$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1573a146-0927-3159-8d05-1a2b03376b0b.roa File: 1573a146-0927-3159-8d05-1a2b03376b0b.roa (raw, json) Hash identifier: VVl6bwPTyJ35X9XEChnEc3LqdckzRKTtJ45rVpOh9js= Subject key identifier: E7:71:BA:1D:BE:F6:C7:5F:9D:C0:1C:24:07:3F:7F:45:80:61:2A:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183E19811B07386CCBF3100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1573a146-0927-3159-8d05-1a2b03376b0b.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397200 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:e1:98:11:b0:73:86:cc:bf:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=30dac440-92f6-4e32-a677-ee0c9e9daf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:23:6d:10:b4:b7:b5:84:ec:01:71:29:b1: e7:8f:d8:25:21:6a:01:cc:61:c4:db:d1:f9:e1:c2: e1:d5:db:d5:d5:5d:a0:97:20:e8:a8:f5:dd:50:a9: c5:33:52:40:ef:d1:bd:86:e7:34:65:b1:3c:00:cf: e0:20:ef:8b:23:1b:2d:29:0d:53:ed:08:c6:3d:88: a4:3b:c6:f6:d5:4f:a9:7d:7f:7b:5e:68:f8:49:a6: ec:99:4f:be:00:0b:22:14:d0:28:76:47:4e:67:fc: 83:70:b8:d4:0d:a6:31:68:6a:21:2a:a2:55:09:b4: 06:8a:60:75:d0:72:9e:b8:05:ad:5d:a1:f7:18:3e: b4:81:5a:df:5b:46:34:ca:98:b7:ad:a1:78:72:0f: 73:f1:e2:12:04:0c:63:3e:bb:c5:53:51:e8:f0:3f: 56:32:e2:cf:96:c0:9e:8d:65:16:b3:32:20:35:f5: 00:1d:66:f1:3a:21:80:ed:3f:21:7f:cb:7b:a1:ea: 08:7e:84:81:4b:93:4f:1a:b3:5c:70:02:1a:47:44: d9:9b:5e:0e:9f:84:4d:78:b3:8c:56:7d:c5:9e:25: 2e:62:86:51:d9:1e:00:c0:f8:f1:57:dc:07:55:87: 46:5f:9a:ad:15:c2:cd:72:a4:b8:29:be:38:49:23: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:BA:1D:BE:F6:C7:5F:9D:C0:1C:24:07:3F:7F:45:80:61:2A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1573a146-0927-3159-8d05-1a2b03376b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:69:f1:9a:72:52:29:cc:e9:b8:dc:eb:36:93:3d:8d:6d:4f: 99:8b:3a:cd:18:06:6b:da:1b:b2:ff:7c:89:d2:9e:d8:a9:64: ed:38:56:a3:1b:ba:dc:27:4c:1a:ef:55:cd:a0:ba:86:01:86: df:a6:18:4a:18:ab:62:62:67:27:ba:ea:cb:09:08:51:90:5f: c6:e8:4f:c5:cc:12:1c:35:75:40:a7:04:da:6d:f9:40:f6:1d: 8a:a2:7b:92:c8:c9:9a:c6:03:c7:76:e1:6b:ff:dc:62:b2:02: 79:68:df:2b:c7:bc:10:f8:2f:42:80:84:0a:a8:35:f9:e0:e9: 7d:a4:3a:0a:28:cf:6c:09:78:dc:2c:e6:7b:50:4a:c7:4b:51: 5f:f3:f9:e5:11:9c:d5:99:26:e6:8e:27:86:df:59:4a:b9:12: 3d:21:96:7f:5a:72:04:1f:75:1e:97:1b:52:30:6c:6e:76:14: 9a:7e:6f:5f:d6:5c:da:0f:2d:5e:b8:29:5f:2f:c8:58:80:db: 13:97:05:a0:be:68:a6:c3:b8:40:31:32:ed:aa:13:92:43:e1: a5:2b:e3:0b:f9:20:3b:5c:15:47:4b:d6:3f:c3:22:56:6e:1c: 9f:94:f5:a0:bb:fd:5b:f5:32:ac:16:59:69:fa:50:b4:82:ea: 9f:6a:fe:37 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+GYEbBzhsy/MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MzBkYWM0NDAtOTJmNi00ZTMyLWE2NzctZWUwYzllOWRhZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogUjbRC0t7WE7AFxKbHnj9glIWoBzGHE29H5 4cLh1dvV1V2glyDoqPXdUKnFM1JA79G9huc0ZbE8AM/gIO+LIxstKQ1T7QjGPYik O8b21U+pfX97Xmj4SabsmU++AAsiFNAodkdOZ/yDcLjUDaYxaGohKqJVCbQGimB1 0HKeuAWtXaH3GD60gVrfW0Y0ypi3raF4cg9z8eISBAxjPrvFU1Ho8D9WMuLPlsCe jWUWszIgNfUAHWbxOiGA7T8hf8t7oeoIfoSBS5NPGrNccAIaR0TZm14On4RNeLOM Vn3FniUuYoZR2R4AwPjxV9wHVYdGX5qtFcLNcqS4Kb44SSPfCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOdxuh2+9sdfncAcJAc/f0WAYSrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTU3M2ExNDYtMDkyNy0z MTU5LThkMDUtMWEyYjAzMzc2YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRafGaclIpzOm43Os2kz2NbU+ZizrNGAZr2huy /3yJ0p7YqWTtOFajG7rcJ0wa71XNoLqGAYbfphhKGKtiYmcnuurLCQhRkF/G6E/F zBIcNXVApwTabflA9h2KonuSyMmaxgPHduFr/9xisgJ5aN8rx7wQ+C9CgIQKqDX5 4Ol9pDoKKM9sCXjcLOZ7UErHS1Ff8/nlEZzVmSbmjieG31lKuRI9IZZ/WnIEH3Ue lxtSMGxudhSafm9f1lzaDy1euClfL8hYgNsTlwWgvmimw7hAMTLtqhOSQ+GlK+ML +SA7XBVHS9Y/wyJWbhyflPWgu/1b9TKsFllp+lC0guqfav43 -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:19 2025 by rpki-client