$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa File: 4936db3e-8198-3e95-8fbd-99f554fcd42f.roa (raw, json) Hash identifier: YKpVXSLq8mnexyYdMZNoZdeMzu25cGyF3DW8SDhO4W4= Subject key identifier: 9C:8C:79:F4:C4:B4:48:B0:63:63:5B:3A:59:FA:54:F1:28:C8:55:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183CDE458B6F9B6195AD7C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396577 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:cd:e4:58:b6:f9:b6:19:5a:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9a248f7d-b5bc-4fa7-98a8-a005380674dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:d8:23:52:55:3e:3f:a1:70:40:86:6a:a6: 9e:90:46:df:bd:0a:d6:23:c0:fd:88:9a:a0:b2:d7: 59:b4:54:66:ef:8b:b8:3a:62:8a:5b:a3:ee:bf:ce: c5:b4:ca:33:e4:e3:98:b8:b7:0a:aa:5b:d3:c2:12: 3e:22:47:f4:ec:ec:21:27:24:ed:77:3d:64:89:44: 33:a2:d8:df:4d:92:96:c6:14:52:5c:54:e8:b5:d1: 11:01:f1:bb:2b:8d:40:68:fa:a5:9d:6f:d2:3c:fe: d7:2e:43:f7:e9:5f:67:58:10:94:b3:4c:49:2e:4d: 38:06:94:2b:f3:2d:38:cc:54:08:d0:bd:4d:3d:b4: 0a:d7:12:2b:e7:c9:0e:d6:9d:39:f1:cf:1e:19:d6: 4f:fe:fd:fd:6c:2a:41:57:41:3b:e0:22:72:25:8d: 7a:ae:f7:b9:d0:65:fd:70:4f:30:97:42:7f:15:0d: e0:40:bf:f2:ee:98:64:de:27:12:b8:b9:d7:6d:76: 21:cd:e8:86:61:79:e1:48:3b:3d:00:e9:96:a0:28: ad:76:80:a1:62:77:ef:b1:f5:ea:0f:94:ed:2a:0a: 30:54:e2:07:1d:fe:f7:6f:17:fc:8a:e7:b8:68:1b: d6:11:62:61:68:6a:03:5f:0f:de:a3:35:0b:94:9d: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:79:F4:C4:B4:48:B0:63:63:5B:3A:59:FA:54:F1:28:C8:55:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:e4:c9:2b:27:64:5b:50:c3:f4:10:bf:b3:dc:b1:cb:b1:96: bb:77:46:40:6f:99:04:7e:6a:a8:9a:34:0d:b2:bb:9f:22:8a: 39:06:58:30:52:a1:46:83:be:2a:28:b8:da:94:da:47:45:69: d2:9a:d3:1c:1d:99:eb:ff:69:ca:d9:18:76:34:6c:94:21:46: 51:36:df:b2:6a:f1:bb:64:4e:a6:9a:c5:2e:b1:ed:40:6c:4d: e5:80:99:4f:ae:8a:60:de:f0:00:01:8c:10:7f:61:06:f0:44: ec:8b:19:5c:8a:15:95:e8:7d:78:de:d1:c0:c8:3a:18:ab:30: ee:69:80:79:73:4c:44:7a:dd:4f:47:c8:c9:c1:0e:97:98:72: d4:e2:4b:41:1a:47:df:42:c4:a5:d7:ec:24:e4:55:72:90:0b: 84:e3:af:a7:da:ac:2a:8b:ea:38:b3:48:34:c7:44:b5:01:2d: 72:c4:43:c9:5e:d8:62:44:bc:92:12:67:88:89:24:13:aa:1d: f6:c9:15:81:6a:81:81:3d:26:26:4a:2d:0d:ea:72:81:89:f8: f1:4e:8f:f9:90:90:0a:e2:8f:15:d8:85:4d:e0:28:a6:72:4d: 90:0d:df:ea:d6:3a:e3:67:8a:a1:1f:72:1c:4e:0f:a2:af:41: 36:a0:d9:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg83kWLb5thla18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OWEyNDhmN2QtYjViYy00ZmE3LTk4YTgtYTAwNTM4MDY3NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs83YI1JVPj+hcECGaqaekEbfvQrWI8D9iJqg stdZtFRm74u4OmKKW6Puv87FtMoz5OOYuLcKqlvTwhI+Ikf07OwhJyTtdz1kiUQz otjfTZKWxhRSXFTotdERAfG7K41AaPqlnW/SPP7XLkP36V9nWBCUs0xJLk04BpQr 8y04zFQI0L1NPbQK1xIr58kO1p058c8eGdZP/v39bCpBV0E74CJyJY16rve50GX9 cE8wl0J/FQ3gQL/y7phk3icSuLnXbXYhzeiGYXnhSDs9AOmWoCitdoChYnfvsfXq D5TtKgowVOIHHf73bxf8iue4aBvWEWJhaGoDXw/eozULlJ3e3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJyMefTEtEiwY2NbOln6VPEoyFX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDkzNmRiM2UtODE5OC0z ZTk1LThmYmQtOTlmNTU0ZmNkNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC/5MkrJ2RbUMP0EL+z3LHLsZa7d0ZAb5kEfmqo mjQNsrufIoo5BlgwUqFGg74qKLjalNpHRWnSmtMcHZnr/2nK2Rh2NGyUIUZRNt+y avG7ZE6mmsUuse1AbE3lgJlPropg3vAAAYwQf2EG8ETsixlcihWV6H143tHAyDoY qzDuaYB5c0xEet1PR8jJwQ6XmHLU4ktBGkffQsSl1+wk5FVykAuE46+n2qwqi+o4 s0g0x0S1AS1yxEPJXthiRLySEmeIiSQTqh32yRWBaoGBPSYmSi0N6nKBifjxTo/5 kJAK4o8V2IVN4Cimck2QDd/q1jrjZ4qhH3IcTg+ir0E2oNkD -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:57 2025 by rpki-client