$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dadbb02-5940-3db7-92aa-8bbd6512274e.roa File: 7dadbb02-5940-3db7-92aa-8bbd6512274e.roa (raw, json) Hash identifier: P8cazOfODFWNwYlcDBtXT6r8JONvIZ38ObCJX8T9xmc= Subject key identifier: E9:FC:7D:77:65:85:59:C3:AE:D1:94:B3:B1:57:0C:80:70:E4:54:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA4608ED6146B5FDDDDE880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dadbb02-5940-3db7-92aa-8bbd6512274e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 397210 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:60:8e:d6:14:6b:5f:dd:dd:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c859b8c6-6613-4505-abea-f1681c5afec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:15:ec:e5:5a:25:85:05:2d:86:53:3e:a4: e6:27:03:98:ac:c5:3d:c5:61:c5:45:16:79:e4:6a: 25:26:38:32:b7:c0:88:2d:88:af:d5:34:c7:3e:1b: a3:87:4d:3f:b8:62:41:d0:6d:cb:a2:fc:31:35:4a: 4e:5f:d3:28:00:08:99:d1:ec:6a:1f:97:82:7e:ec: 5a:ea:7d:89:87:2f:2d:e8:5d:e1:1c:d9:b8:e7:7f: dd:70:34:d7:84:e2:58:75:86:32:91:1a:1d:ba:86: 53:d2:d1:96:75:6c:8e:f5:b1:c4:0d:1d:20:57:ce: cf:e4:58:59:79:a4:ad:29:7c:d1:87:69:46:fe:42: a4:42:cc:c3:8a:34:d7:9f:f0:73:2e:5f:0b:36:ac: b3:a9:9a:67:b0:3d:4b:ed:ea:ce:7c:86:7e:6b:83: 2f:c0:5a:ac:c9:40:b3:01:7f:b5:6b:99:35:23:7f: 46:c8:20:48:3e:99:ab:a2:ac:f1:c6:6a:2b:14:66: 2b:2e:67:af:e2:c2:0f:61:b5:d9:bb:49:e4:49:48: 85:79:29:92:ce:af:1b:8b:62:5b:53:29:c1:1f:dc: b4:d7:d0:2c:c9:a4:22:f7:fc:83:bb:a8:77:c8:31: 61:f1:8a:44:c9:0d:be:bf:6a:83:92:3b:c7:f3:6d: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:7D:77:65:85:59:C3:AE:D1:94:B3:B1:57:0C:80:70:E4:54:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dadbb02-5940-3db7-92aa-8bbd6512274e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:55:8f:56:d7:cf:9c:20:81:1b:a0:82:74:9f:cd:c0:38:9b: d7:bc:f2:81:8b:a5:5f:94:2f:4d:9f:32:3f:aa:0d:f8:d8:13: 44:5a:4a:c2:78:76:27:9e:6b:94:08:71:73:da:42:e2:89:cd: 9b:37:90:6c:ac:0f:ca:fb:fa:96:e6:55:0d:4c:e7:fa:64:bc: fb:df:ce:6d:f2:a6:09:18:51:d0:4f:91:9c:67:9e:de:88:fd: 05:0c:5d:fa:73:a4:0e:3f:0c:dd:d9:bd:45:11:9b:74:c1:74: f1:9d:00:92:fa:50:dc:52:11:c1:b9:cf:74:7e:69:1a:62:85: 9e:93:00:6b:cf:bc:27:d6:21:25:d4:a3:83:a0:89:a9:20:4e: 3c:5c:09:70:9b:d1:c8:f6:02:fe:ec:28:c0:df:a3:c4:06:b5: c4:78:15:8f:63:54:59:17:d5:47:1d:5c:6c:69:f6:d5:58:e0: 62:9b:9d:45:95:b6:fa:e6:bd:f2:52:17:d5:3a:7a:e9:cc:af: 7d:5e:70:1c:f9:c9:99:f1:62:f6:9c:e7:a8:0d:77:c2:46:41: 83:e4:26:87:c4:c5:7d:0e:8d:e1:08:9e:0d:eb:cd:43:96:22: 66:be:8c:ca:f6:90:fc:78:a2:65:70:ac:ef:05:7b:3a:22:ef: dc:5d:b2:3b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGCO1hRrX93d6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk Yzg1OWI4YzYtNjYxMy00NTA1LWFiZWEtZjE2ODFjNWFmZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwQV7OVaJYUFLYZTPqTmJwOYrMU9xWHFRRZ5 5GolJjgyt8CILYiv1TTHPhujh00/uGJB0G3LovwxNUpOX9MoAAiZ0exqH5eCfuxa 6n2Jhy8t6F3hHNm453/dcDTXhOJYdYYykRoduoZT0tGWdWyO9bHEDR0gV87P5FhZ eaStKXzRh2lG/kKkQszDijTXn/BzLl8LNqyzqZpnsD1L7erOfIZ+a4MvwFqsyUCz AX+1a5k1I39GyCBIPpmroqzxxmorFGYrLmev4sIPYbXZu0nkSUiFeSmSzq8bi2Jb UynBH9y019AsyaQi9/yDu6h3yDFh8YpEyQ2+v2qDkjvH823BawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOn8fXdlhVnDrtGUs7FXDIBw5FQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RhZGJiMDItNTk0MC0z ZGI3LTkyYWEtOGJiZDY1MTIyNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6VY9W18+cIIEboIJ0n83AOJvXvPKBi6VflC9N nzI/qg342BNEWkrCeHYnnmuUCHFz2kLiic2bN5BsrA/K+/qW5lUNTOf6ZLz7385t 8qYJGFHQT5GcZ57eiP0FDF36c6QOPwzd2b1FEZt0wXTxnQCS+lDcUhHBuc90fmka YoWekwBrz7wn1iEl1KODoImpIE48XAlwm9HI9gL+7CjA36PEBrXEeBWPY1RZF9VH HVxsafbVWOBim51Flbb65r3yUhfVOnrpzK99XnAc+cmZ8WL2nOeoDXfCRkGD5CaH xMV9Do3hCJ4N681DliJmvozK9pD8eKJlcKzvBXs6Iu/cXbI7 -----END CERTIFICATE-----Generated at Fri Apr 11 22:50:29 2025 by rpki-client