$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa File: b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa (raw, json) Hash identifier: 0ZfAgFV0+nYprkXkzaJqsOZxB4kdDq1Er75+t/GzkGM= Subject key identifier: 1C:AE:C4:84:46:3C:EE:78:4F:CD:28:0C:89:AE:5E:7C:A6:4F:32:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E9028C7971F77FC3B5640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396555 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:90:28:c7:97:1f:77:fc:3b:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=1fd2b898-fabe-464e-9dac-dbf5798af70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:4b:bc:14:ef:11:6c:49:ba:7a:91:c0:ea: 5d:14:16:16:30:4b:0f:86:fe:1c:2a:ac:ce:5a:55: 78:71:86:92:62:22:dc:f6:56:9f:f2:12:08:a5:09: be:77:09:45:4c:2f:2a:0a:18:24:3b:6e:67:26:df: 6c:35:c0:78:6a:dc:f1:8d:ab:33:1f:d0:96:09:a3: 47:b4:92:d6:41:b6:ca:e6:89:c5:e1:b0:9b:75:52: 1f:0a:2a:3a:b5:99:43:8b:4b:75:93:7c:95:fb:b6: 90:6a:1c:2b:bc:77:31:ca:52:ac:2f:dc:fc:13:2c: c9:2d:6b:81:23:9a:32:87:91:bc:71:f9:3f:21:b2: fb:ce:94:ac:b2:2b:fe:28:9f:03:f6:38:45:c5:64: 7c:4f:93:2e:1f:37:9b:7e:2e:f0:fe:f0:46:b2:49: f8:f0:e6:a1:08:ad:b7:52:07:b1:9e:f0:b8:16:9d: 91:ab:29:6f:5d:3d:ea:98:ac:9e:33:c2:85:c4:58: b2:f8:b7:29:e5:c7:0d:fd:99:2d:83:88:76:b8:6f: 6a:ae:ad:8b:4c:9d:a4:84:97:fc:74:16:e5:12:b9: 4c:64:f0:c2:31:79:70:98:e6:43:25:6e:fb:8b:39: 24:c8:93:72:da:db:02:55:5f:ae:30:23:71:86:81: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:C4:84:46:3C:EE:78:4F:CD:28:0C:89:AE:5E:7C:A6:4F:32:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:5c:a1:f9:e7:91:70:b3:9b:5d:b1:3b:bf:17:2d:8f:eb:85: fe:d8:9e:d0:e8:7e:c9:27:92:e9:a5:5d:5c:0c:9c:d0:25:a4: 37:3d:5e:28:ed:6a:02:fb:94:70:2c:de:33:e7:7e:59:f8:65: 94:3c:14:ad:f6:6e:56:af:fb:c5:f8:47:5b:8c:da:c1:1e:95: 2d:bf:48:cf:aa:87:c0:db:8b:de:ff:f6:af:a1:ca:dc:74:9f: b9:1a:76:8a:64:5c:e9:fb:48:f2:ce:15:bf:7e:ba:44:2f:e1: ae:48:2f:5f:c4:a8:05:90:f6:4b:d5:64:24:b8:3e:dd:53:36: 9e:81:1d:48:6f:99:40:5b:34:12:a0:c5:4f:e2:ad:4f:63:fa: bb:31:c5:58:b2:f1:9e:79:68:58:e8:1c:b4:b0:8a:74:6c:7b: e2:0e:b6:51:a7:65:d9:23:55:e7:74:96:d1:6e:1a:53:f0:f7: ed:49:3f:ab:d2:31:c9:49:3a:2a:75:c8:aa:57:10:c0:f0:e7: bd:d3:80:0e:61:9b:95:f3:fa:41:0b:db:83:7f:4f:f0:a7:4b: ce:65:d8:66:78:0e:1d:6c:8d:9c:b9:1f:98:19:71:da:68:38: 13:36:75:1d:2a:84:8b:bc:ae:df:68:11:e2:26:f2:c9:5f:1a: 50:4f:69:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpAox5cfd/w7VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MWZkMmI4OTgtZmFiZS00NjRlLTlkYWMtZGJmNTc5OGFmNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6VLvBTvEWxJunqRwOpdFBYWMEsPhv4cKqzO WlV4cYaSYiLc9laf8hIIpQm+dwlFTC8qChgkO25nJt9sNcB4atzxjaszH9CWCaNH tJLWQbbK5onF4bCbdVIfCio6tZlDi0t1k3yV+7aQahwrvHcxylKsL9z8EyzJLWuB I5oyh5G8cfk/IbL7zpSssiv+KJ8D9jhFxWR8T5MuHzebfi7w/vBGskn48OahCK23 UgexnvC4Fp2RqylvXT3qmKyeM8KFxFiy+Lcp5ccN/Zktg4h2uG9qrq2LTJ2khJf8 dBblErlMZPDCMXlwmOZDJW77izkkyJNy2tsCVV+uMCNxhoGWaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFByuxIRGPO54T80oDImuXnymTzLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjJiZWFkMGYtOWFhNi0z YjJkLThjZDktNWU1ZmU0ZDU0NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6XKH555Fws5tdsTu/Fy2P64X+2J7Q6H7JJ5Lp pV1cDJzQJaQ3PV4o7WoC+5RwLN4z535Z+GWUPBSt9m5Wr/vF+EdbjNrBHpUtv0jP qofA24ve//avocrcdJ+5GnaKZFzp+0jyzhW/frpEL+GuSC9fxKgFkPZL1WQkuD7d UzaegR1Ib5lAWzQSoMVP4q1PY/q7McVYsvGeeWhY6By0sIp0bHviDrZRp2XZI1Xn dJbRbhpT8PftST+r0jHJSToqdciqVxDA8Oe904AOYZuV8/pBC9uDf0/wp0vOZdhm eA4dbI2cuR+YGXHaaDgTNnUdKoSLvK7faBHiJvLJXxpQT2nd -----END CERTIFICATE-----Generated at Mon Apr 28 13:12:40 2025 by rpki-client