$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa File: 420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa (raw, json) Hash identifier: b7qLzUwK+9bsjEKCMN+4BXSJqdIU6d/TC4T2JVGK1p0= Subject key identifier: 4C:05:67:95:3B:70:84:FA:FA:52:B4:44:D6:76:AF:59:55:2C:89:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D6D059CBDF5617953E20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 397200 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d6:d0:59:cb:df:56:17:95:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=583eb368-5eae-4005-9906-7ad33184fefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:e3:6c:57:75:60:ca:f2:98:85:c1:ff:4f: 70:50:bd:fa:b3:c8:e2:64:d0:3a:eb:13:1a:13:48: 2d:16:6b:49:73:53:6f:66:f4:5d:8d:88:64:3b:f4: 64:62:c6:ba:f9:ba:c6:8a:2c:fb:3c:f9:16:2b:51: dd:15:05:1e:c3:72:49:c4:f1:16:c3:37:61:5f:9a: 21:a4:0e:74:3d:94:93:36:e3:c6:f5:47:28:ff:63: 32:49:1d:13:04:53:ed:27:50:64:7b:fc:d2:c3:90: 83:01:7d:7e:db:9e:65:fa:67:e9:79:89:52:9b:fd: a6:b6:80:08:da:c3:34:b3:1e:ec:b3:49:cc:7a:f7: 07:88:1e:cf:72:ff:5b:b9:ce:99:34:f5:9d:42:c4: a8:af:da:70:99:8f:28:3e:cf:47:af:82:68:a5:7e: f0:7d:f6:7c:72:99:61:3b:00:f2:ac:a1:8e:2b:cf: 01:38:f2:d0:83:79:d6:cd:ea:9b:97:95:f4:16:0b: 36:d7:74:3a:d2:fd:28:1d:ef:1e:58:36:9d:07:06: 5e:04:c7:71:92:26:45:15:24:e3:60:a3:f4:7d:92: 31:28:2d:5f:69:19:25:1c:06:43:a1:0c:63:90:35: 91:5e:f9:96:cd:91:6f:09:67:7b:98:fd:16:ee:25: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:67:95:3B:70:84:FA:FA:52:B4:44:D6:76:AF:59:55:2C:89:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:35:60:72:9e:c9:3f:6c:a6:97:97:9f:de:0e:fa:2d:4f:eb: 79:c4:47:8b:28:f0:3d:30:50:08:64:32:0a:68:83:c2:9d:1f: 0f:88:f3:6c:92:e1:59:a1:41:a9:c2:0f:11:8e:0a:59:38:b9: 85:6e:27:3b:63:0f:06:c1:c6:25:a7:82:c6:d1:ed:0f:a4:4a: b7:31:dd:75:97:41:51:b8:4e:01:c9:8e:68:5e:91:2d:7d:02: dc:c6:8b:22:d8:7b:62:07:ee:c1:e9:e1:2f:d7:cd:fa:52:43: e9:e1:f9:1a:14:f0:41:a2:44:b6:4d:76:c1:41:47:51:17:22: f5:ab:27:9a:5c:9c:21:b8:0d:fa:52:0e:8d:2e:61:67:52:2e: 59:95:35:93:3c:45:39:15:26:66:3f:34:02:3d:71:b8:4f:e0: 99:b3:f4:bb:4e:7c:d2:c5:d7:38:a1:16:0b:cb:a9:de:c8:ca: d8:8a:10:78:3a:9e:87:ac:cf:8f:3c:01:65:e9:34:cf:a9:b5: ee:b2:4b:a5:0b:f3:08:32:50:5c:ad:b2:74:0b:93:75:78:cf: 1b:38:33:3e:e6:ec:23:0d:2a:b6:13:49:c3:f7:03:30:81:6b: 94:0f:4f:82:a0:85:ea:85:26:b2:12:5f:33:0a:6b:9d:0e:4b: b2:09:df:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49bQWcvfVheVPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NTgzZWIzNjgtNWVhZS00MDA1LTk5MDYtN2FkMzMxODRmZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK3jbFd1YMrymIXB/09wUL36s8jiZNA66xMa E0gtFmtJc1NvZvRdjYhkO/RkYsa6+brGiiz7PPkWK1HdFQUew3JJxPEWwzdhX5oh pA50PZSTNuPG9Uco/2MySR0TBFPtJ1Bke/zSw5CDAX1+255l+mfpeYlSm/2mtoAI 2sM0sx7ss0nMevcHiB7Pcv9buc6ZNPWdQsSor9pwmY8oPs9Hr4JopX7wffZ8cplh OwDyrKGOK88BOPLQg3nWzeqbl5X0Fgs213Q60v0oHe8eWDadBwZeBMdxkiZFFSTj YKP0fZIxKC1faRklHAZDoQxjkDWRXvmWzZFvCWd7mP0W7iUvBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEwFZ5U7cIT6+lK0RNZ2r1lVLImIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDIwZTc4OGQtNDJjNC0z NGZhLTg0NWEtYzdmNmMxZDQ1ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA0NWBynsk/bKaXl5/eDvotT+t5xEeLKPA9MFAI ZDIKaIPCnR8PiPNskuFZoUGpwg8RjgpZOLmFbic7Yw8GwcYlp4LG0e0PpEq3Md11 l0FRuE4ByY5oXpEtfQLcxosi2HtiB+7B6eEv1836UkPp4fkaFPBBokS2TXbBQUdR FyL1qyeaXJwhuA36Ug6NLmFnUi5ZlTWTPEU5FSZmPzQCPXG4T+CZs/S7TnzSxdc4 oRYLy6neyMrYihB4Op6HrM+PPAFl6TTPqbXuskulC/MIMlBcrbJ0C5N1eM8bODM+ 5uwjDSq2E0nD9wMwgWuUD0+CoIXqhSayEl8zCmudDkuyCd9K -----END CERTIFICATE-----Generated at Sat May 10 23:14:40 2025 by rpki-client