$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b221b2e9-a6bd-3184-b9be-e1e3540a8430.roa File: b221b2e9-a6bd-3184-b9be-e1e3540a8430.roa (raw, json) Hash identifier: zyorTS8l70oAhVLsOU/rIRcjUbGpizpSA8CT05fehP8= Subject key identifier: 4D:85:87:EF:28:16:E3:BC:77:12:02:20:B2:86:9B:B2:B3:1E:CC:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183CD16E468A66F0DC73C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b221b2e9-a6bd-3184-b9be-e1e3540a8430.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396576 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:cd:16:e4:68:a6:6f:0d:c7:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=fce9ba6e-45b5-46c0-b9d1-41e93c084e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:e1:32:8b:14:86:27:70:66:02:1f:c8:80: 14:99:86:f7:4b:ea:53:12:f3:3b:31:ee:c1:b7:c1: 6a:ca:4b:99:4d:d3:69:ed:da:15:ef:90:e6:3a:8d: 1e:9f:47:e6:74:73:26:13:84:95:ac:6f:0e:68:ac: 4a:c6:8e:89:e7:0e:4f:ab:7f:eb:07:40:f3:1f:f8: 10:96:19:a3:90:86:63:7c:17:92:57:87:88:00:71: 66:1e:9f:48:82:1e:43:a4:f2:66:31:6b:82:f3:4d: 57:99:62:09:98:ec:bd:af:25:74:ec:ce:81:e6:1d: f0:22:44:b7:48:79:47:bb:1c:22:f3:07:43:c0:c7: 30:d6:88:be:83:3c:c2:62:eb:91:65:22:26:ce:4a: 79:5d:36:8e:2c:b4:d6:93:10:be:04:10:dc:a3:24: ff:c9:cd:74:6d:09:a3:67:55:43:08:35:fd:a9:a4: f5:b6:49:92:58:bd:a4:1f:8f:93:5e:1c:5c:60:36: 77:97:7f:ed:a0:24:b2:47:81:30:e3:33:0b:71:a2: b6:f3:cc:85:fa:0a:87:00:43:85:5b:ed:9f:5a:49: 84:e0:f9:8a:d5:33:81:90:c5:71:b2:2c:f2:69:04: 8f:26:51:52:5b:ff:04:1c:84:da:52:38:86:48:e3: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:85:87:EF:28:16:E3:BC:77:12:02:20:B2:86:9B:B2:B3:1E:CC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b221b2e9-a6bd-3184-b9be-e1e3540a8430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:08:a4:4e:04:92:bd:5a:5a:16:0e:82:c7:0d:e6:b5:06:94: 5e:95:00:2b:40:4b:28:c1:b2:e3:48:d1:1a:0c:aa:6f:81:4f: 8b:04:08:ae:3c:d2:62:2b:d7:e6:84:8c:ef:82:85:aa:55:cd: a5:5b:31:18:f3:98:36:d0:e8:35:09:90:1c:9e:d2:7a:b3:b7: 09:3b:85:2c:e6:b8:53:d5:a0:10:f7:01:7e:0b:46:cf:a5:09: 09:63:53:54:41:9b:a1:4a:96:a6:08:c6:72:df:fb:59:7c:17: 19:20:0f:52:21:34:cb:94:f4:b4:12:88:bd:2b:16:ac:d8:80: c7:74:5f:e3:fc:69:d0:09:55:fd:2f:1e:d4:bf:b0:84:18:09: 24:85:cd:56:49:13:2f:cf:30:1f:96:00:aa:43:03:47:50:19: e3:98:0c:d8:ba:d4:db:1f:c8:ac:07:c0:dd:f9:a1:97:b5:a5: 48:ce:1e:5a:39:89:03:7b:dd:f4:d3:c9:e0:b5:e6:bc:8c:ee: ba:4a:46:43:e8:e6:35:b4:12:5d:2a:b5:15:65:36:fd:04:65: 81:38:62:33:11:cf:f9:bd:ef:e1:7d:57:56:1f:c0:40:02:0b: 2f:62:8e:84:96:3f:aa:34:e3:78:1f:1e:0c:4d:6b:ae:79:df: 5d:8d:c2:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg80W5Gimbw3HPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZmNlOWJhNmUtNDViNS00NmMwLWI5ZDEtNDFlOTNjMDg0ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobhMosUhidwZgIfyIAUmYb3S+pTEvM7Me7B t8FqykuZTdNp7doV75DmOo0en0fmdHMmE4SVrG8OaKxKxo6J5w5Pq3/rB0DzH/gQ lhmjkIZjfBeSV4eIAHFmHp9Igh5DpPJmMWuC801XmWIJmOy9ryV07M6B5h3wIkS3 SHlHuxwi8wdDwMcw1oi+gzzCYuuRZSImzkp5XTaOLLTWkxC+BBDcoyT/yc10bQmj Z1VDCDX9qaT1tkmSWL2kH4+TXhxcYDZ3l3/toCSyR4Ew4zMLcaK288yF+gqHAEOF W+2fWkmE4PmK1TOBkMVxsizyaQSPJlFSW/8EHITaUjiGSOMAjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE2Fh+8oFuO8dxICILKGm7KzHszIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIyMWIyZTktYTZiZC0z MTg0LWI5YmUtZTFlMzU0MGE4NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAECKROBJK9WloWDoLHDea1BpRelQArQEsowbLj SNEaDKpvgU+LBAiuPNJiK9fmhIzvgoWqVc2lWzEY85g20Og1CZAcntJ6s7cJO4Us 5rhT1aAQ9wF+C0bPpQkJY1NUQZuhSpamCMZy3/tZfBcZIA9SITTLlPS0Eoi9Kxas 2IDHdF/j/GnQCVX9Lx7Uv7CEGAkkhc1WSRMvzzAflgCqQwNHUBnjmAzYutTbH8is B8Dd+aGXtaVIzh5aOYkDe93008ngtea8jO66SkZD6OY1tBJdKrUVZTb9BGWBOGIz Ec/5ve/hfVdWH8BAAgsvYo6Elj+qNON4Hx4MTWuued9djcJl -----END CERTIFICATE-----Generated at Sat Apr 26 22:23:46 2025 by rpki-client