fd: a5:a1:ac:bf:f5:0c:f5:4e:7a:e2:2e:b1:69:36:45: 8e:81:16:59:31:6a:10:42:83:af:e2:80:5c:60:9d: 79:9a:54:69:62:6a:0c:8b:a7:f2:e2:05:4c:9b:39: df:f3:b0:21:26:eb:f6:98:bc:41:03:f8:fe:cd:22: 28:8a:c9:bd:4b:37:7c:6b:0d:8c:10:32:5b:4e:4a: 10:93:0e:24:11:ae:30:f5:73:d0:93:cb:69:e1:11: 04:49:6a:2e:00:21:cd:c2:f2:46:42:b0:43:3d:3f: 13:f7:6b:04:15:3d:db:9c:2b:84:ae:2f:89:1d:0e: 72:e7:77:57:43:50:ba:2f:b0:d0:39:ee:e3:46:02: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AD:93:7D:F2:46:F5:E0:48:73:7F:94:DD:3F:71:C1:EE:91:AE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:87:d1:31:58:db:f8:e4:1c:15:72:94:15:f5:60:ce:3b:a8: 3a:98:20:47:c6:43:13:cf:6c:af:f2:4e:2c:7f:76:e9:89:51: f1:8f:19:df:ec:f0:2f:91:b3:e8:17:15:ac:af:be:51:70:39: 21:92:9f:67:95:38:45:84:89:91:10:8e:ed:2a:89:74:e0:02: 0e:ef:58:f2:50:7f:df:ba:ae:ed:9d:af:df:23:5a:90:5b:55: 86:ce:54:d1:fc:d3:fa:b5:21:96:07:5e:ac:a3:71:b0:cf:e8: be:db:84:cc:6a:6d:fc:7f:76:dd:93:19:2b:75:36:35:0d:e0: bb:52:ce:67:fa:d9:0e:29:07:d4:4b:25:68:df:54:7d:d8:17: 27:e1:43:05:c0:e0:3f:34:da:95:56:0a:ac:16:b2:bd:e9:b4: 3a:fb:33:b2:ce:74:4c:29:9b:6d:b2:5f:cf:55:3e:cd:cd:06: 6e:c9:ee:0d:17:b2:36:2b:21:fc:99:9a:9c:78:2b:e4:e8:5c: 99:da:f4:ab:5e:3f:cb:36:79:97:1d:08:f1:ab:95:da:aa:de: 55:27:f3:27:78:63:e5:12:5c:49:be:84:2a:d5:c4:de:57:48: a8:73:6f:a6:23:a7:d9:7d:f0:e4:87:89:22:d5:f0:9f:45:c9: 4b:da:bc:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApODp1cM+mh099gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OTIxYTkwMzEtM2IzMi00ZWRhLTg3YjAtODlhMmIxOWQ3NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfH6SbUyXPG8ExpdVdFkJ/9IvPiywTdE9sA 2CUs6TvXS3LMXFmFHf6foUO8ROPfs4ANyevy1iZl7d3VqS98oMirU8soQoTqTcpX fUf7J4OaDHJtmVq9DageCmVaWYO13WKzN1UPYCsBmmcrd35nSx7g2853dv2loay/ 9Qz1TnriLrFpNkWOgRZZMWoQQoOv4oBcYJ15mlRpYmoMi6fy4gVMmznf87AhJuv2 mLxBA/j+zSIoism9Szd8aw2MEDJbTkoQkw4kEa4w9XPQk8tp4REESWouACHNwvJG QrBDPT8T92sEFT3bnCuEri+JHQ5y53dXQ1C6L7DQOe7jRgK6TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmtk33yRvXgSHN/lN0/ccHuka6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNzg2ZTRlYTEtYzBhZi0z MjlhLTgxMzctOWVjMGM5ZjFmNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJ0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9h9ExWNv45BwVcpQV9WDOO6g6mCBHxkMTz2yv8k4sf3bpiVHxjxnf 7PAvkbPoFxWsr75RcDkhkp9nlThFhImREI7tKol04AIO71jyUH/fuq7tna/fI1qQ W1WGzlTR/NP6tSGWB16so3Gwz+i+24TMam38f3bdkxkrdTY1DeC7Us5n+tkOKQfU SyVo31R92Bcn4UMFwOA/NNqVVgqsFrK96bQ6+zOyznRMKZttsl/PVT7NzQZuye4N F7I2KyH8mZqceCvk6FyZ2vSrXj/LNnmXHQjxq5Xaqt5VJ/MneGPlElxJvoQq1cTe V0ioc2+mI6fZffDkh4ki1fCfRclL2ryq -----END CERTIFICATE-----Generated at Sun Jun 15 17:28:52 2025 by rpki-client