$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa File: 3a88b321-e458-3859-b51a-662aa9fe79f6.roa (raw, json) Hash identifier: dYsbRnHGMe18c90b0orJ8funAgeeXdlqb2+iCDExq+0= Subject key identifier: 1E:A9:32:76:8E:0E:B8:E0:9B:FA:D1:93:D2:87:3F:67:A3:73:B9:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496CE48114A4EECB764CC1FD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 396551 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:81:14:a4:ee:cb:76:4c:c1:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=994ff98d-0e51-48ae-9842-de6d9496fc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:b9:b0:ae:5f:3f:23:7c:dc:d0:4c:5a:4d: 08:9b:78:c3:80:c6:24:e6:ee:05:86:d9:59:d8:fb: 47:b7:dc:d3:55:89:8a:d4:a4:11:50:9e:78:41:c9: 7c:4a:b9:13:42:33:6d:29:3d:9f:2a:12:c0:8d:a4: 70:b2:b2:ca:66:ba:c7:a0:d5:db:6a:3e:13:be:87: 32:c3:dd:a2:98:e9:dd:01:66:9d:1f:db:19:28:d7: a8:c7:12:98:d5:a1:06:0d:c4:bf:5b:fe:7d:2f:9f: 53:30:78:c1:47:72:c0:49:66:e9:82:a8:bf:e8:3c: b2:a9:45:0b:6e:bf:a7:13:5b:ae:15:d5:95:58:ca: 1e:30:89:f2:2f:6b:03:fe:e5:96:ea:84:23:7b:e7: 17:72:02:5f:06:a2:05:a1:e6:d6:05:ce:24:07:b4: c1:79:92:2a:a1:19:2c:c8:8c:a3:0d:f3:7a:7b:d9: f1:f0:b3:b6:49:3c:56:35:b9:48:58:e4:7a:81:0d: 91:30:98:d0:40:b7:8e:eb:0d:35:f7:4f:0f:d0:e8: bb:0f:ba:48:e3:fa:15:46:29:13:0f:74:99:86:c9: de:89:a3:b2:13:c2:9f:fe:d3:61:14:53:9e:b1:75: 49:a4:f2:57:be:4a:de:21:14:64:68:77:d7:d0:80: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:32:76:8E:0E:B8:E0:9B:FA:D1:93:D2:87:3F:67:A3:73:B9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5c:77:4d:05:5e:6a:6f:7a:fa:2c:54:ff:62:c6:24:bb:cc: b6:3f:fa:8c:ab:65:3e:58:b1:4f:72:4f:16:c3:68:87:fd:f0: f2:2c:f1:56:8a:07:17:5e:a5:fa:ff:7a:f1:95:1b:8f:70:23: 31:27:f2:ce:de:99:31:94:49:b0:1d:ce:25:6a:40:03:8c:23: d2:d4:b5:5a:a3:1b:bf:dc:b4:56:ca:0c:a9:14:21:1d:92:bb: fc:6d:63:8a:42:b9:53:a7:be:00:3c:16:ed:72:5f:90:0a:eb: f0:e1:86:ad:08:00:1d:8a:a2:97:35:6a:8b:f2:34:00:4a:9d: da:65:eb:19:5d:c6:77:fa:a3:e0:6e:03:3f:e6:84:2a:0c:ad: 1f:4e:46:d0:b0:cd:ce:62:e4:a9:03:12:83:10:69:00:e6:83: be:17:c4:5c:5b:4b:91:70:99:e0:73:2c:6d:8d:6c:5d:54:26: 47:01:e4:c8:95:42:82:80:d9:67:39:64:f4:29:74:a5:d2:43: 20:57:4a:29:4e:fe:1e:0f:35:ba:1c:28:83:b2:b3:2c:62:69: 9b:52:ba:c7:c1:39:38:be:99:50:b4:e6:7f:d6:98:f2:7c:38: 6c:1b:e5:68:cd:6e:1d:bc:eb:bf:67:16:8d:18:4f:cd:06:58: c7:df:ca:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5IEUpO7LdkzB/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk OTk0ZmY5OGQtMGU1MS00OGFlLTk4NDItZGU2ZDk0OTZmYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtO5sK5fPyN83NBMWk0Im3jDgMYk5u4FhtlZ 2PtHt9zTVYmK1KQRUJ54Qcl8SrkTQjNtKT2fKhLAjaRwsrLKZrrHoNXbaj4Tvocy w92imOndAWadH9sZKNeoxxKY1aEGDcS/W/59L59TMHjBR3LASWbpgqi/6DyyqUUL br+nE1uuFdWVWMoeMInyL2sD/uWW6oQje+cXcgJfBqIFoebWBc4kB7TBeZIqoRks yIyjDfN6e9nx8LO2STxWNblIWOR6gQ2RMJjQQLeO6w01908P0Oi7D7pI4/oVRikT D3SZhsneiaOyE8Kf/tNhFFOesXVJpPJXvkreIRRkaHfX0IDZlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB6pMnaODrjgm/rRk9KHP2ejc7myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E4OGIzMjEtZTQ1OC0z ODU5LWI1MWEtNjYyYWE5ZmU3OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgXHdNBV5qb3r6LFT/YsYku8y2P/qMq2U+WLFP ck8Ww2iH/fDyLPFWigcXXqX6/3rxlRuPcCMxJ/LO3pkxlEmwHc4lakADjCPS1LVa oxu/3LRWygypFCEdkrv8bWOKQrlTp74APBbtcl+QCuvw4YatCAAdiqKXNWqL8jQA Sp3aZesZXcZ3+qPgbgM/5oQqDK0fTkbQsM3OYuSpAxKDEGkA5oO+F8RcW0uRcJng cyxtjWxdVCZHAeTIlUKCgNlnOWT0KXSl0kMgV0opTv4eDzW6HCiDsrMsYmmbUrrH wTk4vplQtOZ/1pjyfDhsG+VozW4dvOu/ZxaNGE/NBljH38ro -----END CERTIFICATE-----Generated at Sat Apr 12 01:47:41 2025 by rpki-client