$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d363c1-86cc-31c9-af97-9b59dfa9ba6c.roa File: 12d363c1-86cc-31c9-af97-9b59dfa9ba6c.roa (raw, json) Hash identifier: yRJkj6+SH/UmqVHZnhfbechl3IM+gpElAqm/W7YO/H8= Subject key identifier: 03:B7:CF:1C:74:FB:EE:91:CB:FA:F6:47:A4:25:79:CE:21:55:88:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F585C40E0ED1398B4162C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d363c1-86cc-31c9-af97-9b59dfa9ba6c.roa Signing time: Thu 23 Jan 2025 13:38:21 +0000 ROA not before: Thu 23 Jan 2025 13:38:21 +0000 ROA not after: Wed 23 Apr 2025 12:38:21 +0000 asID: 397207 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:85:c4:0e:0e:d1:39:8b:41:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:21 2025 GMT Not After : Apr 23 12:38:21 2025 GMT Subject: CN=518fd392-be2b-48c0-b849-a878c9ec12f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:2c:ac:b0:93:cf:9c:d1:9b:a9:dd:24:08: 08:89:36:e3:21:9b:e5:ef:e5:c1:a7:a3:c5:aa:84: 33:fb:16:25:75:ce:f2:bd:5e:03:4b:a4:a2:0c:fb: a0:47:74:fe:8c:44:2d:df:c8:d3:7d:2b:f3:1e:9e: 4a:53:00:0e:a2:ea:0a:92:eb:5c:ed:98:fe:b1:a9: 55:02:cd:ce:ac:8c:f7:3f:72:f5:62:68:4f:45:ab: b4:9c:1a:91:99:25:98:ca:c3:72:07:94:76:8e:dd: 90:e7:54:84:fc:bc:22:ac:59:27:55:7e:d9:63:d9: 03:b1:70:2f:07:a2:94:61:15:87:92:7a:97:83:25: e9:cc:41:00:d9:b9:3a:53:a7:23:31:ba:9c:6a:f2: 2e:80:58:f7:a9:7c:e3:07:eb:ac:ce:c1:94:24:09: 7a:61:40:bc:e8:82:b0:46:01:2c:a9:1c:e2:3b:1d: f3:a4:e8:da:7d:1f:9b:39:0c:62:27:da:b6:bb:ed: 5e:92:78:c5:a4:54:01:24:81:b2:04:71:3b:a3:86: 0b:4c:dc:c0:99:00:1c:78:d3:25:33:0a:fe:bd:e6: 48:7c:47:8b:dc:c9:d2:38:c6:c1:87:d5:50:7d:e2: 4d:00:6f:49:e1:ba:ab:de:81:69:bf:30:cf:a3:70: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B7:CF:1C:74:FB:EE:91:CB:FA:F6:47:A4:25:79:CE:21:55:88:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d363c1-86cc-31c9-af97-9b59dfa9ba6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:85:75:e1:05:89:ee:c1:dc:98:2e:78:1a:23:a3:ab:47:c2: 62:8b:30:af:14:f9:2d:e7:48:d9:6c:c5:0b:c4:a3:ab:79:db: 4b:24:e8:54:4e:a5:f0:e0:6b:a6:2f:32:31:ec:50:13:41:e0: 97:ff:47:6d:b4:7d:c2:19:b0:17:b0:88:8b:70:49:ac:95:3f: 18:0a:e7:f1:b3:b6:36:32:e7:e2:d2:f8:7d:8b:2c:a7:d6:d1: 56:25:43:9e:57:45:e6:9e:a6:b6:1a:b6:8d:94:af:ee:b4:13: 78:b7:5c:f2:ef:0e:6d:7e:c5:aa:ff:c6:98:1b:fc:94:f8:29: 66:91:6b:0d:43:d4:24:ae:fe:fd:dd:e3:85:7b:e2:31:05:dd: f2:2e:c1:98:35:b8:65:66:07:2d:80:bf:b4:8f:00:18:0b:bf: 2f:33:ac:3a:8f:7a:ad:16:25:31:73:da:33:1c:15:91:5a:d6: 43:3c:5f:a0:c2:9a:1e:e0:d7:55:c7:7b:d3:01:00:a6:8a:35: eb:c1:56:8c:12:0e:ae:ca:d7:db:89:b2:6f:47:f4:2b:77:61: f6:72:68:3f:f9:9f:e2:31:ed:c4:1e:93:ef:67:1b:50:b9:c9: d9:73:9c:cc:7d:14:6c:6b:a9:ee:81:ff:c4:8a:4d:42:a7:95: 3c:d7:c0:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9YXEDg7ROYtBYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyMVoXDTI1MDQyMzEyMzgyMVowLzEtMCsGA1UEAxMk NTE4ZmQzOTItYmUyYi00OGMwLWI4NDktYTg3OGM5ZWMxMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRUsrLCTz5zRm6ndJAgIiTbjIZvl7+XBp6PF qoQz+xYldc7yvV4DS6SiDPugR3T+jEQt38jTfSvzHp5KUwAOouoKkutc7Zj+salV As3OrIz3P3L1YmhPRau0nBqRmSWYysNyB5R2jt2Q51SE/LwirFknVX7ZY9kDsXAv B6KUYRWHknqXgyXpzEEA2bk6U6cjMbqcavIugFj3qXzjB+uszsGUJAl6YUC86IKw RgEsqRziOx3zpOjafR+bOQxiJ9q2u+1eknjFpFQBJIGyBHE7o4YLTNzAmQAceNMl Mwr+veZIfEeL3MnSOMbBh9VQfeJNAG9J4bqr3oFpvzDPo3BELwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAO3zxx0++6Ry/r2R6Qlec4hVYg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTJkMzYzYzEtODZjYy0z MWM5LWFmOTctOWI1OWRmYTliYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCrhXXhBYnuwdyYLngaI6OrR8JiizCvFPkt50jZ bMULxKOredtLJOhUTqXw4GumLzIx7FATQeCX/0dttH3CGbAXsIiLcEmslT8YCufx s7Y2Mufi0vh9iyyn1tFWJUOeV0Xmnqa2GraNlK/utBN4t1zy7w5tfsWq/8aYG/yU +ClmkWsNQ9Qkrv793eOFe+IxBd3yLsGYNbhlZgctgL+0jwAYC78vM6w6j3qtFiUx c9ozHBWRWtZDPF+gwpoe4NdVx3vTAQCmijXrwVaMEg6uytfbibJvR/Qrd2H2cmg/ +Z/iMe3EHpPvZxtQucnZc5zMfRRsa6nugf/Eik1Cp5U818AE -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:41 2025 by rpki-client