$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa File: f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa (raw, json) Hash identifier: fLxVlmkx5ApUbW+ZxYoq0mdJJMaNZWulv3DbBPqlBLw= Subject key identifier: E6:F7:F9:CD:24:FD:FC:8E:0E:EC:78:A1:1A:35:2E:83:45:B8:D2:0A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D362AFF7D7444D677580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 22547 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d3:62:af:f7:d7:44:4d:67:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=16860c03-a783-4fba-a911-efe8fe33f6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:09:f1:57:63:7e:34:64:6c:1e:01:47:37: 22:c1:37:cf:f5:69:ac:47:5a:bb:92:7c:83:68:88: 57:e4:5d:bd:ef:ea:64:25:be:b6:34:3e:0b:2d:a5: e8:68:ce:1f:4f:d5:ef:fa:c8:fd:e0:72:39:87:86: 9f:01:dd:98:a9:60:2e:7b:65:e6:5b:c5:fd:4b:c9: c7:f5:2b:08:37:e3:98:6d:8e:26:e7:25:8a:11:68: a9:2f:38:1e:a5:44:1f:73:6a:38:c9:c0:19:cd:a0: 2c:51:2c:9a:09:6a:87:db:8f:a8:c0:a8:49:0f:67: 09:77:6c:62:1b:1e:0e:a7:68:c2:0f:91:9f:87:38: ba:6c:65:98:5b:40:fc:2e:86:d8:bb:87:0c:6a:fc: 8f:2c:21:5e:dd:53:59:7d:a8:a1:fd:18:be:22:69: 51:14:77:f3:92:2a:f7:63:b1:08:cb:06:a2:ce:ac: d5:c5:47:fe:ce:18:96:3b:f0:ff:32:09:a3:32:a5: b4:31:c5:35:45:0a:b0:5c:c3:c0:83:d1:3d:71:eb: 05:d0:6a:05:83:ac:5c:48:18:ff:e0:a1:0a:34:84: 37:15:e0:50:4f:b3:d0:ab:d2:8d:65:51:3d:0c:06: 0e:4b:1a:69:43:90:65:c1:d0:12:0f:d7:1c:84:51: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F7:F9:CD:24:FD:FC:8E:0E:EC:78:A1:1A:35:2E:83:45:B8:D2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5ff5c23-4c93-3a36-8262-9a22e1ad0c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:82:74:1e:7b:c3:79:4c:33:c3:80:db:b2:ee:86:22:5a:f2: 38:49:22:39:94:44:ba:92:1e:df:25:3b:d2:ef:9f:37:31:07: bb:e1:8c:37:08:c2:a4:e6:b3:52:16:de:f1:ec:2f:5d:01:fb: b8:70:0e:70:e7:69:16:5d:a3:b5:f7:56:4d:bd:34:2f:9f:e7: 5f:1e:05:33:c6:ee:77:9f:1c:51:f4:f7:b8:a5:9e:b9:33:d4: d0:e1:d1:af:13:66:9f:a1:da:69:c0:8e:80:72:9e:28:de:cd: be:a9:5f:e4:e8:b7:38:31:5f:37:e6:cd:c5:4d:02:a3:cb:f0: ac:d4:94:76:fa:5d:47:32:df:ef:8a:67:45:28:e2:90:84:ca: e5:3c:c0:95:ae:33:17:0b:b1:20:f7:32:6a:39:57:50:51:ac: 31:63:70:3f:7e:ff:b9:99:19:06:43:b4:53:77:31:60:32:70: 31:a8:07:68:96:a7:88:dc:7a:3a:25:ba:7d:d8:b0:19:1d:91: ae:6f:d0:da:72:27:4e:e5:bb:fa:f9:17:5d:4f:a3:9f:d9:09: 80:6c:4b:d0:6d:12:e9:f7:f2:e9:38:3e:6f:0a:c1:9f:65:e7: 2c:8a:99:a1:6a:58:f7:57:85:6d:23:17:00:b8:c5:8f:74:d1: 94:6f:47:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49Nir/fXRE1ndYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk MTY4NjBjMDMtYTc4My00ZmJhLWE5MTEtZWZlOGZlMzNmNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjUJ8VdjfjRkbB4BRzciwTfP9WmsR1q7knyD aIhX5F297+pkJb62ND4LLaXoaM4fT9Xv+sj94HI5h4afAd2YqWAue2XmW8X9S8nH 9SsIN+OYbY4m5yWKEWipLzgepUQfc2o4ycAZzaAsUSyaCWqH24+owKhJD2cJd2xi Gx4Op2jCD5Gfhzi6bGWYW0D8LobYu4cMavyPLCFe3VNZfaih/Ri+ImlRFHfzkir3 Y7EIywaizqzVxUf+zhiWO/D/MgmjMqW0McU1RQqwXMPAg9E9cesF0GoFg6xcSBj/ 4KEKNIQ3FeBQT7PQq9KNZVE9DAYOSxppQ5BlwdASD9cchFFNkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOb3+c0k/fyODux4oRo1LoNFuNIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjVmZjVjMjMtNGM5My0z YTM2LTgyNjItOWEyMmUxYWQwYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCgnQee8N5TDPDgNuy7oYiWvI4SSI5lES6kh7f JTvS7583MQe74Yw3CMKk5rNSFt7x7C9dAfu4cA5w52kWXaO191ZNvTQvn+dfHgUz xu53nxxR9Pe4pZ65M9TQ4dGvE2afodppwI6Acp4o3s2+qV/k6Lc4MV835s3FTQKj y/Cs1JR2+l1HMt/vimdFKOKQhMrlPMCVrjMXC7Eg9zJqOVdQUawxY3A/fv+5mRkG Q7RTdzFgMnAxqAdolqeI3Ho6Jbp92LAZHZGub9DacidO5bv6+RddT6Of2QmAbEvQ bRLp9/LpOD5vCsGfZecsipmhalj3V4VtIxcAuMWPdNGUb0dF -----END CERTIFICATE-----Generated at Sat Apr 26 21:30:16 2025 by rpki-client