$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9f4784-e2b9-352b-9875-41c087c92c9a.roa File: 3c9f4784-e2b9-352b-9875-41c087c92c9a.roa (raw, json) Hash identifier: mfzLWSySKkLn/bNoYGXpRC7YFIaMG+4v46UccesIhro= Subject key identifier: 61:D3:BE:DE:DC:06:26:79:CC:28:60:6E:9D:41:81:35:9A:09:E8:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58E194001F7BBBA18DB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9f4784-e2b9-352b-9875-41c087c92c9a.roa Signing time: Thu 23 Jan 2025 13:38:25 +0000 ROA not before: Thu 23 Jan 2025 13:38:25 +0000 ROA not after: Wed 23 Apr 2025 12:38:25 +0000 asID: 396572 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:8e:19:40:01:f7:bb:ba:18:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:25 2025 GMT Not After : Apr 23 12:38:25 2025 GMT Subject: CN=a49739cc-4d14-4dbf-8c32-b6d6ddb78da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:19:c2:d5:64:02:44:c9:58:3a:97:2a:7b: a6:b5:d6:cc:57:e1:9b:f0:5f:bd:35:1d:87:e7:b8: 37:97:19:20:a8:4f:aa:ca:03:a7:6f:c8:a6:81:37: f0:58:d8:08:e2:d4:31:2a:a0:9e:b2:40:2c:07:6b: 81:33:c6:5d:f1:1b:78:70:f3:73:2b:8d:d9:bb:c9: b5:0b:c4:63:fb:a3:78:15:92:08:1e:9c:a8:9a:d8: 03:a5:79:7c:3c:0b:60:07:b4:e9:e8:48:25:ae:ff: 13:ed:33:aa:ae:d4:5b:76:1a:a6:35:e8:ef:94:70: 81:c6:71:af:81:f4:4a:00:24:03:d4:7c:f2:12:1b: 3a:0d:a3:af:97:3e:45:9c:1a:fc:da:3c:23:0d:dc: b9:96:8f:1c:85:30:14:13:43:d0:a2:c1:9e:bd:0c: 12:30:0c:d2:b5:1a:06:f4:69:4b:2b:16:7e:f3:65: 14:7b:a9:db:25:52:f0:6b:76:bf:5b:d7:33:03:2a: 2d:2a:fa:f2:2b:ed:34:a7:92:2e:e3:d0:d9:9c:00: bb:44:0d:67:30:67:7e:73:d4:30:77:df:ae:e9:fe: 94:81:7f:09:6d:e3:23:93:70:2b:b7:02:25:dd:41: f3:51:aa:e9:5d:06:e0:53:f0:2c:be:40:00:11:4e: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:BE:DE:DC:06:26:79:CC:28:60:6E:9D:41:81:35:9A:09:E8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9f4784-e2b9-352b-9875-41c087c92c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e5:62:60:c1:1e:0d:ba:eb:bd:e0:43:3a:c0:ab:ff:f8:17: cd:61:d7:99:c2:a6:66:9e:f4:6b:fa:18:eb:b6:60:60:61:9c: fb:0e:20:78:f1:62:62:eb:44:60:30:e2:b3:d2:31:5d:32:f2: 0a:f5:ca:6f:d4:d2:1d:4f:2c:e1:5b:e0:fd:be:ad:0c:fc:77: 15:0b:24:f7:bf:1f:87:df:45:87:45:08:80:11:e6:73:f6:63: 97:03:43:eb:4d:30:ae:8f:c9:45:c8:4b:e6:c1:28:78:3b:47: e6:ec:25:29:93:91:f5:ce:22:67:d5:37:2c:a1:45:a3:99:6c: c4:f9:b7:ca:06:db:59:a9:ad:0d:f2:4c:6f:9f:e6:3b:85:8f: db:75:6d:6f:eb:c6:76:cb:15:74:9d:87:d9:df:0d:6a:47:7a: 20:d0:66:78:30:b2:2d:7b:a1:9a:da:4b:00:08:06:b0:2c:0b: 60:ee:74:fd:bf:6a:3b:a0:75:12:9d:03:c2:dc:56:a9:0a:b8: 1e:18:14:d3:a8:8f:4c:65:3c:4b:7e:2b:65:9c:48:ed:f8:72: 2d:f1:66:5e:0d:6e:69:30:32:b7:13:c2:6c:3b:f0:9a:17:56: f5:ed:16:cb:47:d1:ee:e5:c7:67:dd:bc:ea:aa:92:2d:3c:dc: 5c:13:e9:b0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9Y4ZQAH3u7oY24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNVoXDTI1MDQyMzEyMzgyNVowLzEtMCsGA1UEAxMk YTQ5NzM5Y2MtNGQxNC00ZGJmLThjMzItYjZkNmRkYjc4ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvwZwtVkAkTJWDqXKnumtdbMV+Gb8F+9NR2H 57g3lxkgqE+qygOnb8imgTfwWNgI4tQxKqCeskAsB2uBM8Zd8Rt4cPNzK43Zu8m1 C8Rj+6N4FZIIHpyomtgDpXl8PAtgB7Tp6Eglrv8T7TOqrtRbdhqmNejvlHCBxnGv gfRKACQD1HzyEhs6DaOvlz5FnBr82jwjDdy5lo8chTAUE0PQosGevQwSMAzStRoG 9GlLKxZ+82UUe6nbJVLwa3a/W9czAyotKvryK+00p5Iu49DZnAC7RA1nMGd+c9Qw d9+u6f6UgX8JbeMjk3ArtwIl3UHzUarpXQbgU/AsvkAAEU7ggQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGHTvt7cBiZ5zChgbp1BgTWaCehQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M5ZjQ3ODQtZTJiOS0z NTJiLTk4NzUtNDFjMDg3YzkyYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB65WJgwR4Nuuu94EM6wKv/+BfNYdeZwqZmnvRr +hjrtmBgYZz7DiB48WJi60RgMOKz0jFdMvIK9cpv1NIdTyzhW+D9vq0M/HcVCyT3 vx+H30WHRQiAEeZz9mOXA0PrTTCuj8lFyEvmwSh4O0fm7CUpk5H1ziJn1TcsoUWj mWzE+bfKBttZqa0N8kxvn+Y7hY/bdW1v68Z2yxV0nYfZ3w1qR3og0GZ4MLIte6Ga 2ksACAawLAtg7nT9v2o7oHUSnQPC3FapCrgeGBTTqI9MZTxLfitlnEjt+HIt8WZe DW5pMDK3E8JsO/CaF1b17RbLR9Hu5cdn3bzqqpItPNxcE+mw -----END CERTIFICATE-----Generated at Sat Apr 12 00:13:08 2025 by rpki-client