$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa File: b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa (raw, json) Hash identifier: imaRGJ3fzuj27dr5djgTg9aTpdp45LACf1JNfV6cW9c= Subject key identifier: 38:DA:C3:90:CA:DE:DC:0D:23:B5:1C:ED:6A:8F:0F:78:EA:90:30:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848F22A82C54E1B7D84F107ED00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa Signing time: Thu 20 Feb 2025 13:58:10 +0000 ROA not before: Thu 20 Feb 2025 13:58:10 +0000 ROA not after: Wed 21 May 2025 12:58:10 +0000 asID: 0 IP address blocks: 2001:500:138::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2a:82:c5:4e:1b:7d:84:f1:07:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 20 13:58:10 2025 GMT Not After : May 21 12:58:10 2025 GMT Subject: CN=9d43dcff-ed25-4653-847c-3e3e455043f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:a2:32:81:c9:6e:36:bb:2f:53:82:b4:72: 7c:52:26:27:61:cf:58:18:a9:4a:75:5c:1c:85:41: c1:6a:6e:3c:7d:68:85:8e:e5:59:f7:8f:e3:30:38: 22:d7:0a:7e:d3:f8:d2:36:cb:86:4a:7e:40:64:a7: cf:2f:df:5c:51:a3:f8:ec:b4:4a:2f:14:8a:02:4e: e6:de:91:39:ca:0c:60:db:70:e6:ea:36:7c:5d:2f: 10:27:5e:0e:a7:d6:8f:41:95:88:69:25:28:ac:9d: 93:73:cc:14:ce:84:e6:c3:53:34:3e:8e:70:a5:18: 25:d2:22:2a:b1:62:c6:f5:8a:65:f0:77:4e:76:02: e0:d6:6d:5a:89:22:a5:49:bb:0f:e9:fe:9e:d8:c7: 27:42:2a:c7:3e:44:5f:83:bf:2f:71:a4:22:1a:fa: dc:8c:bc:64:99:2c:70:dc:37:4d:c7:da:cb:6f:e4: 76:00:0b:ff:27:46:f9:21:9b:09:8c:fe:76:0c:d4: 5e:bf:48:51:5d:36:f7:57:3a:05:67:eb:13:03:1f: 21:13:d5:f9:a0:d5:84:cb:13:26:e1:ab:a5:18:50: 95:ef:85:e9:e2:88:da:3b:f0:7f:fb:c3:47:b2:95: d9:84:96:77:57:fb:87:a6:97:f2:ab:47:f1:82:38: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DA:C3:90:CA:DE:DC:0D:23:B5:1C:ED:6A:8F:0F:78:EA:90:30:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:138::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:39:9f:a6:7c:f9:7a:5f:3c:6f:f6:48:b2:1f:8a:76:a9:87: cf:20:ec:f7:74:b2:0b:06:ca:49:3c:dc:60:93:fb:af:ca:ab: 2b:17:25:fc:90:aa:48:6d:cd:9a:25:a2:39:ae:4f:49:11:2f: d0:2c:1b:21:55:e0:4c:7f:02:c4:c8:26:39:67:36:15:69:ac: c4:b1:e3:58:9f:03:b0:d9:f6:99:10:d7:cc:2b:d5:39:ad:df: 2a:bb:9b:b4:de:68:ed:83:c4:3c:40:96:df:45:b4:af:c2:55: 08:31:3f:11:fb:89:cf:2f:98:fd:0b:00:2a:b6:fa:d7:91:51: 91:5d:1e:1d:77:1a:43:c6:bb:9b:72:d5:37:9f:c9:63:33:57: 59:fd:f0:08:b1:17:64:28:19:6b:8a:d3:c3:ee:73:a5:32:b6: 71:46:df:db:15:53:db:29:59:86:f8:1d:f5:97:f6:7b:58:f4: 29:98:ef:95:73:0c:10:da:2f:30:ae:3b:cf:32:d9:bd:1d:04: 34:08:73:a7:2c:2f:41:9e:c8:a4:42:d0:a1:32:66:1e:20:d4: 86:24:95:31:0e:e4:9a:f4:a9:9b:6f:2e:87:e1:94:5e:69:f4: 6d:53:34:56:9e:01:d7:2a:7d:ca:18:cf:27:ee:79:e2:ec:d1: c1:d7:f7:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyKoLFTht9hPEH7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIyMDEzNTgxMFoXDTI1MDUyMTEyNTgxMFowLzEtMCsGA1UEAxMk OWQ0M2RjZmYtZWQyNS00NjUzLTg0N2MtM2UzZTQ1NTA0M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsiiMoHJbja7L1OCtHJ8UiYnYc9YGKlKdVwc hUHBam48fWiFjuVZ94/jMDgi1wp+0/jSNsuGSn5AZKfPL99cUaP47LRKLxSKAk7m 3pE5ygxg23Dm6jZ8XS8QJ14Op9aPQZWIaSUorJ2Tc8wUzoTmw1M0Po5wpRgl0iIq sWLG9Ypl8HdOdgLg1m1aiSKlSbsP6f6e2McnQirHPkRfg78vcaQiGvrcjLxkmSxw 3DdNx9rLb+R2AAv/J0b5IZsJjP52DNRev0hRXTb3VzoFZ+sTAx8hE9X5oNWEyxMm 4aulGFCV74Xp4ojaO/B/+8NHspXZhJZ3V/uHppfyq0fxgjj1aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjaw5DK3twNI7Uc7WqPD3jqkDBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIwZmZhN2MtZTI0NC0z Yzk4LWExZWMtZGY5MGVjOGMyM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDIAEFAAE4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALs5n6Z8+XpfPG/2SLIfinaph88g7Pd0sgsGykk83GCT+6/KqysX JfyQqkhtzZolojmuT0kRL9AsGyFV4Ex/AsTIJjlnNhVprMSx41ifA7DZ9pkQ18wr 1Tmt3yq7m7TeaO2DxDxAlt9FtK/CVQgxPxH7ic8vmP0LACq2+teRUZFdHh13GkPG u5ty1TefyWMzV1n98AixF2QoGWuK08Puc6UytnFG39sVU9spWYb4HfWX9ntY9CmY 75VzDBDaLzCuO88y2b0dBDQIc6csL0GeyKRC0KEyZh4g1IYklTEO5Jr0qZtvLofh lF5p9G1TNFaeAdcqfcoYzyfueeLs0cHX938= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:02 2025 by rpki-client