$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e73bdc-2456-3747-a3b0-17fbfaf2df18.roa File: 58e73bdc-2456-3747-a3b0-17fbfaf2df18.roa (raw, json) Hash identifier: Up1LrmRMNL11KwUfp7qkLJmbKYNKnyMtU5MZHbrwZSM= Subject key identifier: 6E:29:26:9E:B6:72:7D:66:11:23:F2:B9:D3:08:DA:DA:69:E1:19:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403982EFECA5138CF600B8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e73bdc-2456-3747-a3b0-17fbfaf2df18.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 397194 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:82:ef:ec:a5:13:8c:f6:00:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=1f02d5ce-9a9d-4415-8d03-6b00cf0b0f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:cb:78:82:a1:ee:7d:3a:55:91:fd:9e:67: 45:33:c6:20:5b:a8:2d:fb:3f:97:85:4d:de:34:18: 08:a5:de:e3:a3:6e:f0:9d:69:4f:78:af:fd:34:86: a8:a0:2c:54:af:16:b1:60:27:3c:b4:c1:8c:16:7a: 65:42:c0:7f:3c:94:f0:2f:f1:a8:f9:08:e8:7f:7a: 8d:c7:d2:dc:57:7b:c5:af:cb:f0:64:19:95:b4:a7: 47:14:bb:d2:dc:f2:1d:61:b5:33:ef:13:08:15:c8: 96:44:eb:22:c2:66:20:cf:6b:07:72:2d:2a:27:86: 0c:7b:b3:f8:8d:a7:49:4b:35:45:b5:f7:ce:03:a6: 3e:19:0b:52:98:1b:ef:b7:30:f4:c3:9b:91:7d:a7: cf:29:05:24:f9:5d:79:d7:52:84:30:5e:97:dc:50: 9e:f4:c7:94:55:e1:3b:6c:8a:3f:a6:f8:49:31:bb: be:2f:72:d7:00:7b:86:f3:88:b5:6f:b9:43:59:98: 56:43:9d:3d:04:8d:14:93:5f:30:d5:fd:b6:a7:20: 59:24:cd:b0:86:f8:ba:ac:ba:f7:a1:0f:01:3f:74: d1:44:37:a9:86:ef:6d:15:79:3c:22:74:f9:86:45: 2e:c2:62:1c:49:4f:d3:d0:fa:bc:91:89:34:07:68: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:26:9E:B6:72:7D:66:11:23:F2:B9:D3:08:DA:DA:69:E1:19:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e73bdc-2456-3747-a3b0-17fbfaf2df18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:25:e6:c0:84:cd:a5:b0:0d:0a:2c:04:85:3e:ba:52:15:43: 39:ca:bd:bc:87:20:3c:fd:69:50:83:43:60:ac:73:28:cd:99: 49:30:25:31:f7:09:6b:d0:d2:dd:73:59:36:61:82:1c:8e:8c: 96:45:93:e8:42:05:41:5d:9f:d7:52:92:4c:c0:d5:0c:a6:8a: 40:9e:08:cf:3b:9d:c6:66:56:2f:dd:25:ca:e4:4f:0e:7d:ff: 85:e1:bb:40:97:77:fd:73:fc:83:4b:76:13:99:00:78:c2:60: b3:cf:69:a6:29:a1:ee:49:08:1f:5b:8c:d3:3c:19:5f:8a:be: fc:e0:80:49:02:7d:15:b0:18:28:7e:a4:b8:a3:c4:aa:9d:e6: 0f:e0:b6:61:a4:a4:b3:6a:ee:f6:4e:08:c4:e9:2c:d2:50:13: 5b:53:1f:29:1e:f3:c2:9a:0a:a4:b3:57:d9:14:af:a5:cd:e4: 80:70:be:79:c9:d0:59:f0:99:d3:ee:fa:eb:59:06:6e:e4:e7: be:81:a2:29:a8:4c:a6:74:f5:07:60:8b:a4:a4:8f:81:1b:d6: 35:51:26:a8:ab:fb:bf:79:4b:52:55:ae:2f:8e:86:2c:8a:be: b4:d4:56:d4:31:21:d4:6a:d7:c9:70:f7:a1:34:33:28:3b:eb: 3d:3d:f8:df -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYLv7KUTjPYAuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MWYwMmQ1Y2UtOWE5ZC00NDE1LThkMDMtNmIwMGNmMGIwZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcfLeIKh7n06VZH9nmdFM8YgW6gt+z+XhU3e NBgIpd7jo27wnWlPeK/9NIaooCxUrxaxYCc8tMGMFnplQsB/PJTwL/Go+Qjof3qN x9LcV3vFr8vwZBmVtKdHFLvS3PIdYbUz7xMIFciWROsiwmYgz2sHci0qJ4YMe7P4 jadJSzVFtffOA6Y+GQtSmBvvtzD0w5uRfafPKQUk+V1511KEMF6X3FCe9MeUVeE7 bIo/pvhJMbu+L3LXAHuG84i1b7lDWZhWQ509BI0Uk18w1f22pyBZJM2whvi6rLr3 oQ8BP3TRRDephu9tFXk8InT5hkUuwmIcSU/T0Pq8kYk0B2i9CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG4pJp62cn1mESPyudMI2tpp4RkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThlNzNiZGMtMjQ1Ni0z NzQ3LWEzYjAtMTdmYmZhZjJkZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCYJebAhM2lsA0KLASFPrpSFUM5yr28hyA8/WlQ g0NgrHMozZlJMCUx9wlr0NLdc1k2YYIcjoyWRZPoQgVBXZ/XUpJMwNUMpopAngjP O53GZlYv3SXK5E8Off+F4btAl3f9c/yDS3YTmQB4wmCzz2mmKaHuSQgfW4zTPBlf ir784IBJAn0VsBgofqS4o8SqneYP4LZhpKSzau72TgjE6SzSUBNbUx8pHvPCmgqk s1fZFK+lzeSAcL55ydBZ8JnT7vrrWQZu5Oe+gaIpqEymdPUHYIukpI+BG9Y1USao q/u/eUtSVa4vjoYsir601FbUMSHUatfJcPehNDMoO+s9Pfjf -----END CERTIFICATE-----Generated at Sun Apr 27 03:45:38 2025 by rpki-client