$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa File: cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa (raw, json) Hash identifier: mG2DlSb/wX3oCVFPtnzmA7fu435zTV5P8IJmmcighqA= Subject key identifier: 50:17:0F:E2:DF:88:D9:E4:A0:74:38:8B:B5:7D:06:50:17:0A:2E:24 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F43285849C20A12ECCAECD347CEC5F080 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 2701 IP address blocks: 2001:49d0:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:12:ec:ca:ec:d3:47:ce:c5:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=0494c515-a029-4575-b460-e211e7214aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:ab:45:8d:87:db:a1:b4:98:0e:7d:3e:e6: e4:c5:d7:e5:01:77:b0:92:de:2b:1a:33:21:97:0f: 76:0d:aa:30:d6:6c:3b:7f:d2:69:d1:b6:74:4d:9b: 02:89:aa:38:86:26:75:36:dd:3c:3b:5b:da:98:4a: e5:59:3f:62:20:5e:b0:79:51:24:0d:14:05:67:0a: 55:04:06:24:62:a0:fe:e2:2e:77:fa:34:dd:93:a1: 3c:43:dd:11:0f:4e:50:99:fb:13:0c:29:f5:3d:ad: d0:20:1a:1f:0b:55:cf:33:c5:e0:02:1d:d6:b0:97: ca:f7:fa:2b:45:49:0f:ba:ca:1a:61:68:22:c6:29: 35:5b:fe:09:15:88:40:6e:52:53:cb:14:91:31:95: fe:23:e5:68:1e:1a:b2:83:0d:31:a9:a1:f4:3b:c1: cb:3d:cb:e8:75:08:7f:bd:88:53:9a:5e:e3:79:b5: c7:16:5b:d3:67:0a:84:10:3a:0b:23:75:32:18:6c: 19:fe:fc:8c:47:8a:f9:85:29:e4:b3:8a:3d:50:00: ce:05:9b:7b:a2:cf:14:7e:df:e6:c6:b4:7a:68:0f: 72:a3:dc:59:b6:b5:31:8b:09:6c:69:05:ca:7c:40: da:fb:46:a4:33:44:71:c2:90:2d:19:dc:b4:9a:8c: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:0F:E2:DF:88:D9:E4:A0:74:38:8B:B5:7D:06:50:17:0A:2E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:66:8a:ab:fd:3b:55:07:93:b5:93:d5:73:5e:f6:7f:02:82: 77:f5:1b:53:c3:db:cc:01:0f:e0:96:8c:31:b2:48:79:e5:a1: 8a:82:42:17:93:c2:f3:5a:21:bd:ac:ae:23:b9:88:43:a7:a3: 53:ac:91:10:8e:c1:ff:e0:2c:ea:a1:b2:31:0a:e2:50:00:7b: 6d:57:0a:0a:b9:81:03:44:58:6a:e0:82:da:d8:30:c3:7a:a9: 17:46:7b:14:4e:57:a0:22:1e:bd:ea:07:9c:b8:9b:6b:a1:63: db:27:ff:db:72:02:8b:a3:c6:7f:d1:4d:1d:58:87:02:7b:19: 73:50:37:07:ea:d1:30:a0:4c:5f:63:db:06:22:3f:5f:48:0c: 8b:13:41:82:6e:1e:b8:d6:2d:bc:ef:70:f0:d5:96:b7:9f:84: 6e:f2:47:2f:14:0a:bc:07:a3:c2:98:f9:dc:20:8c:0c:1f:1a: 45:8e:b4:70:13:c5:ba:39:86:04:6f:ac:fe:ac:39:a0:3d:95: 9a:91:e9:37:cb:f3:51:05:c1:d8:b9:c6:0c:81:fe:65:e3:d5: 01:fc:6b:b6:7c:55:6f:07:ad:94:7e:bd:cf:54:aa:54:0f:66: 51:66:4b:6d:34:3b:af:8c:79:5d:a0:c3:28:c6:53:16:9c:c2: ba:84:26:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnCChLsyuzTR87F8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MDQ5NGM1MTUtYTAyOS00NTc1LWI0NjAtZTIxMWU3MjE0YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+rRY2H26G0mA59PubkxdflAXewkt4rGjMh lw92Daow1mw7f9Jp0bZ0TZsCiao4hiZ1Nt08O1vamErlWT9iIF6weVEkDRQFZwpV BAYkYqD+4i53+jTdk6E8Q90RD05QmfsTDCn1Pa3QIBofC1XPM8XgAh3WsJfK9/or RUkPusoaYWgixik1W/4JFYhAblJTyxSRMZX+I+VoHhqygw0xqaH0O8HLPcvodQh/ vYhTml7jebXHFlvTZwqEEDoLI3UyGGwZ/vyMR4r5hSnks4o9UADOBZt7os8Uft/m xrR6aA9yo9xZtrUxiwlsaQXKfEDa+0akM0RxwpAtGdy0mozCeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFAXD+LfiNnkoHQ4i7V9BlAXCi4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvY2IzZDhmMWEtODZhOS0z OWE1LWFiYjUtMGU0YzE1ZGQzZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCIAFJ0JAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh2aKq/07VQeTtZPVc172fwKCd/UbU8PbzAEP4JaMMbJIeeWhioJC F5PC81ohvayuI7mIQ6ejU6yREI7B/+As6qGyMQriUAB7bVcKCrmBA0RYauCC2tgw w3qpF0Z7FE5XoCIeveoHnLiba6Fj2yf/23ICi6PGf9FNHViHAnsZc1A3B+rRMKBM X2PbBiI/X0gMixNBgm4euNYtvO9w8NWWt5+EbvJHLxQKvAejwpj53CCMDB8aRY60 cBPFujmGBG+s/qw5oD2VmpHpN8vzUQXB2LnGDIH+ZePVAfxrtnxVbwetlH69z1Sq VA9mUWZLbTQ7r4x5XaDDKMZTFpzCuoQmug== -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:56 2025 by rpki-client