$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa File: 7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa (raw, json) Hash identifier: ySsyem9qrmCYyYgVSUVJaAEb3ILvORgG49PPTFeqEkU= Subject key identifier: 63:53:21:E1:48:AD:22:47:C5:8C:3F:D2:D6:06:1C:16:6A:77:C4:FF Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F432858490F7BFED8D7BB66E978559F80 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 376 IP address blocks: 2001:510:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fe:d8:d7:bb:66:e9:78:55:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=0a3d4c79-22ba-4a93-97f9-c3ae921eddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:99:de:3f:a5:3b:e7:f4:c0:0c:f1:85:80: c1:86:00:48:ff:7a:02:6f:45:0e:99:36:7e:8e:3f: be:ab:f3:e8:ca:5e:ff:48:62:50:eb:e7:7b:18:32: 2a:40:2f:a1:a4:d0:76:1c:8b:61:0c:25:f3:ad:44: d4:97:3b:23:9c:a8:71:bc:d4:10:95:13:26:7a:1c: 68:e4:ea:fc:d2:77:d5:d8:89:b7:74:95:c5:dd:ae: e5:a7:aa:b8:b2:0c:71:ae:1a:b2:31:56:fe:2c:e3: 60:de:4a:78:8e:57:40:48:fb:b6:8f:e9:33:87:9c: 29:dc:a6:8b:08:0f:8c:7b:53:df:b7:91:68:96:4e: 5c:f4:28:48:43:82:8e:30:ae:2c:a4:3e:05:ea:db: 9e:73:60:86:49:96:a1:44:0a:24:55:a1:24:56:06: 64:1e:a7:e6:d3:d1:2c:e4:d2:40:db:d9:c0:35:cd: ef:78:b6:a8:6d:03:0e:6f:96:91:ad:a6:72:56:35: 9f:65:ed:42:58:0b:17:1c:ac:1f:69:ef:ea:bf:8a: 5a:2d:c2:a4:44:4f:8c:de:a1:bf:b6:81:3c:4d:84: 67:1b:50:cb:7c:4a:de:ea:27:38:7d:e7:fd:d3:7e: c6:8c:11:65:83:46:6c:7c:16:82:5d:3c:33:91:c8: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:21:E1:48:AD:22:47:C5:8C:3F:D2:D6:06:1C:16:6A:77:C4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv6: 2001:510:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:37:f0:16:0f:ae:b2:e4:1b:15:ab:c8:31:2c:0c:94:74:80: 52:cb:7a:66:6f:1c:38:c6:cd:d9:5f:c4:41:02:25:26:f0:64: c5:ad:b5:56:fd:47:b7:a3:39:3b:7f:b2:cf:3c:80:70:fe:1a: ff:09:49:b8:ae:bf:0e:fa:99:0a:2c:6f:43:cc:85:d4:72:62: 81:36:51:59:70:ce:e8:2a:11:c8:83:a3:22:fa:75:99:9e:02: ac:74:0e:81:6c:77:cd:bb:04:89:d8:c5:a0:ea:65:97:6d:0e: 9d:48:38:a1:0c:ca:9c:98:1a:d2:b8:06:88:a2:41:4d:61:77: 76:2a:67:5c:05:ae:ae:a0:7c:47:26:80:99:0c:4f:60:8d:e0: cf:9f:e1:c7:a9:b6:bd:b0:e1:5a:c3:64:b6:da:e0:4a:b5:3b: b3:7d:57:f6:66:da:44:c9:ca:b7:e1:cc:61:39:4c:ca:e5:bb: e1:9e:b3:19:c1:54:80:ae:a9:d7:d9:3d:e3:9c:00:17:a0:62: 15:df:3f:15:0a:c0:e9:69:05:36:2e:40:36:93:7c:3d:88:9a: f4:4b:68:b9:89:d7:0c:e9:60:b6:cb:31:bc:d7:89:c4:c3:58: aa:db:99:1c:9d:f3:d1:88:19:ba:bc:36:27:1a:a7:8e:97:14: 39:17:6d:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkPe/7Y17tm6XhVn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MGEzZDRjNzktMjJiYS00YTkzLTk3ZjktYzNhZTkyMWVkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6Z3j+lO+f0wAzxhYDBhgBI/3oCb0UOmTZ+ jj++q/Poyl7/SGJQ6+d7GDIqQC+hpNB2HIthDCXzrUTUlzsjnKhxvNQQlRMmehxo 5Or80nfV2Im3dJXF3a7lp6q4sgxxrhqyMVb+LONg3kp4jldASPu2j+kzh5wp3KaL CA+Me1Pft5Folk5c9ChIQ4KOMK4spD4F6tuec2CGSZahRAokVaEkVgZkHqfm09Es 5NJA29nANc3veLaobQMOb5aRraZyVjWfZe1CWAsXHKwfae/qv4paLcKkRE+M3qG/ toE8TYRnG1DLfEre6ic4fef9037GjBFlg0ZsfBaCXTwzkch7awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGNTIeFIrSJHxYw/0tYGHBZqd8T/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvN2Y0ODZkMDktZDdhNS0z MWE2LTliOTItMGFmNmRiOWFjMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADY38BYPrrLkGxWryDEsDJR0gFLLemZvHDjGzdlfxEECJSbwZMWt tVb9R7ejOTt/ss88gHD+Gv8JSbiuvw76mQosb0PMhdRyYoE2UVlwzugqEciDoyL6 dZmeAqx0DoFsd827BInYxaDqZZdtDp1IOKEMypyYGtK4BoiiQU1hd3YqZ1wFrq6g fEcmgJkMT2CN4M+f4ceptr2w4VrDZLba4Eq1O7N9V/Zm2kTJyrfhzGE5TMrlu+Ge sxnBVICuqdfZPeOcABegYhXfPxUKwOlpBTYuQDaTfD2ImvRLaLmJ1wzpYLbLMbzX icTDWKrbmRyd89GIGbq8Nicap46XFDkXbRo= -----END CERTIFICATE-----Generated at Mon Apr 28 10:40:08 2025 by rpki-client