$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa File: 0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa (raw, json) Hash identifier: ncSIix0PIXotRjrGLHgNYQcR5i3H5lRW047ypqMscA8= Subject key identifier: 35:27:FE:5C:2E:D7:00:F7:18:86:6D:D4:20:6F:99:FE:F0:DE:C9:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC155A6A197BA764163240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396608 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:15:5a:6a:19:7b:a7:64:16:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e5c93656-f49f-47cf-b15c-34e42c14bdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:5d:63:d3:dd:f7:57:79:46:eb:8d:c5:ae: d6:da:de:c4:8b:2d:92:ea:ea:b8:0a:6b:72:f5:a1: 03:8f:73:fb:02:03:47:10:f7:5e:c8:87:83:a3:09: a7:4a:e2:c6:36:0e:4e:65:af:3a:92:f9:93:5d:6a: 11:63:6f:34:8e:88:1f:ce:d6:98:e3:75:4b:57:bd: 68:3a:75:5e:a9:d8:9e:40:17:64:53:48:51:5a:77: 93:7e:41:ab:c0:df:df:7b:44:6d:47:45:88:62:49: 94:c2:0a:25:7c:c0:1e:86:aa:df:70:45:79:6a:a5: 7a:11:e4:d0:10:da:a3:95:ff:8e:c8:a5:37:cb:f3: 72:cd:4e:20:0e:60:3e:5b:63:89:81:1f:42:fc:ef: a4:36:a9:64:0a:9a:41:28:2c:39:03:c8:6e:cd:41: 8a:d1:57:5b:a2:42:33:24:8f:7a:2a:22:69:35:87: 7a:49:e8:c4:a1:0c:38:22:73:13:76:6d:8c:cb:4f: 85:a7:4f:b3:c9:87:7c:63:a4:d7:d2:a9:07:13:55: cf:93:f9:31:aa:28:b6:2a:f7:46:81:e2:94:fd:84: 58:2e:56:6c:eb:1f:2f:fc:39:4a:d5:4f:de:31:f5: 5c:e8:c6:fc:72:5d:69:cd:8c:1d:b7:89:a6:ac:63: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:FE:5C:2E:D7:00:F7:18:86:6D:D4:20:6F:99:FE:F0:DE:C9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4a:b2:5c:0d:fe:16:ce:40:49:df:3d:ef:15:91:cd:0a:88: c1:3d:d4:4e:c5:9e:f6:3f:ae:9d:0e:aa:ec:5e:23:ee:25:4a: ff:ba:e0:8b:dd:0f:3e:54:10:5e:f3:f3:09:ab:95:86:e9:3c: d7:24:f0:8b:3e:3c:87:f3:fe:ae:05:ad:1a:43:98:bf:ba:88: 41:c2:24:2d:d8:b1:4b:84:ea:51:7e:1e:6e:5c:ce:8b:7c:1c: 6c:30:06:40:7e:7b:fc:a6:46:58:dd:c0:38:77:7a:07:a6:06: 4c:d5:cd:46:74:49:aa:9f:89:37:4d:a7:cf:e8:6d:1b:35:f5: b5:8f:da:5f:b2:74:9d:c3:db:8f:59:6f:aa:db:cb:31:07:02: 82:89:c9:ab:47:ad:e6:b8:8d:a7:39:45:56:05:71:82:56:76: e3:88:e6:47:0d:d3:cf:71:e3:87:82:45:77:85:5a:80:65:a6: 56:df:53:59:ee:e8:9f:d6:f8:5f:20:68:d8:a9:a9:dd:36:35: 5d:a3:78:82:0c:89:ca:cb:7a:b7:04:a8:e1:fc:46:ce:c0:23: 82:06:c3:20:6f:02:25:a2:4c:26:d2:f3:38:8f:8f:2e:f7:65: 84:ad:09:eb:da:e0:2c:c9:9b:2f:38:da:30:27:ab:9e:f1:cd: 53:c9:a6:f8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BVaahl7p2QWMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTVjOTM2NTYtZjQ5Zi00N2NmLWIxNWMtMzRlNDJjMTRiZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsphdY9Pd91d5RuuNxa7W2t7Eiy2S6uq4Cmty 9aEDj3P7AgNHEPdeyIeDowmnSuLGNg5OZa86kvmTXWoRY280jogfztaY43VLV71o OnVeqdieQBdkU0hRWneTfkGrwN/fe0RtR0WIYkmUwgolfMAehqrfcEV5aqV6EeTQ ENqjlf+OyKU3y/NyzU4gDmA+W2OJgR9C/O+kNqlkCppBKCw5A8huzUGK0VdbokIz JI96KiJpNYd6SejEoQw4InMTdm2My0+Fp0+zyYd8Y6TX0qkHE1XPk/kxqii2KvdG geKU/YRYLlZs6x8v/DlK1U/eMfVc6Mb8cl1pzYwdt4mmrGPatQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDUn/lwu1wD3GIZt1CBvmf7w3snnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJkN2Y0ZTgtMWI3Yy0z YjdhLTlkMmQtYTRhMjM3YjYzYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsSrJcDf4WzkBJ3z3vFZHNCojBPdROxZ72P66d DqrsXiPuJUr/uuCL3Q8+VBBe8/MJq5WG6TzXJPCLPjyH8/6uBa0aQ5i/uohBwiQt 2LFLhOpRfh5uXM6LfBxsMAZAfnv8pkZY3cA4d3oHpgZM1c1GdEmqn4k3TafP6G0b NfW1j9pfsnSdw9uPWW+q28sxBwKCicmrR63muI2nOUVWBXGCVnbjiOZHDdPPceOH gkV3hVqAZaZW31NZ7uif1vhfIGjYqandNjVdo3iCDInKy3q3BKjh/EbOwCOCBsMg bwIlokwm0vM4j48u92WErQnr2uAsyZsvONowJ6ue8c1Tyab4 -----END CERTIFICATE-----Generated at Sat Apr 12 01:54:04 2025 by rpki-client