$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa File: 5196fc80-e236-3063-93b6-611395e8e648.roa (raw, json) Hash identifier: 9ZXZH8yLHl7YuDEeq5VZVglbWUEHoNrzPXrRtAQ9ObY= Subject key identifier: EE:A7:19:FD:F7:8A:E2:10:F5:F8:E7:B3:B2:E6:71:4C:55:DD:12:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E93A85B6DB8C323C1EA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396573 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:93:a8:5b:6d:b8:c3:23:c1:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=2e31ebf1-bf72-428f-89a0-003046bd2f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:e1:26:b5:ac:34:3e:59:f6:f3:d5:db:c5: bd:43:ba:ea:66:a8:ca:c4:24:e7:ba:11:3f:7f:c6: 33:de:d3:b4:0c:e9:62:ef:9a:1f:0d:b1:ba:0e:de: a0:0d:66:e8:8e:3a:d2:78:cb:8e:3c:55:e9:fb:2b: 22:70:d3:03:7c:e7:6f:1a:3a:a2:f8:ce:6a:cb:73: 04:12:91:88:32:08:71:56:ad:d2:4e:1c:f7:37:8d: 5b:74:7a:5f:82:a8:38:50:80:0a:76:fa:b0:75:98: 2f:c2:6c:92:52:04:eb:ee:8a:35:41:af:19:02:d9: 88:f2:e3:39:21:a6:a3:b8:d7:cb:26:3e:81:c1:73: 91:8d:76:96:b7:ab:82:24:4a:dd:7b:f2:67:2e:79: fc:e2:56:c1:06:06:3f:a4:1d:60:0b:5b:65:3d:6e: c4:38:2e:c7:70:17:f5:43:11:0b:39:e2:b8:1a:63: 31:5d:67:6c:48:bb:5c:8f:dc:45:8d:b2:b6:9e:21: 76:b9:ea:62:50:3e:47:5f:4a:d2:1c:23:bf:7d:e9: 23:7a:84:d5:8d:73:39:59:ba:93:a9:05:60:28:41: 6e:05:99:39:ca:09:67:de:04:a3:a1:3d:90:47:94: 41:ad:49:b2:85:5a:9f:57:7d:55:bc:f4:5b:14:aa: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:19:FD:F7:8A:E2:10:F5:F8:E7:B3:B2:E6:71:4C:55:DD:12:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:70:8a:80:d0:aa:46:a5:77:c3:83:56:f1:03:86:03:76:42: 8b:71:d1:d1:90:92:10:2a:d3:8e:88:27:ed:31:59:19:8b:cc: 96:c8:a8:1c:be:45:7c:55:4b:99:47:19:3a:29:e4:31:5c:f3: f2:46:44:43:f1:2f:15:21:7c:a8:cb:03:a1:84:1c:94:74:f4: b6:e2:9e:fc:d8:31:4e:60:4d:a6:dd:b9:62:fe:4c:88:50:94: 5e:37:16:f6:3c:0c:68:4b:c1:6f:28:2c:fc:87:78:99:58:22: 6a:fd:de:3b:7a:c5:6b:dd:2f:60:d4:03:9e:dd:2e:06:4e:b6: 23:1b:75:fe:78:ea:4a:b9:b8:56:b8:d9:8b:cb:29:12:4f:80: b1:cb:a6:78:84:1f:cc:dd:a7:eb:84:38:82:92:c7:43:9d:7b: ca:de:2c:2f:8f:41:67:cb:cc:44:da:37:99:d2:8e:4d:34:b2: c2:b8:d8:ab:c7:e9:e8:29:09:54:93:58:58:87:70:db:40:4c: 9e:91:a2:d7:ea:14:a7:f4:31:43:ec:f5:0e:3c:d5:9a:1f:72: 49:02:d7:e4:17:cf:39:db:29:05:f8:97:c0:bd:49:a4:13:90: de:d5:a4:c2:64:14:7b:20:3c:87:b1:93:e5:fd:f2:ac:19:fa: 4d:d6:cc:93 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpOoW224wyPB6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MmUzMWViZjEtYmY3Mi00MjhmLTg5YTAtMDAzMDQ2YmQyZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPhJrWsND5Z9vPV28W9Q7rqZqjKxCTnuhE/ f8Yz3tO0DOli75ofDbG6Dt6gDWbojjrSeMuOPFXp+ysicNMDfOdvGjqi+M5qy3ME EpGIMghxVq3SThz3N41bdHpfgqg4UIAKdvqwdZgvwmySUgTr7oo1Qa8ZAtmI8uM5 IaajuNfLJj6BwXORjXaWt6uCJErde/JnLnn84lbBBgY/pB1gC1tlPW7EOC7HcBf1 QxELOeK4GmMxXWdsSLtcj9xFjbK2niF2uepiUD5HX0rSHCO/fekjeoTVjXM5WbqT qQVgKEFuBZk5ygln3gSjoT2QR5RBrUmyhVqfV31VvPRbFKozLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO6nGf33iuIQ9fjns7LmcUxV3RLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTE5NmZjODAtZTIzNi0z MDYzLTkzYjYtNjExMzk1ZThlNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCUcIqA0KpGpXfDg1bxA4YDdkKLcdHRkJIQKtOO iCftMVkZi8yWyKgcvkV8VUuZRxk6KeQxXPPyRkRD8S8VIXyoywOhhByUdPS24p78 2DFOYE2m3bli/kyIUJReNxb2PAxoS8FvKCz8h3iZWCJq/d47esVr3S9g1AOe3S4G TrYjG3X+eOpKubhWuNmLyykST4Cxy6Z4hB/M3afrhDiCksdDnXvK3iwvj0Fny8xE 2jeZ0o5NNLLCuNirx+noKQlUk1hYh3DbQEyekaLX6hSn9DFD7PUOPNWaH3JJAtfk F8852ykF+JfAvUmkE5De1aTCZBR7IDyHsZPl/fKsGfpN1syT -----END CERTIFICATE-----Generated at Fri Apr 11 23:11:32 2025 by rpki-client