$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa File: 1a8a3ffe-88c7-30ca-9056-1542db51b001.roa (raw, json) Hash identifier: XORzdT9EdDEpHxODg7uSlyXZBmlbMZs0Ijk2Dbk1210= Subject key identifier: 9E:38:C1:B4:BA:9C:F3:B0:3F:D2:39:DC:E5:33:7D:89:BA:7C:BC:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E9914DB3B9D251764A300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396584 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:99:14:db:3b:9d:25:17:64:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=6e519568-84c1-4f86-8bba-d2b8745a7ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:b1:44:12:e2:06:ab:d4:fa:43:d0:52:fb: 24:ec:80:17:83:f6:b4:a7:43:c1:7d:84:ba:25:44: 12:fc:11:55:ac:bd:8a:a4:b6:36:5d:d2:19:b6:22: be:53:5c:fb:c5:37:a6:4d:c0:11:39:c8:7d:1c:21: 19:be:4e:4e:8b:19:6d:0f:db:e0:3b:df:f3:9c:ad: f9:ab:63:1a:f4:8d:aa:8d:ca:cb:d7:bb:f4:ef:5b: 91:f2:0b:19:34:2e:40:84:0d:37:53:70:91:ff:6e: b4:91:91:99:43:6a:f0:dc:f1:a0:91:d1:66:1b:90: 36:90:b2:f9:9d:bd:9d:60:8b:d4:fa:67:4e:1b:35: a7:8f:a4:f6:b6:03:81:1b:71:a4:3b:da:68:00:ad: 1c:2b:be:01:e8:67:a0:e5:2c:1e:a8:32:7c:5c:6d: 69:ea:80:70:d2:e9:aa:89:86:88:23:16:f6:94:92: 07:8d:6a:23:c4:99:9b:07:1f:15:e6:91:e9:c4:f9: a1:b5:2d:41:4f:d9:36:7e:4c:90:23:a2:36:43:36: 4f:ed:89:26:dd:07:c4:73:81:1e:51:cc:c0:d9:8e: f1:d3:d1:af:6d:9a:6c:92:77:4e:06:18:a6:06:69: c6:96:d6:47:0e:48:3c:6c:cc:c5:71:0c:9f:3b:17: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:C1:B4:BA:9C:F3:B0:3F:D2:39:DC:E5:33:7D:89:BA:7C:BC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8a:76:50:a6:c3:cb:c3:45:be:71:ec:7b:63:84:f6:e2:16: 53:c5:df:82:10:da:4c:05:ad:a1:8a:b3:3a:60:70:1a:0b:d7: 4f:6c:e4:99:0f:c1:0d:3b:1e:82:05:69:3a:2c:b0:3e:d1:7d: fb:6b:55:32:39:64:69:18:ed:0d:00:1a:af:af:16:60:a4:92: f5:44:9c:70:4b:ab:83:83:c2:b4:71:eb:70:85:14:49:62:fb: 64:9e:0a:9c:2d:43:76:f2:ac:f1:cf:3d:ab:d0:c0:4f:c8:08: 9a:fb:7b:dc:85:49:1e:cb:ae:dd:9f:e1:b5:1a:b6:52:f3:df: 57:bf:13:96:9d:2d:7c:2c:d8:22:63:56:00:cc:c1:2c:39:a7: 4c:ab:2b:c9:ca:78:fc:a6:69:c2:2b:83:a7:ba:0b:8a:76:5e: d5:ac:d0:bb:28:c2:33:ff:4d:9e:6c:f5:2d:46:75:1c:c5:96: 60:ff:66:3c:47:8b:ce:30:48:4b:8b:1b:17:eb:60:8f:e7:5f: 73:78:6c:2d:7a:6a:23:a1:79:16:4d:ea:9a:c3:09:a0:d2:1a: 10:e4:f1:9b:d9:b4:15:e0:d4:bb:f2:1d:ab:67:6c:7a:41:3c: 26:b2:de:1f:d2:98:c3:6a:c0:e9:28:c7:db:c8:39:25:a0:7c: 05:21:b6:7d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpkU2zudJRdkowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NmU1MTk1NjgtODRjMS00Zjg2LThiYmEtZDJiODc0NWE3ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8axRBLiBqvU+kPQUvsk7IAXg/a0p0PBfYS6 JUQS/BFVrL2KpLY2XdIZtiK+U1z7xTemTcAROch9HCEZvk5OixltD9vgO9/znK35 q2Ma9I2qjcrL17v071uR8gsZNC5AhA03U3CR/260kZGZQ2rw3PGgkdFmG5A2kLL5 nb2dYIvU+mdOGzWnj6T2tgOBG3GkO9poAK0cK74B6Geg5SweqDJ8XG1p6oBw0umq iYaIIxb2lJIHjWojxJmbBx8V5pHpxPmhtS1BT9k2fkyQI6I2QzZP7Ykm3QfEc4Ee UczA2Y7x09GvbZpskndOBhimBmnGltZHDkg8bMzFcQyfOxeCEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ44wbS6nPOwP9I53OUzfYm6fLyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE4YTNmZmUtODhjNy0z MGNhLTkwNTYtMTU0MmRiNTFiMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApinZQpsPLw0W+cex7Y4T24hZTxd+CENpMBa2h irM6YHAaC9dPbOSZD8ENOx6CBWk6LLA+0X37a1UyOWRpGO0NABqvrxZgpJL1RJxw S6uDg8K0cetwhRRJYvtkngqcLUN28qzxzz2r0MBPyAia+3vchUkey67dn+G1GrZS 899XvxOWnS18LNgiY1YAzMEsOadMqyvJynj8pmnCK4OnuguKdl7VrNC7KMIz/02e bPUtRnUcxZZg/2Y8R4vOMEhLixsX62CP519zeGwtemojoXkWTeqawwmg0hoQ5PGb 2bQV4NS78h2rZ2x6QTwmst4f0pjDasDpKMfbyDkloHwFIbZ9 -----END CERTIFICATE-----Generated at Fri Apr 11 23:24:55 2025 by rpki-client