$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa File: 42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json) Hash identifier: AqHLPDkaXYHBQGE8RAcRpENA6vGRurrwZs7etT0O5E4= Subject key identifier: DA:42:0D:0E:92:A2:39:7D:0F:75:B7:C2:8E:5D:7C:54:8C:86:0B:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403985FF47EE0176A445A100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 396584 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:85:ff:47:ee:01:76:a4:45:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=4380e1b8-f2a7-46e8-bbb3-9c8e1744b085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:a7:3e:64:c1:15:02:22:df:4b:21:12:ae: 65:d1:8b:5c:96:8d:92:b6:e5:ef:c8:fb:59:c5:8a: 1b:9d:65:eb:99:4f:12:67:49:c9:92:b4:53:1d:48: e2:d5:6a:7c:05:65:b0:8d:b7:cf:80:84:67:41:ae: 99:be:d4:85:6b:75:3f:12:b0:f8:91:c0:d5:74:4b: 06:21:56:bc:3c:be:b0:80:aa:65:aa:2e:6a:86:6b: 5b:a3:a7:a4:65:59:00:8c:85:3d:7b:82:ac:4a:c2: 7f:3a:8a:a4:89:f1:2d:73:7d:fa:4f:5a:15:b3:02: 65:31:49:07:1c:da:09:f1:9d:6a:31:5e:2a:ee:92: 17:21:16:0b:a2:d5:83:c2:72:a3:a4:b4:56:07:3e: 07:28:71:cc:38:8c:3c:1e:1e:a5:6a:45:d2:82:22: 19:b1:c0:1e:91:9a:32:1a:72:6d:12:79:0f:6a:47: aa:ed:2f:0d:3e:1d:11:85:51:16:75:b2:d3:38:12: c4:d0:31:67:ea:16:92:3c:99:f0:25:e6:af:e0:3e: 70:d3:7f:5b:a1:25:8c:d2:da:41:f9:5f:36:c1:ca: cd:bf:8c:1f:0a:e2:df:a8:f9:65:c2:d2:b6:c4:28: de:69:20:cc:3a:6a:a1:b4:f8:19:15:b5:67:73:9d: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:0D:0E:92:A2:39:7D:0F:75:B7:C2:8E:5D:7C:54:8C:86:0B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:95:af:47:dd:8f:d0:6f:e8:a2:55:a4:b1:1e:f3:5e:f0:d4: 19:4a:79:d9:ed:46:01:eb:6d:6b:d5:0a:95:bf:91:04:1d:c2: ce:23:bb:7a:58:33:c6:7c:c2:5b:14:1b:07:8d:3e:37:53:38: a8:b7:44:fe:d7:e0:89:81:14:54:47:d8:67:61:aa:bd:c0:89: 7b:43:6b:2d:e3:e1:ae:ec:ff:b0:dd:67:2d:bb:35:20:9f:a0: 01:9a:41:e5:c3:e1:e4:01:7a:da:02:1c:0d:3e:1b:d1:99:0e: 51:7d:28:50:1b:5d:76:f7:ef:9a:78:35:8f:7a:d4:43:84:40: 41:e8:81:f5:5c:15:5b:dc:89:06:39:56:05:7d:01:95:31:7b: e6:1e:7a:4d:40:3b:51:5a:77:75:85:c1:c6:4d:d4:62:61:e9: 5d:ee:e7:14:b8:c7:7c:ec:fa:23:ef:52:22:d8:8e:72:98:c6: df:76:1c:46:4f:07:43:25:2a:70:48:64:f0:f3:5c:87:a4:e0: dd:0f:86:12:91:6c:e5:40:86:75:53:72:e1:55:da:ec:2b:8b: c9:df:2e:c2:03:9b:fe:67:3a:45:c6:c0:ae:64:49:13:5a:a6: 3f:6c:31:00:d6:24:f8:f0:03:d8:ea:fa:8e:2b:2e:c6:a0:3f: f6:b3:e0:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYX/R+4BdqRFoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NDM4MGUxYjgtZjJhNy00NmU4LWJiYjMtOWM4ZTE3NDRiMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b6nPmTBFQIi30shEq5l0Ytclo2StuXvyPtZ xYobnWXrmU8SZ0nJkrRTHUji1Wp8BWWwjbfPgIRnQa6ZvtSFa3U/ErD4kcDVdEsG IVa8PL6wgKplqi5qhmtbo6ekZVkAjIU9e4KsSsJ/OoqkifEtc336T1oVswJlMUkH HNoJ8Z1qMV4q7pIXIRYLotWDwnKjpLRWBz4HKHHMOIw8Hh6lakXSgiIZscAekZoy GnJtEnkPakeq7S8NPh0RhVEWdbLTOBLE0DFn6haSPJnwJeav4D5w039boSWM0tpB +V82wcrNv4wfCuLfqPllwtK2xCjeaSDMOmqhtPgZFbVnc53JHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNpCDQ6Sojl9D3W3wo5dfFSMhgsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI1NzBkYTMtZDFhNy0z YWM3LTkzYTYtYTZhNzFjMWYzMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMla9H3Y/Qb+iiVaSxHvNe8NQZSnnZ7UYB621r 1QqVv5EEHcLOI7t6WDPGfMJbFBsHjT43Uziot0T+1+CJgRRUR9hnYaq9wIl7Q2st 4+Gu7P+w3WctuzUgn6ABmkHlw+HkAXraAhwNPhvRmQ5RfShQG1129++aeDWPetRD hEBB6IH1XBVb3IkGOVYFfQGVMXvmHnpNQDtRWnd1hcHGTdRiYeld7ucUuMd87Poj 71Ii2I5ymMbfdhxGTwdDJSpwSGTw81yHpODdD4YSkWzlQIZ1U3LhVdrsK4vJ3y7C A5v+ZzpFxsCuZEkTWqY/bDEA1iT48APY6vqOKy7GoD/2s+C1 -----END CERTIFICATE-----Generated at Mon Apr 28 14:29:12 2025 by rpki-client