$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d45822a-d961-3085-8ca6-7332de96c6ec.roa File: 1d45822a-d961-3085-8ca6-7332de96c6ec.roa (raw, json) Hash identifier: 0v7C6C53OMlzEgZEUCWNPDjkNzCYCOlr5nhMht/n910= Subject key identifier: A3:54:B9:CF:73:CE:89:F0:37:E3:8B:8A:1E:95:8E:6E:43:21:60:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183C56686FB7A8834E9F000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d45822a-d961-3085-8ca6-7332de96c6ec.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396588 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:c5:66:86:fb:7a:88:34:e9:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=71a0a870-0eea-4c9a-b6fb-3f87bf3cc1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:d7:6c:2d:63:47:41:1b:14:8c:bb:8d:43: 59:47:fe:2f:73:0e:fa:8c:e0:4a:29:40:46:44:fd: ea:d7:03:54:fb:47:f7:7b:53:2d:c5:c6:a1:fc:98: 97:73:a3:67:9c:cc:82:13:3b:95:86:e3:de:1c:43: 2c:01:46:ae:22:f4:90:26:5f:5d:8c:31:6a:2f:f9: 5b:b5:7b:dd:92:72:05:c2:8b:63:2d:fb:93:fd:2e: dc:31:47:ac:c6:1f:1d:1b:c6:82:95:b9:5f:10:61: 72:66:6b:1b:7a:ae:1d:07:d9:37:80:52:02:46:5f: 5d:ab:b8:8c:08:80:3a:40:18:0b:4a:fd:b4:47:14: 5d:bb:34:11:18:cc:ea:27:fd:9c:36:32:e8:a0:09: 3c:82:32:d1:8f:1b:c3:f6:59:47:d1:a6:16:9a:78: 01:90:60:26:4f:fa:f5:da:a4:0d:b9:80:c0:a5:b9: 5a:90:c3:f1:79:d1:11:a4:7b:38:a3:da:21:d8:fa: 38:58:3c:c2:a6:eb:13:4f:1e:d5:62:6e:9f:2a:31: 92:db:67:7f:83:33:4d:83:eb:74:e9:80:41:f1:bc: b3:2d:ab:15:c9:fc:2c:15:27:c9:c8:9f:79:16:79: 4d:6c:5b:2d:74:a4:f9:48:c3:53:5c:59:14:6c:53: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:B9:CF:73:CE:89:F0:37:E3:8B:8A:1E:95:8E:6E:43:21:60:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d45822a-d961-3085-8ca6-7332de96c6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0a:f6:f1:cf:87:71:28:cd:64:5e:c7:0d:31:b6:72:90:11: 8e:e0:a9:20:a9:69:4d:91:6b:fc:68:99:5c:bf:a2:06:24:41: 3d:b7:bb:08:13:1d:3a:a4:95:22:5c:64:73:1b:6b:65:27:85: 7e:4a:1f:44:7a:78:f4:0b:1f:12:7a:76:eb:59:b9:62:20:cd: eb:98:f6:15:24:de:f7:84:45:c2:60:65:e7:63:cd:7d:20:84: aa:f7:45:bf:f1:6b:a9:9a:2f:1a:12:fa:0c:71:5d:86:fb:3c: 4c:c0:6c:84:e9:7e:43:fc:e0:c3:69:85:14:50:09:dc:d3:b4: 55:5c:ee:af:47:e5:cf:61:15:99:0f:a9:6f:ea:07:19:62:f8: 72:72:59:03:06:58:3c:a8:5f:57:e2:8b:f7:3f:53:af:47:6c: 59:88:bf:87:0e:c0:e9:39:9b:80:0d:e3:e2:4e:3b:6c:5f:6d: c4:9f:b1:23:10:3e:27:ba:ed:3f:3a:3e:37:9b:38:29:c9:64: a3:7a:04:7f:e5:6d:88:ed:34:53:e5:c4:b2:af:a1:42:c6:1c: 8a:2c:a9:80:52:b4:01:61:e0:24:fd:f5:a8:01:6c:20:a5:b8: 0a:af:e9:03:d3:bc:0d:f8:91:9c:af:0b:f1:fa:33:92:0c:60: 4a:fd:ea:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8Vmhvt6iDTp8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NzFhMGE4NzAtMGVlYS00YzlhLWI2ZmItM2Y4N2JmM2NjMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3bXbC1jR0EbFIy7jUNZR/4vcw76jOBKKUBG RP3q1wNU+0f3e1Mtxcah/JiXc6NnnMyCEzuVhuPeHEMsAUauIvSQJl9djDFqL/lb tXvdknIFwotjLfuT/S7cMUesxh8dG8aClblfEGFyZmsbeq4dB9k3gFICRl9dq7iM CIA6QBgLSv20RxRduzQRGMzqJ/2cNjLooAk8gjLRjxvD9llH0aYWmngBkGAmT/r1 2qQNuYDApblakMPxedERpHs4o9oh2Po4WDzCpusTTx7VYm6fKjGS22d/gzNNg+t0 6YBB8byzLasVyfwsFSfJyJ95FnlNbFstdKT5SMNTXFkUbFNR4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKNUuc9zzonwN+OLih6Vjm5DIWAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWQ0NTgyMmEtZDk2MS0z MDg1LThjYTYtNzMzMmRlOTZjNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPCvbxz4dxKM1kXscNMbZykBGO4KkgqWlNkWv8 aJlcv6IGJEE9t7sIEx06pJUiXGRzG2tlJ4V+Sh9Eenj0Cx8SenbrWbliIM3rmPYV JN73hEXCYGXnY819IISq90W/8Wupmi8aEvoMcV2G+zxMwGyE6X5D/ODDaYUUUAnc 07RVXO6vR+XPYRWZD6lv6gcZYvhyclkDBlg8qF9X4ov3P1OvR2xZiL+HDsDpOZuA DePiTjtsX23En7EjED4nuu0/Oj43mzgpyWSjegR/5W2I7TRT5cSyr6FCxhyKLKmA UrQBYeAk/fWoAWwgpbgKr+kD07wN+JGcrwvx+jOSDGBK/eoz -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:57 2025 by rpki-client