$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa File: f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa (raw, json) Hash identifier: G8FrUCNiqHU24HOxnt9gdg4Hu+MkKBcC2axomyHZng4= Subject key identifier: F5:12:7F:C8:D7:41:3B:F3:86:F6:83:51:62:27:7E:EC:60:C8:57:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E9470F0F96CF11ADC3B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396578 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:94:70:f0:f9:6c:f1:1a:dc:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=438613d4-2408-4a39-a2ed-802754daef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:5f:91:b5:63:e8:da:74:32:bf:8c:fa:37: cc:96:5d:61:33:5a:0c:08:b7:ae:21:c1:de:79:9c: b6:5e:16:8b:a3:44:41:81:71:ae:4d:ab:94:c4:64: 71:09:20:65:f7:3d:c6:62:b4:7c:42:a8:99:8f:f1: 5e:80:42:8f:f0:ca:b4:ff:97:a3:b6:9d:5b:c0:73: a3:f9:e4:4c:d8:21:28:86:19:63:35:19:80:de:7f: 34:24:f9:fe:74:47:d0:bc:60:b8:0a:43:37:61:59: fe:c5:6b:29:de:42:75:5e:44:f4:63:12:b5:58:f5: 56:29:52:72:f9:94:96:47:5c:c8:a3:fb:39:46:76: 2e:ac:c6:04:5b:57:fb:da:26:af:3d:14:68:8c:ad: 6b:15:05:29:aa:2f:b0:ed:ca:a9:28:d5:0c:f7:b9: a3:14:73:06:c5:15:b6:e4:7b:2b:8b:02:56:f8:f3: 3d:57:6c:b7:e4:c2:e5:b5:d0:b6:3c:39:5b:a6:4b: 1c:98:bd:dd:eb:e0:f1:f1:40:ef:a9:c6:d1:c8:27: c1:80:c5:42:9d:19:b8:92:d9:00:ca:de:f0:16:36: 74:44:e0:6c:f2:49:5e:9e:63:f5:2d:33:89:37:1f: 7b:f7:49:5c:e3:d4:aa:c9:e0:0f:56:8e:8c:71:b0: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:12:7F:C8:D7:41:3B:F3:86:F6:83:51:62:27:7E:EC:60:C8:57:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:44:d4:d7:e9:18:5e:9d:8d:f6:fb:aa:90:38:40:41:41:6b: 83:c0:81:07:a3:7a:54:08:3e:1e:0c:a7:25:41:63:fb:58:b4: 26:22:ce:b1:d9:fa:af:4f:09:86:ec:d6:3b:6f:83:2f:17:cd: 6f:9a:e0:ec:97:d8:53:8a:41:8d:a0:d3:6b:b3:d0:24:d0:64: f4:7d:08:52:7d:dd:88:fc:3f:ad:84:bb:84:11:88:32:15:d6: 1b:96:82:1c:e1:b7:8d:95:56:b5:bf:55:66:eb:30:3e:a5:3c: 04:4d:0c:08:ca:37:42:f3:d3:18:2e:96:aa:85:50:1f:c4:5a: 02:78:b6:45:45:1a:e3:8c:1d:b2:8f:e1:4c:e8:62:4b:ac:f9: 09:ca:38:f5:17:76:50:21:c3:46:95:c5:8d:b8:53:c3:02:69: 87:bb:63:fa:fa:c0:99:8b:86:cc:c6:65:44:e4:6b:b4:e8:1e: 3d:e3:7e:2b:cb:64:da:a2:65:fb:92:87:5e:9e:0a:97:fa:be: ee:14:21:46:7f:3a:74:94:9b:86:de:b0:b2:a0:ae:3f:40:b8: 6e:56:50:ad:5d:7c:c8:91:fd:7b:be:39:e7:6c:ca:64:d2:d8: 67:64:b4:b4:6a:de:dd:41:fa:58:3a:fc:9f:d4:04:6d:5d:e0: d9:ae:f1:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpRw8Pls8RrcOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NDM4NjEzZDQtMjQwOC00YTM5LWEyZWQtODAyNzU0ZGFlZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjhfkbVj6Np0Mr+M+jfMll1hM1oMCLeuIcHe eZy2XhaLo0RBgXGuTauUxGRxCSBl9z3GYrR8QqiZj/FegEKP8Mq0/5ejtp1bwHOj +eRM2CEohhljNRmA3n80JPn+dEfQvGC4CkM3YVn+xWsp3kJ1XkT0YxK1WPVWKVJy +ZSWR1zIo/s5RnYurMYEW1f72iavPRRojK1rFQUpqi+w7cqpKNUM97mjFHMGxRW2 5HsriwJW+PM9V2y35MLltdC2PDlbpkscmL3d6+Dx8UDvqcbRyCfBgMVCnRm4ktkA yt7wFjZ0ROBs8klenmP1LTOJNx9790lc49SqyeAPVo6McbAtvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPUSf8jXQTvzhvaDUWInfuxgyFfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjhkZWQwZjAtMDI2OS0z NjE0LThmMGEtZjY5YzVlMjJkYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBaRNTX6RhenY32+6qQOEBBQWuDwIEHo3pUCD4e DKclQWP7WLQmIs6x2fqvTwmG7NY7b4MvF81vmuDsl9hTikGNoNNrs9Ak0GT0fQhS fd2I/D+thLuEEYgyFdYbloIc4beNlVa1v1Vm6zA+pTwETQwIyjdC89MYLpaqhVAf xFoCeLZFRRrjjB2yj+FM6GJLrPkJyjj1F3ZQIcNGlcWNuFPDAmmHu2P6+sCZi4bM xmVE5Gu06B49434ry2TaomX7kodengqX+r7uFCFGfzp0lJuG3rCyoK4/QLhuVlCt XXzIkf17vjnnbMpk0thnZLS0at7dQfpYOvyf1ARtXeDZrvHE -----END CERTIFICATE-----Generated at Tue Apr 29 09:43:30 2025 by rpki-client