$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76969277-636b-350b-a31f-b4ba9297f4da.roa File: 76969277-636b-350b-a31f-b4ba9297f4da.roa (raw, json) Hash identifier: 92ovXn1Ps+zR+RpMycdPLkEENtJYtuL76PmTl0mutl0= Subject key identifier: C7:2F:AF:93:DE:7A:E4:62:3D:20:49:6C:55:E3:17:32:27:4A:03:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183E73B1BBD3360D2DE1E60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76969277-636b-350b-a31f-b4ba9297f4da.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397204 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:e7:3b:1b:bd:33:60:d2:de:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ae0e2cf7-ba47-4673-a5ca-ed2f44aa9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:6d:13:7e:7c:61:80:99:59:5d:54:d1:35: 41:bd:48:7a:e4:0e:85:cd:4e:34:2a:1b:20:bd:7a: ad:a0:84:0a:a5:67:24:2e:7f:7d:49:f9:4e:f5:89: 40:95:3b:33:55:d1:85:60:ec:33:7a:71:a0:23:12: 72:68:53:ea:9b:f7:0e:a8:10:a6:c2:36:75:67:c0: 9d:6f:57:0a:80:c1:1c:db:a0:25:23:16:59:24:00: 89:5d:9e:fd:aa:e6:cc:1d:79:75:5a:33:a5:41:a6: 79:f3:27:d1:b0:9a:7f:72:28:72:74:db:67:7d:83: f4:35:50:83:f8:82:7e:4c:a9:16:f6:66:ec:84:fd: 4f:4a:aa:ba:9c:08:2f:bb:aa:2e:d6:2a:af:cb:fc: 0b:18:36:f5:32:b0:6d:12:ba:b0:42:b4:51:2f:b1: 13:7d:d2:2e:53:96:ac:80:49:c6:11:94:d1:be:ea: 0d:5f:d9:3c:ac:ca:d5:d5:63:4f:7f:19:a0:56:18: f9:e6:52:d1:c2:99:5b:f5:79:99:12:2c:d0:63:d2: 7c:69:c4:c1:bf:1f:38:6b:b0:38:af:a7:1f:18:f8: 67:6b:97:db:c2:43:71:ad:02:62:13:88:4a:25:a5: 00:91:b5:91:36:fc:bc:dd:d7:68:fa:1e:1e:e0:41: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2F:AF:93:DE:7A:E4:62:3D:20:49:6C:55:E3:17:32:27:4A:03:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76969277-636b-350b-a31f-b4ba9297f4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b0:b2:3a:75:75:5c:3a:6a:94:85:02:52:17:a0:c6:59:a6: 2b:92:29:b3:9c:f8:d5:1a:b7:27:e5:a5:2f:29:94:83:09:17: 5c:73:9d:a6:5a:78:71:00:51:af:42:f9:ea:04:59:40:61:92: 9c:f6:96:e4:b1:0a:12:30:89:6d:10:81:bb:3d:97:a5:14:25: 44:d4:32:bc:93:20:a0:8c:f7:1c:df:df:d0:f6:8c:fd:ca:4b: 71:18:2d:37:6f:36:88:7f:6f:55:18:b2:30:01:0d:ee:37:ec: 01:81:f8:0e:68:f3:ae:04:20:43:9e:89:20:2b:3b:16:b2:de: 8d:9a:fb:76:b7:d4:a0:b9:95:e6:83:39:20:6d:43:cd:d4:04: 5f:57:9d:4d:61:e2:e2:01:ef:39:4f:23:db:dd:b2:24:c4:ca: ab:e5:dd:37:67:8f:c9:a5:2d:52:72:71:bb:ed:e5:b4:bf:67: b7:03:c7:66:b2:bc:a6:0c:f1:fd:2e:64:25:31:6e:c9:fd:43: 0e:d0:93:63:59:fa:7b:34:8b:27:4c:eb:3f:df:20:65:6e:bc: 37:36:01:bd:24:97:4a:45:90:63:9b:34:15:fb:0f:b4:fc:98: f8:ac:f7:bc:81:66:02:b2:2e:5a:c9:a9:98:de:d6:26:a7:fb: 6f:09:7f:ed -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+c7G70zYNLeHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWUwZTJjZjctYmE0Ny00NjczLWE1Y2EtZWQyZjQ0YWE5YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopltE358YYCZWV1U0TVBvUh65A6FzU40Khsg vXqtoIQKpWckLn99SflO9YlAlTszVdGFYOwzenGgIxJyaFPqm/cOqBCmwjZ1Z8Cd b1cKgMEc26AlIxZZJACJXZ79qubMHXl1WjOlQaZ58yfRsJp/cihydNtnfYP0NVCD +IJ+TKkW9mbshP1PSqq6nAgvu6ou1iqvy/wLGDb1MrBtErqwQrRRL7ETfdIuU5as gEnGEZTRvuoNX9k8rMrV1WNPfxmgVhj55lLRwplb9XmZEizQY9J8acTBvx84a7A4 r6cfGPhna5fbwkNxrQJiE4hKJaUAkbWRNvy83ddo+h4e4EGSsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMcvr5PeeuRiPSBJbFXjFzInSgPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY5NjkyNzctNjM2Yi0z NTBiLWEzMWYtYjRiYTkyOTdmNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVsLI6dXVcOmqUhQJSF6DGWaYrkimznPjVGrcn 5aUvKZSDCRdcc52mWnhxAFGvQvnqBFlAYZKc9pbksQoSMIltEIG7PZelFCVE1DK8 kyCgjPcc39/Q9oz9yktxGC03bzaIf29VGLIwAQ3uN+wBgfgOaPOuBCBDnokgKzsW st6Nmvt2t9SguZXmgzkgbUPN1ARfV51NYeLiAe85TyPb3bIkxMqr5d03Z4/JpS1S cnG77eW0v2e3A8dmsrymDPH9LmQlMW7J/UMO0JNjWfp7NIsnTOs/3yBlbrw3NgG9 JJdKRZBjmzQV+w+0/Jj4rPe8gWYCsi5ayamY3tYmp/tvCX/t -----END CERTIFICATE-----Generated at Fri Apr 11 23:00:48 2025 by rpki-client