$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3879adb0-65c0-3ea8-8859-05cd95100fe3.roa File: 3879adb0-65c0-3ea8-8859-05cd95100fe3.roa (raw, json) Hash identifier: vCh+LNg45F2zr9bmWEcWyTtApVfhz7WX6RX/wtxI0DU= Subject key identifier: BC:B9:FA:10:67:DD:C8:AB:68:42:35:CC:09:A6:9D:B5:78:27:77:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496CE47CC45D7F80B00FDB35AA Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3879adb0-65c0-3ea8-8859-05cd95100fe3.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 396552 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:7c:c4:5d:7f:80:b0:0f:db:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=287a9dde-3740-498a-b5e6-7f173d938aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:ed:75:d0:0a:81:2f:6d:4e:8b:67:70:9f: 19:f2:3f:c8:da:05:46:c1:38:21:ca:68:b2:f6:8f: 87:57:fe:a7:b4:be:55:d5:c4:a4:e0:9b:f4:c2:65: 65:57:b2:52:7a:35:70:c6:06:61:12:ea:0e:23:41: b0:6f:9a:d2:4d:6b:ec:9a:f3:a2:f2:ba:6f:b2:a6: 63:fd:f5:c3:31:59:46:11:95:58:f6:b8:8f:f4:68: 96:3c:ba:7b:ae:c2:cd:61:62:ee:e6:ca:e4:34:5b: a4:1a:bc:61:9a:50:cf:5c:9c:2c:89:7b:c5:85:53: f3:a9:23:12:bc:d0:91:d8:eb:61:36:9c:1e:f8:04: fb:93:ae:fe:21:25:21:da:e1:97:9b:19:77:59:6f: e8:dc:f7:1b:21:92:0c:24:94:49:d8:cb:01:5d:78: 6c:04:4c:15:c7:76:91:0f:0b:b5:18:f9:ee:06:30: 90:36:51:0c:bb:a9:a3:e3:01:5a:3f:a4:00:68:73: 57:c3:47:86:48:98:66:b0:27:74:36:a0:96:02:28: 9f:25:bb:6f:a4:ac:72:08:a2:c5:78:92:8f:db:ab: 77:ec:43:18:e0:74:d6:95:88:41:db:61:14:bf:53: f5:a0:76:b4:c3:77:2c:05:d8:71:d7:ac:a8:93:35: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:FA:10:67:DD:C8:AB:68:42:35:CC:09:A6:9D:B5:78:27:77:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3879adb0-65c0-3ea8-8859-05cd95100fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f2:3c:18:9b:98:6c:9d:33:e5:a8:30:05:4b:49:64:b9:e5: e1:e9:29:39:bd:47:2b:3c:87:50:d9:89:43:2a:a2:c5:cd:5c: 46:b5:c5:97:dd:45:41:9e:ac:ff:78:80:3e:5a:bc:9f:84:f3: 45:8a:5c:5f:6d:0a:96:fd:17:b2:e7:63:2c:df:40:45:24:9e: a8:cc:23:1f:23:28:71:05:fd:cb:59:74:64:07:7e:89:7e:7c: 2b:c4:e4:e0:5b:93:26:b0:d3:56:9c:ef:25:2c:07:c2:6a:a1: 89:1e:ad:a3:ec:37:1c:1a:ce:1b:ff:5b:48:ed:aa:a3:21:52: 9f:e9:18:ed:65:17:21:b5:8d:b3:30:34:80:49:87:31:38:36: 69:e5:09:b5:f1:87:2c:6f:b1:a1:83:30:bb:5d:38:49:77:d8: ea:eb:92:e1:6a:d1:1d:be:e4:fe:5b:5f:5d:29:3f:51:30:ca: 7d:6e:67:85:78:64:52:fb:a2:d0:4a:91:a2:fc:d1:6f:f1:fd: 07:9c:98:32:e2:91:c6:e3:ba:10:6e:65:ed:3a:30:23:84:cf: 81:83:c7:74:c7:63:d1:96:b5:73:33:32:ad:09:f1:16:02:c6: 76:d6:f1:6a:b9:fa:fc:94:5d:ca:68:ce:24:e8:e6:ee:45:90: 5d:7c:93:b7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5HzEXX+AsA/bNaowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk Mjg3YTlkZGUtMzc0MC00OThhLWI1ZTYtN2YxNzNkOTM4YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGrtddAKgS9tTotncJ8Z8j/I2gVGwTghymiy 9o+HV/6ntL5V1cSk4Jv0wmVlV7JSejVwxgZhEuoOI0Gwb5rSTWvsmvOi8rpvsqZj /fXDMVlGEZVY9riP9GiWPLp7rsLNYWLu5srkNFukGrxhmlDPXJwsiXvFhVPzqSMS vNCR2OthNpwe+AT7k67+ISUh2uGXmxl3WW/o3PcbIZIMJJRJ2MsBXXhsBEwVx3aR Dwu1GPnuBjCQNlEMu6mj4wFaP6QAaHNXw0eGSJhmsCd0NqCWAiifJbtvpKxyCKLF eJKP26t37EMY4HTWlYhB22EUv1P1oHa0w3csBdhx16yokzX6IwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLy5+hBn3ciraEI1zAmmnbV4J3cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg3OWFkYjAtNjVjMC0z ZWE4LTg4NTktMDVjZDk1MTAwZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBC8jwYm5hsnTPlqDAFS0lkueXh6Sk5vUcrPIdQ 2YlDKqLFzVxGtcWX3UVBnqz/eIA+WryfhPNFilxfbQqW/Rey52Ms30BFJJ6ozCMf IyhxBf3LWXRkB36JfnwrxOTgW5MmsNNWnO8lLAfCaqGJHq2j7DccGs4b/1tI7aqj IVKf6RjtZRchtY2zMDSASYcxODZp5Qm18Ycsb7GhgzC7XThJd9jq65LhatEdvuT+ W19dKT9RMMp9bmeFeGRS+6LQSpGi/NFv8f0HnJgy4pHG47oQbmXtOjAjhM+Bg8d0 x2PRlrVzMzKtCfEWAsZ21vFqufr8lF3KaM4k6ObuRZBdfJO3 -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:11 2025 by rpki-client