$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa File: 471c8e28-8998-3a61-9d0a-48fc3062cb19.roa (raw, json) Hash identifier: b44KGnE46HvV/KsZAme/E0D4yBivqcohC4Bgb4yFGes= Subject key identifier: B1:B9:2A:09:72:57:00:A0:83:F9:16:35:67:60:65:A5:18:93:83:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E932EE940FCC5E1A46140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 397197 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:93:2e:e9:40:fc:c5:e1:a4:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=6e8443e5-c9b4-4a8c-a858-617eb07ee6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:42:b3:9e:65:38:b7:ba:6e:03:fd:20:da: 0f:86:e9:52:08:6b:dc:a6:e6:83:90:84:53:26:ed: 5c:f7:f6:5e:28:b8:0e:1e:32:e9:bd:a6:cc:e9:34: 4a:f7:89:7c:48:cf:6e:16:5b:ac:78:b4:ac:21:ed: 12:cf:75:97:da:3b:93:dc:52:ce:45:37:c6:1b:3e: 93:be:e3:11:a5:66:d8:b9:7d:0f:1d:cf:73:d5:7e: b9:d3:23:c5:ba:c9:4d:dc:4a:1d:7f:88:ea:1f:06: 2d:69:2b:f6:b1:f7:97:3a:e4:92:d1:cd:72:2a:7c: a4:cd:0f:d5:73:24:40:81:01:f2:14:a2:ad:f9:12: 54:79:2e:5b:de:10:33:a3:ac:52:78:dd:51:ef:67: d4:ab:2e:6b:be:ed:75:a7:2d:75:dd:c2:9f:b3:77: 38:a8:e2:79:b2:42:45:46:20:2f:9f:99:2e:50:1e: b1:dc:ae:a8:6b:1f:87:67:66:c8:f1:0f:13:74:bb: 25:a0:65:0c:d1:d9:f7:33:81:11:bc:5b:7e:9e:62: 9d:3b:31:7b:5b:a9:fd:49:65:c8:52:fd:50:96:71: f5:b7:3c:cd:f0:a9:0d:c6:06:17:61:f4:5b:f8:64: ff:b7:87:3a:89:48:74:05:60:52:a6:e2:46:dd:72: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B9:2A:09:72:57:00:A0:83:F9:16:35:67:60:65:A5:18:93:83:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f8:9a:45:d5:8c:5b:8b:77:42:6c:2a:14:26:02:6b:f2:c6: a9:46:7c:fd:94:cc:6e:ff:50:78:c8:39:69:32:67:d7:ad:0e: 06:04:c9:9d:92:ca:ef:eb:d7:23:08:72:7b:b2:98:e4:20:83: fc:af:49:4a:8b:57:37:0b:17:c1:d5:e5:14:b4:5c:10:c6:1f: 30:b8:a5:cb:f8:66:84:7c:95:17:02:f0:9f:4a:63:fd:39:06: 5e:a0:9f:36:ee:30:8b:c2:dd:1e:5f:9b:f6:29:58:13:31:ef: 4d:5b:84:53:22:dc:82:e2:86:90:a6:e2:e9:60:02:68:fb:6f: 71:58:19:99:31:ed:ad:a3:12:2b:7d:07:5e:1e:4f:1a:02:cc: d7:36:6c:5c:14:f3:d9:56:1f:b6:e0:5d:fe:a0:b4:fa:23:44: 9a:1c:e2:06:e1:96:ad:68:65:67:c5:a7:73:16:cd:c2:28:9a: 08:d2:dc:f7:b9:5d:66:49:ab:65:65:6e:db:c7:0a:f7:b1:65: f8:ad:33:e1:10:66:a8:5c:bf:48:cd:d0:06:ff:26:07:c3:e6: 06:be:b0:83:12:85:e2:4f:02:31:1c:fc:1b:25:2b:72:55:ee: 94:e9:5d:9d:8a:22:e9:51:89:1b:e1:74:e5:1d:27:54:3f:65: 74:90:28:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpMu6UD8xeGkYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NmU4NDQzZTUtYzliNC00YThjLWE4NTgtNjE3ZWIwN2VlNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVCs55lOLe6bgP9INoPhulSCGvcpuaDkIRT Ju1c9/ZeKLgOHjLpvabM6TRK94l8SM9uFluseLSsIe0Sz3WX2juT3FLORTfGGz6T vuMRpWbYuX0PHc9z1X650yPFuslN3Eodf4jqHwYtaSv2sfeXOuSS0c1yKnykzQ/V cyRAgQHyFKKt+RJUeS5b3hAzo6xSeN1R72fUqy5rvu11py113cKfs3c4qOJ5skJF RiAvn5kuUB6x3K6oax+HZ2bI8Q8TdLsloGUM0dn3M4ERvFt+nmKdOzF7W6n9SWXI Uv1QlnH1tzzN8KkNxgYXYfRb+GT/t4c6iUh0BWBSpuJG3XLCEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLG5KglyVwCgg/kWNWdgZaUYk4OpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDcxYzhlMjgtODk5OC0z YTYxLTlkMGEtNDhmYzMwNjJjYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3+JpF1Yxbi3dCbCoUJgJr8sapRnz9lMxu/1B4 yDlpMmfXrQ4GBMmdksrv69cjCHJ7spjkIIP8r0lKi1c3CxfB1eUUtFwQxh8wuKXL +GaEfJUXAvCfSmP9OQZeoJ827jCLwt0eX5v2KVgTMe9NW4RTItyC4oaQpuLpYAJo +29xWBmZMe2toxIrfQdeHk8aAszXNmxcFPPZVh+24F3+oLT6I0SaHOIG4ZataGVn xadzFs3CKJoI0tz3uV1mSatlZW7bxwr3sWX4rTPhEGaoXL9IzdAG/yYHw+YGvrCD EoXiTwIxHPwbJStyVe6U6V2diiLpUYkb4XTlHSdUP2V0kCgq -----END CERTIFICATE-----Generated at Fri Apr 11 22:51:59 2025 by rpki-client