$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa File: 8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa (raw, json) Hash identifier: LFKTGgATW6xM+e8npc0oXjVmNIpQNeb4W5iAnviwYNk= Subject key identifier: 92:7A:1B:E3:B1:6E:9D:E5:4F:AF:04:5D:45:D5:28:10:AA:98:41:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E8DAC632B58A253F1D980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396566 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:8d:ac:63:2b:58:a2:53:f1:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=798edf1a-866a-4d9d-9804-8732716f7b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:0d:28:4c:cc:58:9f:bc:30:31:c0:9d:c5: d6:e6:3a:07:b5:a9:ad:f0:a9:05:af:7e:36:24:bb: 2a:d2:e5:83:24:97:2c:85:8f:44:9b:89:9c:74:bf: 1a:6e:c9:47:9d:d4:33:5a:39:2b:06:21:4e:78:fd: af:04:3a:64:6e:63:f8:3f:08:bb:ac:18:7e:a6:88: 5f:07:e1:a0:7f:43:98:a5:28:21:0e:fd:55:24:dc: da:33:37:d8:c6:6f:26:13:82:be:a8:2f:fd:5a:01: c9:97:8e:39:fb:89:42:be:fb:fb:2d:0f:5a:3e:bc: 9f:2b:1f:4c:1a:c0:b3:b4:84:06:43:e7:2b:32:88: ab:b3:c2:f2:95:b5:e9:aa:09:32:e1:e8:2c:b4:96: c4:51:7e:3a:ce:a7:b3:3f:7e:fc:54:77:90:6d:18: af:95:3b:cb:ad:d0:6a:47:8f:e9:0c:c0:7d:0d:01: a2:9e:47:60:56:cb:86:04:24:75:4c:5b:08:31:6b: f4:05:a9:7b:dc:47:54:94:9a:31:69:91:e0:e3:32: 73:19:f2:cc:e5:7a:54:d9:14:2d:b3:3e:78:87:03: c7:2e:e8:aa:d1:a9:1c:09:a1:8b:77:a4:52:7c:26: 45:97:02:3f:94:13:cf:4b:82:9e:79:a9:91:ce:37: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:1B:E3:B1:6E:9D:E5:4F:AF:04:5D:45:D5:28:10:AA:98:41:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2e:0f:81:45:c2:c6:fc:ba:77:6f:fe:7e:21:d7:2f:72:23: ac:e5:14:21:43:c4:4d:e7:18:98:0e:3a:6b:ee:2e:d0:ba:de: 97:e6:fb:93:07:4c:94:aa:99:03:7c:28:9f:d2:ac:18:0f:f0: c5:64:1d:c7:8a:c6:3d:d5:4b:ed:b0:14:3f:c1:7e:92:cc:10: f7:54:bc:e7:17:f1:01:d7:81:c1:7a:f1:97:44:74:89:0a:d6: 6f:27:43:29:ad:29:c2:ac:b5:37:dc:8c:6f:35:e7:9b:0e:f8: f7:2f:67:da:cc:85:f3:40:25:eb:a3:6a:67:6b:df:3a:e8:c1: 66:06:0a:a8:18:85:a1:0a:43:28:26:41:67:e3:02:cd:28:68: 23:16:fa:09:a8:af:75:8f:99:a1:2c:ef:e4:3c:62:41:08:6a: 59:f8:48:13:e2:f6:f3:ee:ef:13:08:eb:81:b7:ef:30:4e:d9: b5:f2:76:c2:bb:a4:8a:40:80:82:ed:99:55:f8:2b:d5:5a:6f: d6:c2:50:dd:19:8b:17:83:50:5c:3c:bf:0a:fa:65:9e:50:2a: 29:3d:6a:84:ff:56:d2:0b:10:d5:be:7b:04:37:fc:75:60:c8: 0b:72:33:bc:fb:60:d2:79:81:49:0c:c8:14:e3:19:4c:37:22: 28:14:06:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5Po2sYytYolPx2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Nzk4ZWRmMWEtODY2YS00ZDlkLTk4MDQtODczMjcxNmY3YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguINKEzMWJ+8MDHAncXW5joHtamt8KkFr342 JLsq0uWDJJcshY9Em4mcdL8abslHndQzWjkrBiFOeP2vBDpkbmP4Pwi7rBh+pohf B+Ggf0OYpSghDv1VJNzaMzfYxm8mE4K+qC/9WgHJl445+4lCvvv7LQ9aPryfKx9M GsCztIQGQ+crMoirs8LylbXpqgky4egstJbEUX46zqezP378VHeQbRivlTvLrdBq R4/pDMB9DQGinkdgVsuGBCR1TFsIMWv0Bal73EdUlJoxaZHg4zJzGfLM5XpU2RQt sz54hwPHLuiq0akcCaGLd6RSfCZFlwI/lBPPS4KeeamRzjfG3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJJ6G+Oxbp3lT68EXUXVKBCqmEH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE4Njc1NGItN2JiZS0z M2Y5LThhYTYtMTgwY2M0MTMxYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCWLg+BRcLG/Lp3b/5+IdcvciOs5RQhQ8RN5xiY Djpr7i7Qut6X5vuTB0yUqpkDfCif0qwYD/DFZB3HisY91UvtsBQ/wX6SzBD3VLzn F/EB14HBevGXRHSJCtZvJ0MprSnCrLU33IxvNeebDvj3L2fazIXzQCXro2pna986 6MFmBgqoGIWhCkMoJkFn4wLNKGgjFvoJqK91j5mhLO/kPGJBCGpZ+EgT4vbz7u8T COuBt+8wTtm18nbCu6SKQICC7ZlV+CvVWm/WwlDdGYsXg1BcPL8K+mWeUCopPWqE /1bSCxDVvnsEN/x1YMgLcjO8+2DSeYFJDMgU4xlMNyIoFAbE -----END CERTIFICATE-----Generated at Sat Apr 12 01:10:05 2025 by rpki-client