$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa File: 40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa (raw, json) Hash identifier: ldIT0Ka57weq3w6hqZytK8GNpxpgRB+88gY5bIecgCQ= Subject key identifier: 5F:40:43:4D:6E:7B:4F:9C:86:6F:D5:8C:F1:53:85:1E:BE:50:EF:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496CE47FAA874567C5E7C18080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 397203 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:7f:aa:87:45:67:c5:e7:c1:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=3f7bdf01-af45-4fa6-84db-36bc39868666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:4c:96:f5:b4:03:f2:31:35:e6:2c:6e:57: a4:1c:d8:49:5d:ce:d0:4f:7e:1e:76:e0:a5:59:27: 7c:1a:71:ef:9d:a9:5f:12:2b:23:2f:5f:16:86:05: 49:c9:01:70:4b:87:24:f3:22:5d:2a:f2:e3:f0:70: a2:c7:c3:bc:65:ab:01:c5:b5:9d:10:61:45:74:ee: 2d:90:47:07:a6:4a:27:ea:2f:93:f8:6e:7c:91:cd: 4a:09:63:6a:a5:69:83:f6:67:54:4a:46:3e:03:d8: bd:05:d0:24:7d:48:cc:7f:d2:e3:00:94:db:41:a0: 5a:1e:c4:20:1e:37:32:73:6f:53:d4:8d:79:88:92: 76:96:15:6a:26:0f:ab:55:64:d1:c9:a2:40:fa:d2: 32:95:b3:26:5e:1b:c2:c1:69:56:e9:da:b7:d2:c1: 00:53:88:c1:8a:0e:0f:30:02:06:e3:6c:9a:33:bd: 8b:ba:25:ad:37:02:f5:cb:70:af:d4:21:1d:60:89: a7:5f:7c:87:6a:36:d9:92:4d:c0:e1:32:72:63:42: 3b:d0:73:23:17:e2:b8:a4:a8:98:88:d1:b4:6f:b2: 9c:d5:fb:8e:aa:e2:1f:a1:c9:11:79:7d:e0:e2:e3: 07:45:6f:07:2c:82:8e:1a:d5:82:de:3e:4c:26:61: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:43:4D:6E:7B:4F:9C:86:6F:D5:8C:F1:53:85:1E:BE:50:EF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ee:53:aa:a7:ae:74:4c:6c:f7:90:f5:7a:2e:4f:b7:31:dc: aa:d4:08:7b:b3:2b:ac:e9:4b:e1:ab:7d:a1:b2:cc:9f:a7:54: c9:84:e5:db:a1:c1:8b:96:49:11:b0:1a:a2:ca:85:9a:b3:c8: 52:2a:ad:ee:51:55:33:0b:46:82:c2:34:9f:9a:3f:cc:64:ff: de:9e:90:41:b9:40:86:87:69:cd:94:b3:4b:8b:95:41:6a:d5: df:11:b1:f3:3e:b2:64:04:4e:3d:9d:5f:9d:53:a0:b5:cb:d6: de:33:e1:57:22:f8:68:a3:a8:68:3a:27:4c:4d:dc:e3:09:9c: 61:68:86:ab:63:f5:90:c6:30:ce:3e:b0:e5:ac:7a:fb:fb:eb: 8e:dd:a2:32:62:7f:5e:a9:c4:e7:51:06:1d:59:27:d9:b4:9d: 82:1d:d0:9c:41:59:31:32:00:41:06:6a:f4:af:e3:d8:8b:fc: 16:5a:86:4c:ca:e6:4b:e6:42:96:70:c3:8a:61:87:00:b9:7b: b7:38:7f:12:cd:8a:71:c0:f2:96:e8:8d:3b:8a:e1:a2:92:d6: 42:99:c1:51:c4:f9:93:d7:0e:df:e6:95:35:8a:e3:95:0d:03: 42:36:6c:e0:c2:b7:60:3d:3e:78:68:20:90:3a:db:ef:6f:ae: 4c:8d:6e:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5H+qh0VnxefBgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk M2Y3YmRmMDEtYWY0NS00ZmE2LTg0ZGItMzZiYzM5ODY4NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMlMlvW0A/IxNeYsblekHNhJXc7QT34eduCl WSd8GnHvnalfEisjL18WhgVJyQFwS4ck8yJdKvLj8HCix8O8ZasBxbWdEGFFdO4t kEcHpkon6i+T+G58kc1KCWNqpWmD9mdUSkY+A9i9BdAkfUjMf9LjAJTbQaBaHsQg Hjcyc29T1I15iJJ2lhVqJg+rVWTRyaJA+tIylbMmXhvCwWlW6dq30sEAU4jBig4P MAIG42yaM72LuiWtNwL1y3Cv1CEdYImnX3yHajbZkk3A4TJyY0I70HMjF+K4pKiY iNG0b7Kc1fuOquIfockReX3g4uMHRW8HLIKOGtWC3j5MJmE9xwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF9AQ01ue0+chm/VjPFThR6+UO/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAyNzFlYTUtZDRkZC0z MjAxLWFjZTUtYTNlMmQwYWQyNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCx7lOqp650TGz3kPV6Lk+3Mdyq1Ah7syus6Uvh q32hssyfp1TJhOXbocGLlkkRsBqiyoWas8hSKq3uUVUzC0aCwjSfmj/MZP/enpBB uUCGh2nNlLNLi5VBatXfEbHzPrJkBE49nV+dU6C1y9beM+FXIvhoo6hoOidMTdzj CZxhaIarY/WQxjDOPrDlrHr7++uO3aIyYn9eqcTnUQYdWSfZtJ2CHdCcQVkxMgBB Bmr0r+PYi/wWWoZMyuZL5kKWcMOKYYcAuXu3OH8SzYpxwPKW6I07iuGiktZCmcFR xPmT1w7f5pU1iuOVDQNCNmzgwrdgPT54aCCQOtvvb65MjW66 -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:35 2025 by rpki-client