$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b3c88f2-2d6e-3f75-b2a4-12f29173fd66.roa File: 7b3c88f2-2d6e-3f75-b2a4-12f29173fd66.roa (raw, json) Hash identifier: mby1NnK8l9OMOgPzZCRfzq67ia9mrjo4334XAthsQUY= Subject key identifier: C7:44:AF:1F:02:1A:3E:55:52:4D:E2:34:78:9E:49:8B:02:8E:7D:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496CE47F781B964FDD1FF86E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b3c88f2-2d6e-3f75-b2a4-12f29173fd66.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 396577 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:7f:78:1b:96:4f:dd:1f:f8:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=a99ed6bd-9c1c-4f15-84ca-eec3b57f8e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:9b:7e:85:76:47:67:86:b4:b3:73:f4:06: 9d:6f:21:f9:35:e9:7b:33:16:62:08:33:e6:83:88: df:6e:19:6b:a6:75:22:a9:0b:6e:9c:ba:82:2a:8f: e1:91:ab:e3:93:2a:97:45:7d:0b:2a:9f:e6:36:40: dc:56:75:f8:1a:dc:9c:d1:36:3d:31:b7:0b:2d:a4: 63:bc:fd:02:fd:b6:25:63:19:f2:00:a8:1e:a3:03: 39:bc:4b:b7:c9:c6:9f:54:26:64:92:e1:56:3b:a8: 07:66:b7:05:f1:47:a7:f5:6e:20:44:32:64:96:87: 50:de:b1:3d:ec:c7:5b:c2:4a:7a:1c:4d:bd:2d:34: 9c:6a:f4:ad:b5:30:69:db:97:4e:98:61:ee:ae:18: 15:15:35:ff:c7:5b:2d:b4:9f:e5:48:f0:0e:f3:14: 8f:56:5e:5f:c3:2e:dc:95:db:57:42:ca:f0:83:91: 91:b6:2e:6f:30:c2:53:e2:2d:5a:39:e1:d9:1a:13: 5b:95:76:8d:54:a2:0d:63:8a:86:98:a9:c1:fd:6d: 04:e9:31:d9:5f:86:d8:ad:95:d4:78:22:e4:e1:a7: b5:b0:14:eb:f3:a7:0c:7e:66:e4:3f:c9:75:c5:77: a7:1b:8b:71:ec:69:6c:fb:51:35:8e:92:5a:94:59: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:AF:1F:02:1A:3E:55:52:4D:E2:34:78:9E:49:8B:02:8E:7D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b3c88f2-2d6e-3f75-b2a4-12f29173fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:16:ef:11:e2:3d:1c:32:34:9b:05:9c:10:05:cf:d5:b3:78: 59:14:c5:4d:ac:82:a0:e3:85:a3:69:e0:49:3b:40:0e:16:a6: 0c:25:b7:9b:f5:26:23:17:b2:b1:04:1b:11:cf:71:3d:c6:81: 96:f4:83:28:1d:0e:d7:b2:77:c4:ac:eb:be:dc:51:97:e0:21: 7e:f3:fc:af:57:11:e9:9f:f8:65:7c:b9:48:63:8f:ab:8d:4d: 88:1a:52:0e:ca:b1:b6:c7:be:74:dd:5f:6c:89:32:d3:bf:d3: 9b:10:45:fe:3f:bc:cd:56:2b:e0:9d:44:d3:d6:b4:f0:1a:4f: 8c:88:65:9a:8b:9a:f0:c6:f9:f6:9c:ff:49:33:f0:16:70:2c: 01:dd:d2:20:9e:c4:03:ad:ad:a4:f6:30:14:1d:c0:d8:78:f1: 4e:a1:1d:fc:5d:25:97:df:0b:1a:13:75:8b:bc:f8:b5:29:58: d8:12:3b:46:49:8a:57:2f:34:04:35:6c:3a:e7:03:29:a1:97: ed:53:48:b4:3a:4a:a7:14:b1:9c:0d:d9:a7:c9:80:b3:d9:15: cd:7c:bb:f3:90:94:3f:58:63:18:a5:f3:d0:90:69:d9:16:4b: 41:f3:99:07:fd:1e:3b:ed:87:07:86:1d:f9:00:50:e4:4c:5c: 76:8c:0f:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5H94G5ZP3R/4bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk YTk5ZWQ2YmQtOWMxYy00ZjE1LTg0Y2EtZWVjM2I1N2Y4ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsWbfoV2R2eGtLNz9AadbyH5Nel7MxZiCDPm g4jfbhlrpnUiqQtunLqCKo/hkavjkyqXRX0LKp/mNkDcVnX4Gtyc0TY9MbcLLaRj vP0C/bYlYxnyAKgeowM5vEu3ycafVCZkkuFWO6gHZrcF8Uen9W4gRDJklodQ3rE9 7Mdbwkp6HE29LTScavSttTBp25dOmGHurhgVFTX/x1sttJ/lSPAO8xSPVl5fwy7c ldtXQsrwg5GRti5vMMJT4i1aOeHZGhNblXaNVKINY4qGmKnB/W0E6THZX4bYrZXU eCLk4ae1sBTr86cMfmbkP8l1xXenG4tx7Gls+1E1jpJalFkKiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMdErx8CGj5VUk3iNHieSYsCjn31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2IzYzg4ZjItMmQ2ZS0z Zjc1LWIyYTQtMTJmMjkxNzNmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEFu8R4j0cMjSbBZwQBc/Vs3hZFMVNrIKg44Wj aeBJO0AOFqYMJbeb9SYjF7KxBBsRz3E9xoGW9IMoHQ7XsnfErOu+3FGX4CF+8/yv VxHpn/hlfLlIY4+rjU2IGlIOyrG2x7503V9siTLTv9ObEEX+P7zNVivgnUTT1rTw Gk+MiGWai5rwxvn2nP9JM/AWcCwB3dIgnsQDra2k9jAUHcDYePFOoR38XSWX3wsa E3WLvPi1KVjYEjtGSYpXLzQENWw65wMpoZftU0i0OkqnFLGcDdmnyYCz2RXNfLvz kJQ/WGMYpfPQkGnZFktB85kH/R477YcHhh35AFDkTFx2jA+Q -----END CERTIFICATE-----Generated at Sat Apr 12 00:17:35 2025 by rpki-client