$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa File: 0ca5835b-bb46-3027-94f0-5e5867970634.roa (raw, json) Hash identifier: MWAv8gQM/S08mEcNpvXSASSgXT9dHckSRMKOg8O8LvI= Subject key identifier: 96:D1:FA:3C:37:31:A9:26:77:C7:56:29:3E:29:E3:79:53:91:E4:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494039834CA11402B45FB48B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 397198 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:83:4c:a1:14:02:b4:5f:b4:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=3aa339fd-4a22-4866-82e1-0cfe52d58a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:05:fa:20:55:f2:42:7c:28:6b:cd:9b:e3: aa:98:2b:e9:67:30:22:5e:07:66:2c:94:08:5a:9c: d7:9c:3b:6e:a4:d0:f0:4a:be:03:14:09:df:ad:38: d8:8b:fa:b0:63:a9:5b:a1:75:9e:e4:98:a5:80:2a: 0f:98:ab:96:f6:f0:35:21:6c:19:f2:0d:16:be:a3: 15:28:14:96:90:89:09:70:3c:36:67:7c:09:e9:c5: 37:0f:6b:e1:7c:4a:13:4e:35:26:ae:54:e4:81:c5: 8e:6f:bf:4e:f5:4a:06:69:04:0a:fa:08:a0:83:27: 1e:88:20:4b:dd:bf:ad:89:26:d0:ad:c8:3b:8c:5f: 50:01:44:57:2c:00:ce:33:58:4b:83:c3:42:9e:2d: 99:ad:27:df:4b:b4:ec:66:c8:1a:8f:68:26:dd:97: 1d:fc:14:41:38:d2:f7:d5:64:79:3e:db:00:fe:75: 4b:03:d3:b3:12:71:10:d6:7e:41:27:a1:56:37:d7: 3a:84:88:2d:6d:b8:d9:70:52:54:95:57:e2:55:19: 3e:5e:0c:e5:2c:4b:c8:b3:cc:aa:ba:00:7d:bf:5c: 85:3d:3c:51:80:d0:20:8b:02:36:87:8c:91:b0:5b: a1:de:53:61:46:13:df:24:e5:ee:f4:d9:77:fd:f8: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:FA:3C:37:31:A9:26:77:C7:56:29:3E:29:E3:79:53:91:E4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:b7:24:47:2b:fd:51:9f:ce:3c:21:88:01:1a:ac:1a:ac: dd:da:b7:25:bd:1d:9f:9c:af:17:0a:41:2a:fb:45:34:f9:51: 23:be:45:92:c4:22:53:70:0e:e0:e7:f5:ff:d3:27:57:b6:c5: ba:d1:e3:53:fd:fc:ef:69:ec:a3:21:88:09:cc:69:e9:f9:45: d1:df:d2:d1:8d:c8:f8:1c:39:a5:c1:00:95:37:7e:a7:2a:ff: 00:f6:94:e6:d0:52:4e:a8:51:5c:41:0c:eb:a3:18:29:08:59: e0:f4:b8:2f:22:b2:bd:b9:cc:ee:17:40:6d:c6:d2:f0:a5:b0: e9:f1:15:75:16:98:d5:f5:fc:58:57:39:a8:34:01:07:c8:26: 00:00:35:ca:b0:ce:08:87:2a:82:fc:04:31:f7:4e:3e:94:4b: 5e:dc:d6:09:55:a0:41:d9:f6:c9:06:44:f8:c0:8b:2e:ed:2e: 3a:2c:8c:56:da:9f:5b:0e:76:72:11:73:a4:63:6a:7a:fb:cc: 74:46:eb:95:3b:96:81:6d:ad:69:fe:6a:5f:56:b2:86:39:23: e8:02:3f:4a:58:99:91:f5:bc:47:49:88:6a:51:ec:82:93:9c: e7:0a:7a:07:52:05:30:1d:27:16:d9:89:f9:15:d8:10:df:bf: e1:d7:e3:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYNMoRQCtF+0iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk M2FhMzM5ZmQtNGEyMi00ODY2LTgyZTEtMGNmZTUyZDU4YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEgF+iBV8kJ8KGvNm+OqmCvpZzAiXgdmLJQI WpzXnDtupNDwSr4DFAnfrTjYi/qwY6lboXWe5JilgCoPmKuW9vA1IWwZ8g0WvqMV KBSWkIkJcDw2Z3wJ6cU3D2vhfEoTTjUmrlTkgcWOb79O9UoGaQQK+giggyceiCBL 3b+tiSbQrcg7jF9QAURXLADOM1hLg8NCni2ZrSffS7TsZsgaj2gm3Zcd/BRBONL3 1WR5PtsA/nVLA9OzEnEQ1n5BJ6FWN9c6hIgtbbjZcFJUlVfiVRk+XgzlLEvIs8yq ugB9v1yFPTxRgNAgiwI2h4yRsFuh3lNhRhPfJOXu9Nl3/fgHtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJbR+jw3Makmd8dWKT4p43lTkeSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNhNTgzNWItYmI0Ni0z MDI3LTk0ZjAtNWU1ODY3OTcwNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4LbckRyv9UZ/OPCGIARqsGqzd2rclvR2fnK8X CkEq+0U0+VEjvkWSxCJTcA7g5/X/0ydXtsW60eNT/fzvaeyjIYgJzGnp+UXR39LR jcj4HDmlwQCVN36nKv8A9pTm0FJOqFFcQQzroxgpCFng9LgvIrK9uczuF0BtxtLw pbDp8RV1FpjV9fxYVzmoNAEHyCYAADXKsM4IhyqC/AQx904+lEte3NYJVaBB2fbJ BkT4wIsu7S46LIxW2p9bDnZyEXOkY2p6+8x0RuuVO5aBba1p/mpfVrKGOSPoAj9K WJmR9bxHSYhqUeyCk5znCnoHUgUwHScW2Yn5FdgQ37/h1+OC -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:54 2025 by rpki-client