$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa File: 0d71d168-9e9a-355b-800e-e9001e914220.roa (raw, json) Hash identifier: wLv2jDuFi09uI2OLJAwVZiSZce5pR7AG/PKkWp/z/o0= Subject key identifier: 3C:9C:90:11:8D:DC:D6:C9:F7:4A:CE:03:4F:A1:26:F6:83:F8:EF:4B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E9753F389107371E82BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396551 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:97:53:f3:89:10:73:71:e8:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=361ddc51-6dc4-41ca-931e-1cb36fe8d7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:d7:9c:76:49:9f:a6:2e:de:06:20:4e:d0: e4:47:2b:94:03:13:c6:02:bd:aa:ad:fa:f9:25:d9: 7b:6f:e4:c9:dd:24:0c:1e:59:1c:28:30:e2:ee:53: d9:5d:7e:b0:4c:dc:29:9d:0a:27:99:ff:41:e2:9e: 20:0b:49:79:98:41:21:8b:45:56:89:e4:a0:85:f4: b7:72:4e:f7:4c:c1:3f:d3:21:a7:41:77:6d:6f:b9: e5:48:f1:f6:87:5f:68:32:31:13:33:2d:0f:cc:ca: 16:5a:dd:5a:3e:8b:89:8a:9f:a6:a0:b9:64:73:a6: 0a:21:1b:46:3d:b0:1f:9b:0a:9f:3d:d9:49:b9:14: 0a:c3:37:5c:43:77:05:8f:f6:3f:d4:c0:dd:cb:14: 3f:77:05:18:e5:fd:62:60:bc:13:0a:21:f3:73:ff: 6a:46:2f:4e:83:4a:55:6c:4d:80:e8:d8:30:f7:37: be:01:3b:a8:4f:f6:73:3e:c3:36:f0:8e:36:9c:48: bf:bf:f5:9b:47:a9:bf:d8:59:88:48:8b:f7:a4:a4: 70:75:e4:01:1f:61:7b:1f:e6:37:3c:22:3b:6b:08: 76:b3:c5:32:67:4b:c6:a8:65:d4:a1:7b:e9:49:e5: b1:7f:b0:42:0a:56:63:7e:f5:2c:94:d4:2d:86:63: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9C:90:11:8D:DC:D6:C9:F7:4A:CE:03:4F:A1:26:F6:83:F8:EF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:55:39:b0:7d:25:47:32:b5:4e:97:eb:3c:c1:28:e1:b2:ae: 1d:3e:c0:8d:91:d8:60:73:f6:72:2c:c0:20:84:5e:6d:0d:61: b1:97:33:a0:16:21:56:07:dd:c3:c5:73:07:56:c8:6a:4a:df: ad:10:86:6e:65:69:35:7a:5d:24:68:1d:7c:f3:4b:17:99:45: 67:85:0b:61:0d:98:d6:f6:d4:e9:1c:41:bf:f6:ba:bd:80:c8: 5f:30:f7:4a:27:c4:2e:0b:1b:62:fe:3b:ec:70:5d:0f:fb:05: 49:46:8c:0d:30:40:ec:a0:6d:94:65:0d:1b:47:c4:f5:92:59: 5c:34:af:ef:91:8c:84:4f:1b:e2:95:e5:8f:4f:23:2d:af:6b: 95:c2:e4:b0:30:4c:b0:c4:d5:dd:75:7e:5f:fc:ac:94:5e:48: 80:34:96:37:16:3c:6e:e0:80:92:45:96:7c:1e:13:15:57:19: e3:97:ba:92:4d:b9:cd:be:c6:8c:54:92:80:f6:8a:18:56:ab: 5d:73:80:72:6e:f9:7f:19:a1:9b:5b:bf:8d:c9:a1:b0:1a:85: ea:d6:30:3e:8f:72:b5:60:fa:dd:f9:66:02:e9:67:4c:9b:b2: d7:ed:03:6b:ba:4f:83:70:27:5e:0c:e3:c9:6c:c1:03:3b:c3: 5e:9a:15:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpdT84kQc3HoK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzYxZGRjNTEtNmRjNC00MWNhLTkzMWUtMWNiMzZmZThkN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW7XnHZJn6Yu3gYgTtDkRyuUAxPGAr2qrfr5 Jdl7b+TJ3SQMHlkcKDDi7lPZXX6wTNwpnQonmf9B4p4gC0l5mEEhi0VWieSghfS3 ck73TME/0yGnQXdtb7nlSPH2h19oMjETMy0PzMoWWt1aPouJip+moLlkc6YKIRtG PbAfmwqfPdlJuRQKwzdcQ3cFj/Y/1MDdyxQ/dwUY5f1iYLwTCiHzc/9qRi9Og0pV bE2A6Ngw9ze+ATuoT/ZzPsM28I42nEi/v/WbR6m/2FmISIv3pKRwdeQBH2F7H+Y3 PCI7awh2s8UyZ0vGqGXUoXvpSeWxf7BCClZjfvUslNQthmOQvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDyckBGN3NbJ90rOA0+hJvaD+O9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGQ3MWQxNjgtOWU5YS0z NTViLTgwMGUtZTkwMDFlOTE0MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnVTmwfSVHMrVOl+s8wSjhsq4dPsCNkdhgc/Zy LMAghF5tDWGxlzOgFiFWB93DxXMHVshqSt+tEIZuZWk1el0kaB1880sXmUVnhQth DZjW9tTpHEG/9rq9gMhfMPdKJ8QuCxti/jvscF0P+wVJRowNMEDsoG2UZQ0bR8T1 kllcNK/vkYyETxvileWPTyMtr2uVwuSwMEywxNXddX5f/KyUXkiANJY3Fjxu4ICS RZZ8HhMVVxnjl7qSTbnNvsaMVJKA9ooYVqtdc4Bybvl/GaGbW7+NyaGwGoXq1jA+ j3K1YPrd+WYC6WdMm7LX7QNruk+DcCdeDOPJbMEDO8NemhUV -----END CERTIFICATE-----Generated at Fri Apr 11 22:50:23 2025 by rpki-client