$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0943b8f-dc77-35c7-9c0e-969beaa0ac4e.roa File: d0943b8f-dc77-35c7-9c0e-969beaa0ac4e.roa (raw, json) Hash identifier: C6M6TXMw4gLCAFla9Fy68N8NjYtSOn1UyvAmWH6l0OY= Subject key identifier: D5:BC:2A:25:E8:B2:A9:DD:3A:DA:78:8D:71:A7:81:33:26:34:C7:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183ECD2CEAE78BDB1B70200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0943b8f-dc77-35c7-9c0e-969beaa0ac4e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397196 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ec:d2:ce:ae:78:bd:b1:b7:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=03c836f7-f5af-4e95-b5bd-f418a7f336e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:21:1c:1d:e2:70:84:fb:c4:9e:f1:f3:22: b3:e0:b2:97:63:15:f8:33:aa:50:a5:0f:8e:9f:c8: b4:fd:c0:75:23:6b:91:0e:be:72:ec:43:cd:c0:01: 8b:30:0b:11:20:fd:bf:cd:55:b3:75:8e:84:62:4d: c6:c2:d3:05:dc:80:a3:37:71:43:9e:d4:2a:21:e3: e4:8d:90:88:12:15:88:10:86:ce:c0:da:2c:b6:6e: 85:11:00:01:31:9c:04:87:31:aa:42:bb:ab:97:ee: 8c:71:b6:b1:7a:1d:96:79:e1:2e:d0:ad:bc:2b:3f: 28:a1:92:4e:8a:f4:ed:cb:4d:b1:1e:db:89:47:1f: 29:e5:db:91:ed:b3:19:e5:f3:a2:ef:39:ab:20:af: 0d:2d:98:0d:c6:67:45:bf:f1:bc:8e:54:fa:a8:f8: 03:8e:42:1f:6b:26:05:87:7f:ca:06:db:25:c2:ff: f2:c3:fc:cb:6c:e5:5b:f1:a6:d1:eb:0b:69:35:07: 01:ea:08:1a:39:bc:9b:14:b0:c3:0e:51:b7:48:20: 8f:1f:f1:3d:b3:bd:e1:82:d9:d2:d2:ef:55:dd:0e: 09:5e:0e:88:10:33:ee:25:29:05:32:9d:91:a1:58: 98:5c:7a:72:79:e7:a4:f1:34:e2:54:ff:e5:72:ac: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:2A:25:E8:B2:A9:DD:3A:DA:78:8D:71:A7:81:33:26:34:C7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0943b8f-dc77-35c7-9c0e-969beaa0ac4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d6:8a:7a:79:d8:ab:5c:0f:6e:7a:13:c8:78:4f:a5:55:ad: 89:47:9c:1d:49:40:4b:30:89:51:50:f0:6a:ed:de:08:97:0d: 48:03:cc:55:f1:ad:ce:9b:f5:b5:44:ee:eb:28:b9:38:b3:2e: 10:fc:36:d5:e5:e6:35:ba:82:e0:72:1d:41:5b:8b:a9:d9:b9: 97:97:95:d0:66:0e:0a:da:e2:49:d4:92:b0:26:5d:93:28:90: 0f:7b:0d:46:c3:f7:6a:ab:85:ad:1e:69:5c:f6:06:de:82:3c: 9c:6b:f8:65:37:b7:28:f2:e6:59:21:fc:bc:09:21:1b:9d:88: 70:d2:37:cd:82:77:be:a4:9d:7c:b3:90:8b:6a:1a:db:57:fe: 58:a5:1f:2d:f3:ad:95:40:da:28:e0:8a:57:f1:c0:34:20:d7: 11:21:63:15:da:44:2d:d4:41:bd:2d:a6:92:38:f5:47:75:3b: 51:7a:3d:5b:4a:cc:b3:3a:6d:9e:28:b5:36:9f:87:a4:62:66: 63:3d:33:7b:99:fb:12:e8:1b:3b:de:a6:cd:48:02:48:fa:9a: a3:1f:51:c2:b1:77:6f:52:05:1c:eb:ab:70:a0:85:7f:f6:ee: 76:32:61:60:5f:1d:87:52:61:40:85:c3:e3:98:9f:13:86:73: 45:12:f4:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+zSzq54vbG3AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MDNjODM2ZjctZjVhZi00ZTk1LWI1YmQtZjQxOGE3ZjMzNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRchHB3icIT7xJ7x8yKz4LKXYxX4M6pQpQ+O n8i0/cB1I2uRDr5y7EPNwAGLMAsRIP2/zVWzdY6EYk3GwtMF3ICjN3FDntQqIePk jZCIEhWIEIbOwNostm6FEQABMZwEhzGqQrurl+6Mcbaxeh2WeeEu0K28Kz8ooZJO ivTty02xHtuJRx8p5duR7bMZ5fOi7zmrIK8NLZgNxmdFv/G8jlT6qPgDjkIfayYF h3/KBtslwv/yw/zLbOVb8abR6wtpNQcB6ggaObybFLDDDlG3SCCPH/E9s73hgtnS 0u9V3Q4JXg6IEDPuJSkFMp2RoViYXHpyeeek8TTiVP/lcqyJjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNW8KiXosqndOtp4jXGngTMmNMfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDA5NDNiOGYtZGM3Ny0z NWM3LTljMGUtOTY5YmVhYTBhYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCq1op6edirXA9uehPIeE+lVa2JR5wdSUBLMIlR UPBq7d4Ilw1IA8xV8a3Om/W1RO7rKLk4sy4Q/DbV5eY1uoLgch1BW4up2bmXl5XQ Zg4K2uJJ1JKwJl2TKJAPew1Gw/dqq4WtHmlc9gbegjyca/hlN7co8uZZIfy8CSEb nYhw0jfNgne+pJ18s5CLahrbV/5YpR8t862VQNoo4IpX8cA0INcRIWMV2kQt1EG9 LaaSOPVHdTtRej1bSsyzOm2eKLU2n4ekYmZjPTN7mfsS6Bs73qbNSAJI+pqjH1HC sXdvUgUc66twoIV/9u52MmFgXx2HUmFAhcPjmJ8ThnNFEvTZ -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:12 2025 by rpki-client