$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa File: 6975b1c1-af06-3124-a003-cbf5e2b25deb.roa (raw, json) Hash identifier: 3hHT6T1YMuO7o3tXSTQRboXvV9qOQfV/iWEZrJ0TBBY= Subject key identifier: 4A:87:8D:92:0B:8F:F1:B9:16:5F:B2:2C:D9:76:6A:50:9F:D0:44:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC1A041DE5BDA9C35C9580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 397200 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1a:04:1d:e5:bd:a9:c3:5c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=9ca61370-1ca6-43d4-a2d1-fd26d4ec6890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:07:65:83:9a:05:48:49:0a:a1:fc:5d:99: ba:b6:31:c4:00:13:84:3f:93:4c:1c:5f:5a:b6:a8: a4:59:ce:39:e3:fa:75:d4:52:2b:f7:3f:36:a5:87: 61:00:36:f1:ca:d6:33:70:ea:8d:ac:6e:24:59:b2: f4:61:b9:b7:42:2e:5b:56:e9:4f:18:3b:a9:e2:dc: e7:2e:51:5d:68:c2:4b:9c:c7:5c:94:14:c2:e9:73: ad:d6:42:23:77:70:bc:87:a4:26:35:a3:81:18:97: 8d:20:15:45:e1:b1:00:9f:96:3d:82:77:08:b4:6b: 83:5e:60:f4:34:1a:95:a0:3a:c9:87:05:d0:d2:6a: a8:eb:f8:ea:9e:55:c4:fb:94:e9:40:e8:f4:db:1f: e7:19:b9:e1:98:00:a9:f3:df:ef:29:26:ea:bd:70: 18:34:4e:71:b7:16:97:28:a4:d3:c4:41:d3:c2:1b: 9e:de:8d:41:1c:9c:19:c7:bb:f2:1d:50:24:f5:37: 22:07:31:00:0a:2c:18:b5:8c:7a:65:fa:21:c5:45: 6b:f8:d1:c4:24:36:22:ab:10:39:a0:23:05:73:8d: 64:fc:91:dc:00:e1:07:c0:bb:da:d0:e3:33:fb:06: 63:08:0f:a4:5b:9d:49:e1:19:bb:e1:80:f5:3e:2b: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:8D:92:0B:8F:F1:B9:16:5F:B2:2C:D9:76:6A:50:9F:D0:44:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6975b1c1-af06-3124-a003-cbf5e2b25deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2c:b8:bc:96:14:08:09:9a:66:0f:0c:86:32:d7:42:05:29: a8:e1:0e:af:e1:ca:86:ee:4b:80:9e:74:13:e4:7e:f3:0e:25: 8c:ea:2e:3d:d5:10:15:87:d6:1d:16:75:e4:14:2c:0e:e9:35: 5b:2e:7c:8e:7b:55:a7:e3:4d:d5:3b:6e:92:c4:af:d8:9f:19: 5d:a7:7c:4e:63:86:7c:62:ff:3b:e7:bd:00:b0:38:cc:b4:7c: 4a:ee:60:ff:dd:cd:1e:b5:81:c0:24:52:bd:6b:9e:5b:9c:0f: b7:9c:62:27:2b:d1:ad:e9:c6:25:13:b3:c1:05:2b:b6:d5:53: 2f:36:6a:de:d5:01:8d:36:d3:5c:05:bd:dc:f4:4b:6d:da:41: 7c:26:90:4e:53:b3:84:51:2c:63:d1:a9:82:6e:ed:02:41:70: 10:c6:a7:6a:23:00:33:a2:25:62:87:7f:76:ca:ea:db:e8:2a: 17:ac:79:71:a3:40:e0:f8:08:15:46:6a:87:61:73:2a:c7:75: a4:0d:52:76:3d:0e:e1:a6:3b:18:26:09:f1:eb:86:e6:d6:19: cf:8f:54:35:a7:1b:07:de:9e:de:96:ab:a9:c3:e4:71:40:22: bd:2a:52:e1:66:58:f4:33:04:de:03:c7:9f:ec:51:3c:c1:e4: 24:86:a3:5d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BoEHeW9qcNclYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWNhNjEzNzAtMWNhNi00M2Q0LWEyZDEtZmQyNmQ0ZWM2ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbkHZYOaBUhJCqH8XZm6tjHEABOEP5NMHF9a tqikWc454/p11FIr9z82pYdhADbxytYzcOqNrG4kWbL0Ybm3Qi5bVulPGDup4tzn LlFdaMJLnMdclBTC6XOt1kIjd3C8h6QmNaOBGJeNIBVF4bEAn5Y9gncItGuDXmD0 NBqVoDrJhwXQ0mqo6/jqnlXE+5TpQOj02x/nGbnhmACp89/vKSbqvXAYNE5xtxaX KKTTxEHTwhue3o1BHJwZx7vyHVAk9TciBzEACiwYtYx6ZfohxUVr+NHEJDYiqxA5 oCMFc41k/JHcAOEHwLva0OMz+wZjCA+kW51J4Rm74YD1PitjuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEqHjZILj/G5Fl+yLNl2alCf0ETwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjk3NWIxYzEtYWYwNi0z MTI0LWEwMDMtY2JmNWUyYjI1ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVLLi8lhQICZpmDwyGMtdCBSmo4Q6v4cqG7kuA nnQT5H7zDiWM6i491RAVh9YdFnXkFCwO6TVbLnyOe1Wn403VO26SxK/Ynxldp3xO Y4Z8Yv87570AsDjMtHxK7mD/3c0etYHAJFK9a55bnA+3nGInK9Gt6cYlE7PBBSu2 1VMvNmre1QGNNtNcBb3c9Ett2kF8JpBOU7OEUSxj0amCbu0CQXAQxqdqIwAzoiVi h392yurb6CoXrHlxo0Dg+AgVRmqHYXMqx3WkDVJ2PQ7hpjsYJgnx64bm1hnPj1Q1 pxsH3p7elqupw+RxQCK9KlLhZlj0MwTeA8ef7FE8weQkhqNd -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:55 2025 by rpki-client