$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa File: cf3f7b05-ec57-3876-bf16-52189983e82b.roa (raw, json) Hash identifier: 5Ovi3Y45kZesrVFo350k9+eEcvxlwLxkG6ce+a9EOTo= Subject key identifier: 4E:0F:F8:1E:10:0E:0D:A5:A1:69:65:C6:E1:D6:7E:C2:B0:4B:AE:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D9253A167A6C8E94A300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 19836 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d9:25:3a:16:7a:6c:8e:94:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=552f00df-4cdc-4be3-a2f4-cad26d65fac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4e:e9:d1:23:e7:07:16:56:c1:23:ef:3f:5a: aa:28:48:79:da:93:bb:7b:20:c7:f9:07:e4:d6:e5: 68:80:8d:27:7c:4a:0f:74:d0:d0:6e:8c:5b:4d:c0: 2f:22:28:92:9b:8b:ec:61:49:26:25:fe:b1:0d:b1: 27:0e:18:bc:ca:95:ba:1b:8e:27:c7:1e:28:98:07: 14:bf:6c:5c:3e:c2:c2:e0:0e:fb:1a:60:69:85:4e: 02:cc:c4:43:c6:b1:07:eb:b2:b9:98:39:ab:ba:b5: 6e:c6:f9:e4:dd:01:dd:4e:10:27:1f:8b:8e:26:a2: f8:2a:55:78:34:7a:f1:70:5f:17:de:cc:f0:fb:8c: 95:bf:66:e5:43:d7:a9:fe:da:9d:13:a8:88:dc:e9: 12:b4:26:87:4e:fa:c2:6a:a4:10:bb:20:6f:d5:93: 6f:54:17:ed:ea:32:3b:15:a0:68:db:17:21:3d:7f: 7b:00:d2:7d:34:9b:90:37:1c:5c:56:0e:6a:bc:56: 0e:28:17:05:eb:6a:48:e8:fe:bd:fc:ef:f8:16:68: 14:19:a8:d1:2c:31:d9:29:a1:f7:e6:56:5a:43:48: 2a:01:e5:20:55:17:a4:d0:28:a3:2b:2d:bb:fe:44: 5b:38:79:5a:87:6d:04:db:b7:17:92:37:d1:0d:1a: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:F8:1E:10:0E:0D:A5:A1:69:65:C6:E1:D6:7E:C2:B0:4B:AE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:97:1f:1d:fb:67:ca:ee:e8:b8:b7:75:ec:3c:2a:d5:53:c7: 8b:88:30:53:59:24:dc:f9:6b:a0:f8:68:07:09:7d:bf:e4:1d: 6f:8c:a5:32:84:4f:c6:ce:bc:f4:00:86:a9:f9:71:ed:c0:6f: 59:03:03:bc:b1:a7:fd:f2:34:d0:df:cf:91:c2:48:f8:42:ac: 3c:00:11:55:13:30:ca:d8:05:b2:20:1d:ca:e3:8b:68:ab:75: e2:9c:0a:c3:3e:3e:87:2a:ae:86:70:48:f4:ba:58:4c:24:4b: 3f:7c:7e:77:0d:92:8f:3c:b6:55:7a:87:e3:07:d0:9a:c9:03: b2:18:63:4d:ac:e5:44:ce:f4:d0:db:bf:80:63:ee:9c:43:5d: 0f:0b:51:78:11:cb:88:1f:db:aa:48:4d:7f:09:1e:5b:ad:8f: 95:81:77:af:87:df:ba:8c:00:66:b6:5c:d7:3b:0b:e1:b5:c4: 96:0d:2c:c3:d8:d2:80:f8:ac:10:12:ca:b0:01:7a:c4:21:d4: 60:e2:ac:8d:21:82:33:06:d1:c8:d9:0a:fd:7b:2f:c6:75:d9: f2:ff:1b:d5:0d:a9:44:dc:1f:4d:33:9b:c0:e1:96:2d:6d:23: d1:9d:2c:62:27:f2:42:0d:95:a1:fe:d2:a7:af:c6:46:b8:25: 7e:97:38:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49klOhZ6bI6UowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NTUyZjAwZGYtNGNkYy00YmUzLWEyZjQtY2FkMjZkNjVmYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9k7p0SPnBxZWwSPvP1qqKEh52pO7eyDH+Qfk 1uVogI0nfEoPdNDQboxbTcAvIiiSm4vsYUkmJf6xDbEnDhi8ypW6G44nxx4omAcU v2xcPsLC4A77GmBphU4CzMRDxrEH67K5mDmrurVuxvnk3QHdThAnH4uOJqL4KlV4 NHrxcF8X3szw+4yVv2blQ9ep/tqdE6iI3OkStCaHTvrCaqQQuyBv1ZNvVBft6jI7 FaBo2xchPX97ANJ9NJuQNxxcVg5qvFYOKBcF62pI6P69/O/4FmgUGajRLDHZKaH3 5lZaQ0gqAeUgVRek0CijKy27/kRbOHlah20E27cXkjfRDRp/ywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE4P+B4QDg2loWllxuHWfsKwS642MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzZjdiMDUtZWM1Ny0z ODc2LWJmMTYtNTIxODk5ODNlODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAFlx8d+2fK7ui4t3XsPCrVU8eLiDBTWSTc+Wug +GgHCX2/5B1vjKUyhE/Gzrz0AIap+XHtwG9ZAwO8saf98jTQ38+Rwkj4Qqw8ABFV EzDK2AWyIB3K44toq3XinArDPj6HKq6GcEj0ulhMJEs/fH53DZKPPLZVeofjB9Ca yQOyGGNNrOVEzvTQ27+AY+6cQ10PC1F4EcuIH9uqSE1/CR5brY+VgXevh9+6jABm tlzXOwvhtcSWDSzD2NKA+KwQEsqwAXrEIdRg4qyNIYIzBtHI2Qr9ey/Gddny/xvV DalE3B9NM5vA4ZYtbSPRnSxiJ/JCDZWh/tKnr8ZGuCV+lziO -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:56 2025 by rpki-client