$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa File: 4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa (raw, json) Hash identifier: mty0V3h0DIu4wClp/5duUYMFFjkrMFf2KI07CxbDrfk= Subject key identifier: 49:D4:AF:5C:99:D4:8F:36:24:76:9E:DA:51:C2:0E:46:EB:AC:1A:CF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D5A5A67CE5FD17A2A220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 397197 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d5:a5:a6:7c:e5:fd:17:a2:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=b97e28b7-c878-4b01-a5b1-c1ebb651e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:57:2c:e7:83:a4:f1:da:31:68:f6:22:db: 5b:94:89:8f:aa:cd:a2:b5:96:e2:9a:e2:87:55:73: 9b:ee:88:44:47:3e:b7:ce:72:da:7d:8f:88:00:9f: ee:1e:1d:58:3f:6b:ac:f0:42:e7:14:61:0b:e6:fb: b5:37:19:7b:00:8b:b5:51:87:c2:7b:68:42:e4:a9: 62:d5:a9:03:9d:ce:b1:b8:d3:86:05:b2:d1:fa:c9: 7b:20:f7:af:8f:82:3a:92:87:84:f2:e2:e0:f7:16: 12:ad:89:14:7b:d4:b3:1e:ec:dd:eb:78:7a:b0:6f: dc:50:fe:47:d1:31:8a:32:30:3d:b1:87:4e:26:61: f4:64:76:8c:0e:cd:80:de:96:0c:0f:d1:3b:20:c3: 2d:3c:73:ff:1e:be:ad:bb:57:bd:e6:b7:67:76:ac: 96:8c:db:30:df:0c:47:29:6a:da:82:39:bc:7a:ec: 01:1e:7b:36:b7:af:92:0c:26:5e:48:da:58:35:d9: d4:c0:a6:60:d2:5c:db:01:aa:1b:e9:d2:d8:20:fa: d3:ea:0c:30:74:e1:0f:db:76:3c:0d:5b:eb:a3:96: ec:07:f9:3f:db:f8:86:44:72:dc:37:c9:0f:b1:32: de:85:dc:98:9a:5a:a6:ce:54:88:4c:dd:58:14:06: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:AF:5C:99:D4:8F:36:24:76:9E:DA:51:C2:0E:46:EB:AC:1A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0c:c7:f9:4f:65:65:08:f9:bb:c5:17:31:e1:2c:39:a5:10: 0c:cf:5d:ab:e1:80:2c:29:38:0b:a1:23:0c:fc:63:ce:45:9d: ae:ac:b7:ab:80:95:e3:de:b8:2c:64:9c:8d:f3:cf:c0:16:53: c5:42:72:c9:29:6f:2c:fb:7b:0a:ef:a7:94:a8:2c:dc:bf:1c: 6c:20:de:f3:4b:e5:96:23:c0:17:ca:b7:a2:6f:85:d0:3f:e8: 27:15:0a:4d:9c:72:42:cb:b5:18:70:42:85:ab:d1:15:a6:14: ff:38:79:9c:4c:96:f6:3a:52:45:f4:f4:0d:dd:21:49:e5:da: b0:d4:55:f2:3b:b5:e1:31:44:d1:cf:c2:56:9a:f3:ec:fc:05: 5a:ad:a2:c5:b1:77:99:2a:62:f7:a8:68:fa:09:c1:c3:26:54: 86:71:c6:e0:0c:a1:f6:c2:27:85:bf:ec:ee:0c:00:ed:72:7a: 0e:e9:79:0a:be:c0:78:72:04:ea:7b:7c:d3:17:a0:52:54:63: cc:2e:6f:14:1c:1c:d6:72:5f:4c:80:8a:db:16:d2:62:b5:89: 78:65:8f:3a:b3:db:5f:dd:1c:1a:d5:fa:3a:31:d6:65:b0:99: 31:fa:ab:f4:94:0c:64:57:57:92:34:0e:dd:a6:b9:0e:6e:88: 37:c4:67:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49Wlpnzl/ReioiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk Yjk3ZTI4YjctYzg3OC00YjAxLWE1YjEtYzFlYmI2NTFlM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXlXLOeDpPHaMWj2IttblImPqs2itZbimuKH VXOb7ohERz63znLafY+IAJ/uHh1YP2us8ELnFGEL5vu1Nxl7AIu1UYfCe2hC5Kli 1akDnc6xuNOGBbLR+sl7IPevj4I6koeE8uLg9xYSrYkUe9SzHuzd63h6sG/cUP5H 0TGKMjA9sYdOJmH0ZHaMDs2A3pYMD9E7IMMtPHP/Hr6tu1e95rdndqyWjNsw3wxH KWragjm8euwBHns2t6+SDCZeSNpYNdnUwKZg0lzbAaob6dLYIPrT6gwwdOEP23Y8 DVvro5bsB/k/2/iGRHLcN8kPsTLehdyYmlqmzlSITN1YFAZPKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEnUr1yZ1I82JHae2lHCDkbrrBrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGEzZTBmMGQtOGQ2Ny0z N2VmLTljYjQtZjExYTI1ZTQyMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARDMf5T2VlCPm7xRcx4Sw5pRAMz12r4YAsKTgL oSMM/GPORZ2urLergJXj3rgsZJyN88/AFlPFQnLJKW8s+3sK76eUqCzcvxxsIN7z S+WWI8AXyreib4XQP+gnFQpNnHJCy7UYcEKFq9EVphT/OHmcTJb2OlJF9PQN3SFJ 5dqw1FXyO7XhMUTRz8JWmvPs/AVaraLFsXeZKmL3qGj6CcHDJlSGccbgDKH2wieF v+zuDADtcnoO6XkKvsB4cgTqe3zTF6BSVGPMLm8UHBzWcl9MgIrbFtJitYl4ZY86 s9tf3Rwa1fo6MdZlsJkx+qv0lAxkV1eSNA7dprkObog3xGcD -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:48 2025 by rpki-client