$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b03e0f7c-bc78-3cf7-8180-e4a0b7f61b92.roa File: b03e0f7c-bc78-3cf7-8180-e4a0b7f61b92.roa (raw, json) Hash identifier: U8DuKXR0LDGWIz1nOu5etByYo3Yz0Lx3xH5f/dsvyAo= Subject key identifier: 87:2C:0C:0D:22:D2:03:C4:9B:40:FE:1E:7F:20:F4:19:3D:83:76:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497AD9C43CA5FF7114F1CCBD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b03e0f7c-bc78-3cf7-8180-e4a0b7f61b92.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 396569 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:c4:3c:a5:ff:71:14:f1:cc:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=1ff8e0ea-7860-4856-905e-5428ff4ebcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:f3:01:56:f4:b3:21:9d:d7:da:a5:75:83: 82:4b:b5:d9:73:d9:5b:bc:be:ef:e6:90:19:1f:db: 5a:23:55:e9:fe:4c:20:af:81:f3:36:b0:d4:9c:38: 56:d4:3e:af:c3:ad:4a:33:d6:c1:96:66:89:29:12: 4c:58:0b:af:6c:ef:ee:ff:3f:96:1b:51:40:3b:dd: 15:9e:c0:df:b1:76:e7:a1:0f:1e:4f:02:f0:61:32: 39:a2:ed:55:cc:09:25:00:0e:55:95:9e:d0:c9:1b: cf:7d:ca:49:47:ec:39:41:f5:97:fe:cb:24:dd:69: c2:62:d7:62:df:0e:89:10:4f:33:64:4e:01:d5:23: dc:fe:15:4a:31:ca:a9:d6:04:74:bc:26:c3:93:43: d5:4a:ca:fa:2e:3c:eb:71:cf:f3:b3:3c:3b:82:0b: c1:8b:cd:92:b1:24:b0:74:86:01:b2:7a:09:31:3e: cf:e7:b3:0d:09:c4:98:cf:4a:8f:b4:51:58:6e:3a: a0:8e:59:54:3d:d6:7c:e3:fa:bb:2b:51:52:34:a1: ff:47:1d:22:39:d2:75:b3:72:35:37:6c:56:66:a2: 36:ff:82:ea:9f:62:8b:fc:f5:39:08:2b:8f:fc:3b: a2:99:bb:86:c9:5c:67:af:8e:94:25:0f:bb:d1:0a: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2C:0C:0D:22:D2:03:C4:9B:40:FE:1E:7F:20:F4:19:3D:83:76:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b03e0f7c-bc78-3cf7-8180-e4a0b7f61b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8e:e1:51:fb:bf:8b:e5:05:8f:8b:ab:6f:ca:2d:28:9e:53: d1:b5:54:9e:31:83:dd:0b:b3:18:0e:00:21:89:ac:52:df:02: b3:66:2c:03:3a:ac:58:45:db:95:f1:d3:c2:71:45:c0:22:75: 90:71:97:9d:fd:1e:80:1b:ee:15:34:1a:4a:6d:69:ee:38:8e: f7:5d:f5:08:07:32:67:14:61:d3:15:da:5f:48:bc:07:38:36: 06:67:fc:23:d8:55:71:d5:96:fa:7e:74:dc:e4:ec:70:05:59: 1d:d2:50:4a:d1:70:d3:f0:5c:bb:e1:6c:2e:33:40:00:e8:75: 0a:13:9a:8a:e7:2a:e8:17:b4:68:13:ad:aa:c6:19:09:e2:6f: 36:64:3c:d7:9b:01:bd:94:6f:89:ec:26:1e:fe:89:25:33:3d: 1b:5c:4b:f9:02:02:d2:fb:0b:60:83:8f:5b:b1:cd:4d:4a:18: 6f:cf:dc:c3:4c:77:07:a7:25:8e:85:39:9f:f3:21:51:bf:86: f7:7e:16:74:3b:56:cf:44:98:2b:bc:a0:80:52:5b:b5:3e:76: 5e:69:62:13:a3:a2:ef:20:10:1b:22:25:06:5e:30:b8:1a:44: 36:f0:10:4f:d5:1e:13:a6:46:4f:18:cc:64:42:42:e4:7e:82: fa:0f:bc:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl62cQ8pf9xFPHMvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk MWZmOGUwZWEtNzg2MC00ODU2LTkwNWUtNTQyOGZmNGViY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNbzAVb0syGd19qldYOCS7XZc9lbvL7v5pAZ H9taI1Xp/kwgr4HzNrDUnDhW1D6vw61KM9bBlmaJKRJMWAuvbO/u/z+WG1FAO90V nsDfsXbnoQ8eTwLwYTI5ou1VzAklAA5VlZ7QyRvPfcpJR+w5QfWX/ssk3WnCYtdi 3w6JEE8zZE4B1SPc/hVKMcqp1gR0vCbDk0PVSsr6Ljzrcc/zszw7ggvBi82SsSSw dIYBsnoJMT7P57MNCcSYz0qPtFFYbjqgjllUPdZ84/q7K1FSNKH/Rx0iOdJ1s3I1 N2xWZqI2/4Lqn2KL/PU5CCuP/DuimbuGyVxnr46UJQ+70QpyNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIcsDA0i0gPEm0D+Hn8g9Bk9g3b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjAzZTBmN2MtYmM3OC0z Y2Y3LTgxODAtZTRhMGI3ZjYxYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnjuFR+7+L5QWPi6tvyi0onlPRtVSeMYPdC7MY DgAhiaxS3wKzZiwDOqxYRduV8dPCcUXAInWQcZed/R6AG+4VNBpKbWnuOI73XfUI BzJnFGHTFdpfSLwHODYGZ/wj2FVx1Zb6fnTc5OxwBVkd0lBK0XDT8Fy74WwuM0AA 6HUKE5qK5yroF7RoE62qxhkJ4m82ZDzXmwG9lG+J7CYe/oklMz0bXEv5AgLS+wtg g49bsc1NShhvz9zDTHcHpyWOhTmf8yFRv4b3fhZ0O1bPRJgrvKCAUlu1PnZeaWIT o6LvIBAbIiUGXjC4GkQ28BBP1R4TpkZPGMxkQkLkfoL6D7yu -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:53 2025 by rpki-client