$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a25b8f19-d9e5-3240-a22b-1468fed5dbc2.roa File: a25b8f19-d9e5-3240-a22b-1468fed5dbc2.roa (raw, json) Hash identifier: ch9UXEA1OBXVHo2M7M1TuY+wNWD6luSKDbGszYeYNBA= Subject key identifier: 4F:A2:ED:F1:94:C6:A8:A9:50:79:D7:01:01:36:8B:A5:D6:6D:08:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183D1F6D075C69482962B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a25b8f19-d9e5-3240-a22b-1468fed5dbc2.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396612 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:d1:f6:d0:75:c6:94:82:96:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=262e5cd3-3d87-4fe0-a6e0-d33acc38684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:a8:df:b8:b6:5d:7b:3f:7c:90:d6:2d:a8: bd:80:a2:0d:70:96:15:81:5b:de:81:19:26:6a:e7: a1:ed:69:45:94:41:02:34:33:9f:3c:de:ec:97:20: 0a:c8:9e:87:e9:59:f4:43:09:b8:d6:62:ad:52:09: 61:61:e7:74:ab:8d:6c:84:bb:77:52:db:cd:4e:11: 44:58:a9:36:80:b9:91:b6:09:99:9d:82:0b:28:eb: 83:60:10:88:90:78:55:15:33:5a:33:ef:d7:8d:25: 14:c9:c9:78:a6:02:27:34:96:50:65:b0:61:b2:c8: 91:98:46:d2:80:6a:6a:d7:f5:e3:ac:1e:dd:f7:d5: c0:23:10:70:bb:c1:c0:d8:bc:5d:66:42:3e:3b:42: aa:77:7a:5c:da:fd:53:56:17:ce:f0:19:b8:b6:73: 62:a5:2e:53:21:f0:1d:85:7e:69:9d:11:2c:65:b7: 78:3d:ce:58:e7:9c:f8:f6:a5:22:9e:26:5f:61:79: 4f:40:6d:03:a1:3d:1d:b6:64:55:f5:f3:6f:e0:0c: a2:f4:24:77:68:81:e4:1d:02:c2:cc:85:61:5a:42: fa:e7:d3:a7:bb:b4:e8:4e:31:f2:70:7c:01:16:40: 91:1c:87:f7:2e:e4:bf:16:11:82:d1:80:25:31:9b: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A2:ED:F1:94:C6:A8:A9:50:79:D7:01:01:36:8B:A5:D6:6D:08:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a25b8f19-d9e5-3240-a22b-1468fed5dbc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2c:f8:7a:e5:a6:f0:69:6b:98:71:28:7c:1f:12:05:5f:68: 06:80:1f:75:4e:ea:61:0b:37:48:34:2a:a7:d1:95:d1:f1:a3: 43:5e:c6:fa:ef:fa:d9:f0:a9:d0:7b:40:80:4d:bc:17:40:7a: 96:ff:6a:b0:75:a3:28:4d:39:b9:6b:7c:da:57:51:c3:c2:9e: f7:eb:81:44:c8:b5:9a:b8:9d:d1:44:be:f9:ff:9c:86:a2:4e: da:d0:72:7d:83:27:4c:9b:0c:9d:d9:d3:f1:ef:44:e9:1f:6c: 4e:24:1d:2f:62:52:57:ab:10:07:a2:81:95:82:f0:c0:66:d7: 7a:dc:89:83:5a:0f:91:46:b0:59:ae:36:b0:23:3c:24:7d:43: 6c:51:42:19:28:31:0f:16:e0:cb:9c:e5:6c:18:59:1c:c3:6a: 46:f5:46:b0:61:1e:4f:95:51:2b:9c:b7:96:33:28:84:1a:01: 05:c2:c6:67:35:a6:e6:3e:ed:fa:d9:98:5c:c9:52:a3:3e:f1: a5:1a:f8:62:6a:af:b2:27:43:0c:8b:9e:0e:18:3c:28:bc:8a: 76:ca:9e:1c:4d:1d:d3:ca:68:fe:90:e1:2e:2b:ff:b6:f8:b1: b2:a9:5d:e9:37:a0:26:98:3f:c3:b6:d3:15:2d:00:f4:2b:d2: fe:3c:e1:6f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg9H20HXGlIKWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MjYyZTVjZDMtM2Q4Ny00ZmUwLWE2ZTAtZDMzYWNjMzg2ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlreo37i2XXs/fJDWLai9gKINcJYVgVvegRkm aueh7WlFlEECNDOfPN7slyAKyJ6H6Vn0Qwm41mKtUglhYed0q41shLt3UtvNThFE WKk2gLmRtgmZnYILKOuDYBCIkHhVFTNaM+/XjSUUycl4pgInNJZQZbBhssiRmEbS gGpq1/XjrB7d99XAIxBwu8HA2LxdZkI+O0Kqd3pc2v1TVhfO8Bm4tnNipS5TIfAd hX5pnREsZbd4Pc5Y55z49qUiniZfYXlPQG0DoT0dtmRV9fNv4Ayi9CR3aIHkHQLC zIVhWkL659Onu7ToTjHycHwBFkCRHIf3LuS/FhGC0YAlMZto5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE+i7fGUxqipUHnXAQE2i6XWbQjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI1YjhmMTktZDllNS0z MjQwLWEyMmItMTQ2OGZlZDVkYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAILPh65abwaWuYcSh8HxIFX2gGgB91TuphCzdI NCqn0ZXR8aNDXsb67/rZ8KnQe0CATbwXQHqW/2qwdaMoTTm5a3zaV1HDwp7364FE yLWauJ3RRL75/5yGok7a0HJ9gydMmwyd2dPx70TpH2xOJB0vYlJXqxAHooGVgvDA Ztd63ImDWg+RRrBZrjawIzwkfUNsUUIZKDEPFuDLnOVsGFkcw2pG9UawYR5PlVEr nLeWMyiEGgEFwsZnNabmPu362ZhcyVKjPvGlGvhiaq+yJ0MMi54OGDwovIp2yp4c TR3Tymj+kOEuK/+2+LGyqV3pN6AmmD/DttMVLQD0K9L+POFv -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:31 2025 by rpki-client