$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa File: e32297ca-540b-37ea-a072-fb22e0d1b602.roa (raw, json) Hash identifier: CzNT7Qlud0VtzrrnC+0Gwr5gb5eAUg2aLQVUrZ8UAmY= Subject key identifier: 72:E1:80:04:E0:A5:C7:F5:47:30:A7:C0:36:1D:DD:17:61:35:AC:E7 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F43285849C0A4D7A3F860C92FBA70B980 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 18460 IP address blocks: 2001:49d0:100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d7:a3:f8:60:c9:2f:ba:70:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=f23b7221-3ea6-4e02-a392-c51d4ecd321d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:0f:3e:93:75:fc:6e:4c:3c:7c:48:e6:c3: b7:97:07:9f:51:30:aa:00:30:29:ff:1b:c2:f8:3f: 42:60:54:fe:8c:e7:c8:60:10:7a:28:fc:c3:20:c0: 56:ff:7b:73:c7:58:40:3a:98:02:bf:6c:ef:f3:b6: 50:ed:53:44:a7:58:74:ee:b8:7d:94:04:f0:bf:7e: be:30:d1:79:34:5f:64:f4:0c:2b:a5:12:3f:cc:0c: 66:c3:42:97:ba:fc:af:a9:d5:23:a7:d7:85:cf:10: a8:40:10:5d:b3:53:7b:c6:1c:55:1b:55:9e:2d:84: 4c:dd:58:17:93:79:ef:37:31:51:3f:7f:cc:b4:a5: b8:f0:e8:37:ce:cc:9a:a6:f9:08:05:12:57:a4:5f: f8:3e:8a:2d:11:8e:3e:9e:63:6a:95:4b:58:62:ac: 8d:eb:0d:6b:40:8e:42:43:5b:3b:1e:83:78:5a:10: 48:3a:b8:76:87:af:8d:17:3f:31:93:05:63:7f:16: 82:0b:38:77:74:84:8b:c7:e9:4b:ad:a2:90:ab:af: a7:e1:01:65:90:24:91:21:8c:59:ed:48:70:93:6c: 6f:34:03:6f:68:1f:3b:e6:94:b5:0f:11:66:5d:08: 8d:2a:8f:37:90:ef:9a:3d:d0:d1:4b:24:72:e8:99: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:80:04:E0:A5:C7:F5:47:30:A7:C0:36:1D:DD:17:61:35:AC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:100::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:63:69:aa:90:6b:2d:f7:ad:4a:9d:0f:63:d3:d1:76:05:a1: 79:31:29:ab:0d:be:67:92:12:4b:9f:24:72:ea:ca:b0:b4:24: 22:a0:f6:30:50:d3:b7:73:f5:cf:4f:b5:ec:e1:04:1d:1f:3e: 1d:c0:3b:9a:fc:4b:91:f2:8d:ae:b1:64:14:e1:06:bd:4d:94: 2d:d1:16:c4:b1:85:1b:50:1c:d8:26:85:0e:b3:96:64:09:f1: e6:7e:cb:74:37:9a:b9:8c:79:4d:b8:ff:2b:b1:f2:f1:50:60: 3a:e2:7f:fa:03:5a:49:fc:1d:ef:20:48:6c:26:00:ac:43:dd: 10:d7:d5:77:1f:d0:0d:60:b3:11:15:37:5d:0c:2e:9a:84:54: ff:ef:30:03:b5:15:b9:7a:c1:2c:89:19:9e:5f:55:3e:66:7c: 79:de:a7:bc:e4:f9:c0:c3:64:6d:fe:83:71:2b:f5:05:b7:e3: 47:63:52:5b:9e:d8:7c:64:e4:b3:84:32:2a:6a:88:7c:b7:cb: c6:e7:28:44:7f:42:fd:d4:de:82:47:7c:97:9d:64:09:5d:15: 44:a6:bb:91:df:2f:a7:50:a4:fe:21:1d:5e:5f:1c:71:e9:41: d3:06:b1:75:b7:76:e6:df:80:b5:23:a7:bd:23:b3:51:1c:b0: da:10:86:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApNej+GDJL7pwuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjIzYjcyMjEtM2VhNi00ZTAyLWEzOTItYzUxZDRlY2QzMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3gPPpN1/G5MPHxI5sO3lwefUTCqADAp/xvC +D9CYFT+jOfIYBB6KPzDIMBW/3tzx1hAOpgCv2zv87ZQ7VNEp1h07rh9lATwv36+ MNF5NF9k9AwrpRI/zAxmw0KXuvyvqdUjp9eFzxCoQBBds1N7xhxVG1WeLYRM3VgX k3nvNzFRP3/MtKW48Og3zsyapvkIBRJXpF/4PootEY4+nmNqlUtYYqyN6w1rQI5C Q1s7HoN4WhBIOrh2h6+NFz8xkwVjfxaCCzh3dISLx+lLraKQq6+n4QFlkCSRIYxZ 7Uhwk2xvNANvaB875pS1DxFmXQiNKo83kO+aPdDRSyRy6JkdkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLhgATgpcf1RzCnwDYd3RdhNaznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvZTMyMjk3Y2EtNTQwYi0z N2VhLWEwNzItZmIyMmUwZDFiNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAFJ0AEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9jaaqQay33rUqdD2PT0XYFoXkxKasNvmeSEkufJHLqyrC0JCKg 9jBQ07dz9c9PtezhBB0fPh3AO5r8S5Hyja6xZBThBr1NlC3RFsSxhRtQHNgmhQ6z lmQJ8eZ+y3Q3mrmMeU24/yux8vFQYDrif/oDWkn8He8gSGwmAKxD3RDX1Xcf0A1g sxEVN10MLpqEVP/vMAO1Fbl6wSyJGZ5fVT5mfHnep7zk+cDDZG3+g3Er9QW340dj Ulue2Hxk5LOEMipqiHy3y8bnKER/Qv3U3oJHfJedZAldFUSmu5HfL6dQpP4hHV5f HHHpQdMGsXW3dubfgLUjp70js1EcsNoQhok= -----END CERTIFICATE-----Generated at Mon Jun 16 13:32:50 2025 by rpki-client