$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa File: d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa (raw, json) Hash identifier: cDfyTeqvv4uIqbiRT4ajJ6gDwxiweDnCkdgwBB5b3Os= Subject key identifier: DC:1F:1B:4F:96:48:85:A3:94:0C:29:F4:04:7A:02:CC:FD:39:EE:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858496CE47EE8FDD1CDF7E7C0AC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 36617 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:7e:e8:fd:d1:cd:f7:e7:c0:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=3d0270e5-3bd6-4c45-8878-6269fcca09ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:90:82:24:58:07:44:a6:46:35:c7:ab:59: 7a:a0:8a:e6:95:55:87:91:24:53:d1:8c:0e:53:67: 11:67:f3:eb:17:a6:54:b9:ce:9b:7c:37:9f:fe:b5: 06:64:d2:f8:fa:d7:4a:84:d1:67:62:d2:6f:f8:27: 54:37:f3:44:d7:08:43:4e:51:a9:10:04:2b:59:69: 0a:3d:b7:4a:57:a0:19:c1:33:3a:0c:e9:71:a0:bc: c0:f5:4e:22:6e:01:fd:d8:09:95:eb:a2:17:bd:4f: a0:ba:ad:d2:f6:5b:23:84:41:fa:0b:d5:b2:18:e1: 05:8b:93:68:8b:6d:67:38:39:c6:71:f8:10:45:db: e5:ae:e8:1b:8e:ba:60:52:3d:30:8e:7f:92:3f:5b: 6f:9f:7f:c5:7b:2c:a8:97:7e:2a:7a:e6:4b:fd:eb: 4a:0f:2d:48:63:f3:7a:33:7a:08:5b:84:4a:9f:b5: de:6e:7a:09:c4:8a:5f:b6:79:44:cc:a4:25:7c:44: 30:b0:8f:6a:8d:98:14:10:42:46:61:36:46:d2:f9: 85:73:ab:9e:13:bd:c5:8c:62:1a:61:6b:90:47:8e: f8:fb:36:42:f8:c6:f0:43:45:e8:2b:a0:5e:27:47: a7:7f:04:29:e6:ed:88:29:7d:05:2e:4b:55:d8:b9: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1F:1B:4F:96:48:85:A3:94:0C:29:F4:04:7A:02:CC:FD:39:EE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:bf:8d:7c:69:47:19:93:97:03:2a:b3:84:83:2f:ff:9c:48: 13:32:be:3f:ff:52:de:71:d5:0d:d7:8b:2e:2e:7f:d2:67:50: f8:c0:31:0c:3c:f7:e8:d3:d5:30:0e:1b:28:39:73:3f:da:80: 60:8d:7b:7f:d3:98:6c:48:16:5b:1b:7d:f3:84:d5:74:35:3d: a7:88:ce:ce:0b:54:64:ce:ae:8e:0c:ab:76:8a:e0:8e:c8:a8: 3e:5a:44:5d:0d:b3:cc:fe:a8:43:62:d5:bc:ba:90:e1:7a:81: 95:68:2d:e3:b6:88:43:e6:53:df:aa:01:61:92:9a:38:74:06: e1:61:20:14:9a:2b:1c:39:ec:36:f5:4e:b7:a2:0c:67:26:2a: 36:58:73:ec:bf:2d:02:05:1e:e5:9f:f2:b4:d7:21:10:97:90: a8:57:2b:0d:19:35:3a:e3:3b:49:63:4d:43:91:55:8a:53:62: f7:21:92:3b:7d:e1:b1:40:d7:ee:98:d0:d3:8e:60:80:d0:14: 2c:cf:6f:ff:38:d4:1d:20:7f:4e:48:56:62:89:0c:e0:7e:bf: 80:09:cb:b3:eb:eb:ea:97:15:d5:72:f1:28:ea:5e:ad:60:d3: 47:71:70:99:39:cb:b1:0c:1b:bd:6c:5a:41:95:4b:35:b5:c8: b6:c7:8e:fb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5H7o/dHN9+fArIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk M2QwMjcwZTUtM2JkNi00YzQ1LTg4NzgtNjI2OWZjY2EwOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggOQgiRYB0SmRjXHq1l6oIrmlVWHkSRT0YwO U2cRZ/PrF6ZUuc6bfDef/rUGZNL4+tdKhNFnYtJv+CdUN/NE1whDTlGpEAQrWWkK PbdKV6AZwTM6DOlxoLzA9U4ibgH92AmV66IXvU+guq3S9lsjhEH6C9WyGOEFi5No i21nODnGcfgQRdvlrugbjrpgUj0wjn+SP1tvn3/Feyyol34qeuZL/etKDy1IY/N6 M3oIW4RKn7XebnoJxIpftnlEzKQlfEQwsI9qjZgUEEJGYTZG0vmFc6ueE73FjGIa YWuQR474+zZC+MbwQ0XoK6BeJ0enfwQp5u2IKX0FLktV2Lkh+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNwfG0+WSIWjlAwp9AR6Asz9Oe4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDY4ZmQyZGItOGViYy0z Mjg3LTg3YzItZTcxOWU1MWIyMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQChv418aUcZk5cDKrOEgy//nEgTMr4//1LecdUN 14suLn/SZ1D4wDEMPPfo09UwDhsoOXM/2oBgjXt/05hsSBZbG33zhNV0NT2niM7O C1Rkzq6ODKt2iuCOyKg+WkRdDbPM/qhDYtW8upDheoGVaC3jtohD5lPfqgFhkpo4 dAbhYSAUmiscOew29U63ogxnJio2WHPsvy0CBR7ln/K01yEQl5CoVysNGTU64ztJ Y01DkVWKU2L3IZI7feGxQNfumNDTjmCA0BQsz2//ONQdIH9OSFZiiQzgfr+ACcuz 6+vqlxXVcvEo6l6tYNNHcXCZOcuxDBu9bFpBlUs1tci2x477 -----END CERTIFICATE-----Generated at Sat Apr 12 02:05:34 2025 by rpki-client