$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc0b6d8-1387-3471-9dfb-837202b2954d.roa File: 1bc0b6d8-1387-3471-9dfb-837202b2954d.roa (raw, json) Hash identifier: wKSk0VTudx5Muld60LFFCQavobZud5XaBzCKf2/gBoA= Subject key identifier: 50:19:99:EB:FA:79:0F:16:5D:8A:0A:91:5A:CE:A8:E3:CC:37:01:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183D3C30752D3AC0225DDE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc0b6d8-1387-3471-9dfb-837202b2954d.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397206 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:d3:c3:07:52:d3:ac:02:25:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=7b3e0f64-dfbe-4e56-876a-d1bcca87b09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:3a:7d:50:2c:7b:92:e2:ff:ac:f0:65:21: e2:88:3e:e9:74:09:39:11:19:0f:d6:8a:e3:cd:71: 45:5a:48:1a:c3:c6:24:13:2c:49:07:dc:2c:d4:a2: ad:45:a9:d9:56:cc:5a:1e:26:68:39:26:8c:a6:39: 8b:9d:68:2d:90:5c:9b:f2:cd:1d:0a:13:cb:a9:26: eb:03:6e:36:18:a9:d6:49:cf:9a:2f:66:39:3a:1c: ab:c9:8b:be:05:b3:57:d3:8b:aa:da:b5:15:be:ff: f0:27:34:40:a6:51:31:9b:66:36:e8:7f:c3:20:2a: bb:89:0e:d3:59:3c:aa:21:f0:76:1e:6a:d2:2a:5c: 9a:1c:3c:b6:95:3d:c7:d3:e8:2a:49:ec:1f:f8:3a: 6a:11:ef:1f:4e:26:38:b6:d6:30:9f:ea:2f:30:5f: 2c:c4:50:e3:38:73:c9:02:da:71:d7:2e:57:89:00: cf:54:77:47:bf:8f:bc:e1:25:6c:67:44:a5:0f:90: 8d:4a:41:d5:4c:21:10:93:58:e3:44:d2:30:c8:0a: 0c:08:b1:d2:f6:b7:59:80:ab:40:20:7d:fe:f1:56: 5a:1b:17:bb:09:f6:71:73:47:b1:51:a4:47:c4:80: 44:14:f4:4c:6e:c0:a3:34:bc:80:16:85:22:17:72: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:99:EB:FA:79:0F:16:5D:8A:0A:91:5A:CE:A8:E3:CC:37:01:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc0b6d8-1387-3471-9dfb-837202b2954d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8f:7f:3b:86:6a:36:12:cf:5c:a7:1f:30:7d:ec:12:cc:19: e1:c9:77:83:e7:91:c1:e0:d5:05:05:d0:be:b9:14:77:bf:89: a0:f4:4a:57:6b:d4:d6:bf:2a:b4:d9:3b:83:0e:cc:21:5a:04: a0:f0:cc:1c:d5:f7:5f:0d:1f:a5:e9:55:bc:9b:81:0d:e8:a0: 22:17:80:98:02:19:1d:80:97:55:d5:7a:95:51:71:34:ae:70: 7f:8d:6d:b5:4c:03:8b:26:e9:e6:bb:28:09:2f:c7:12:ca:8c: ce:61:bf:9d:88:29:8d:23:fd:66:3a:3a:80:cb:bb:4a:83:22: 9e:ee:f7:87:e3:d4:8f:b0:9f:c7:9c:6b:6b:76:94:c3:48:c2: d3:db:d8:98:be:12:bd:7a:46:84:80:f7:4d:1b:43:e6:11:d2: c4:ad:9e:a8:f1:0c:b3:82:ea:6b:a3:ea:c5:71:ac:51:63:c9: 14:e1:38:69:65:8e:8d:2f:f3:18:fc:f0:79:52:4a:2e:ab:47: df:e4:21:7a:25:8b:d2:71:d8:53:5d:a3:31:26:62:17:de:e6: 90:75:a7:62:84:40:2a:39:e3:91:e0:f0:bb:61:f8:c9:b9:ef: 59:e1:65:d5:e7:67:0d:7b:78:96:a8:97:69:21:c8:4c:52:bc: 3e:8c:47:22 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg9PDB1LTrAIl3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk N2IzZTBmNjQtZGZiZS00ZTU2LTg3NmEtZDFiY2NhODdiMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Y6fVAse5Li/6zwZSHiiD7pdAk5ERkP1orj zXFFWkgaw8YkEyxJB9ws1KKtRanZVsxaHiZoOSaMpjmLnWgtkFyb8s0dChPLqSbr A242GKnWSc+aL2Y5OhyryYu+BbNX04uq2rUVvv/wJzRAplExm2Y26H/DICq7iQ7T WTyqIfB2HmrSKlyaHDy2lT3H0+gqSewf+DpqEe8fTiY4ttYwn+ovMF8sxFDjOHPJ Atpx1y5XiQDPVHdHv4+84SVsZ0SlD5CNSkHVTCEQk1jjRNIwyAoMCLHS9rdZgKtA IH3+8VZaGxe7CfZxc0exUaRHxIBEFPRMbsCjNLyAFoUiF3IpHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFAZmev6eQ8WXYoKkVrOqOPMNwGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWJjMGI2ZDgtMTM4Ny0z NDcxLTlkZmItODM3MjAyYjI5NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOj387hmo2Es9cpx8wfewSzBnhyXeD55HB4NUF BdC+uRR3v4mg9EpXa9TWvyq02TuDDswhWgSg8Mwc1fdfDR+l6VW8m4EN6KAiF4CY AhkdgJdV1XqVUXE0rnB/jW21TAOLJunmuygJL8cSyozOYb+diCmNI/1mOjqAy7tK gyKe7veH49SPsJ/HnGtrdpTDSMLT29iYvhK9ekaEgPdNG0PmEdLErZ6o8Qyzgupr o+rFcaxRY8kU4ThpZY6NL/MY/PB5Ukouq0ff5CF6JYvScdhTXaMxJmIX3uaQdadi hEAqOeOR4PC7YfjJue9Z4WXV52cNe3iWqJdpIchMUrw+jEci -----END CERTIFICATE-----Generated at Fri Apr 11 22:45:41 2025 by rpki-client