$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ad7094-115e-3a76-9581-950eb574005b.roa File: 21ad7094-115e-3a76-9581-950eb574005b.roa (raw, json) Hash identifier: 1qPKfg/J1VY85SDm5s9eOm93Dfu0ltFlkMScr4okCeM= Subject key identifier: 1C:AD:C1:8A:29:EA:EF:BC:2C:FF:02:7D:96:FA:B4:B5:CA:B3:E2:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D52A143D03DAB9520F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ad7094-115e-3a76-9581-950eb574005b.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 396547 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d5:2a:14:3d:03:da:b9:52:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=b584b87e-4195-495f-8610-69b30afb07fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:7e:70:63:ca:1f:84:9f:cb:50:9a:d8:73: 13:f8:45:09:07:92:e3:7c:39:ec:6a:ef:00:be:b0: 36:de:34:83:50:cd:09:10:1d:df:f6:99:9b:f1:33: fc:14:9a:2a:2d:a5:4e:42:9a:f5:c1:30:51:39:81: 15:72:c3:2f:78:ed:a2:3d:3b:2e:f2:32:15:b1:ab: ee:be:01:97:6e:78:41:63:40:bf:ac:d8:41:dd:bd: 2b:54:5e:9f:b1:6b:96:b1:30:3c:7a:49:3e:6e:46: 44:cb:18:a9:56:e9:bb:d1:e4:5d:4c:e4:29:26:c9: 29:f3:e6:5d:6c:f2:90:88:85:dd:d3:a7:51:ca:60: f7:c7:3d:e9:dd:80:0c:d5:ff:a3:2d:30:17:db:51: 2a:8d:ce:8d:2a:ef:eb:a8:fa:65:c8:2d:6d:c9:30: 33:ba:28:38:6a:3b:db:fc:a7:e9:84:d4:b0:9e:cd: b4:dd:d9:95:78:ea:1d:a3:d7:2d:84:19:84:c2:0e: 03:cd:e2:93:c8:27:62:e7:cd:2d:b6:43:8e:5a:d3: 69:12:92:67:47:7a:90:b1:07:21:82:bf:89:ff:7c: 04:0b:7d:53:96:57:89:fb:46:5e:06:22:94:b6:81: 1d:c3:b3:79:bd:29:9d:18:ab:86:cc:74:e4:0b:98: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:C1:8A:29:EA:EF:BC:2C:FF:02:7D:96:FA:B4:B5:CA:B3:E2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ad7094-115e-3a76-9581-950eb574005b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0f:a1:d8:48:f9:71:64:4b:e5:07:10:a0:71:ce:e3:18:47: ac:51:a5:fa:6d:16:73:a6:dd:04:5b:4c:a0:5d:06:79:35:41: 0c:72:18:2c:2b:15:38:54:50:5d:76:91:6a:d1:13:4f:70:4f: d6:07:28:3d:d7:4d:f1:84:ea:49:bc:6c:89:73:83:34:9a:39: fc:98:cc:f8:9e:fb:40:3a:44:a2:09:6d:e7:75:7d:28:49:a2: 6a:b7:a1:27:75:5c:21:f8:34:a4:3d:73:44:6b:ae:51:d3:21: b8:a9:c2:0f:76:94:27:90:08:c9:a5:41:d0:82:e1:38:00:0d: e2:ef:10:ea:80:e8:04:62:ee:08:b7:b2:9e:fa:9a:40:14:9f: d0:d5:42:94:c9:b0:f5:8b:c4:6c:16:97:81:96:f0:66:c6:3e: ec:07:bb:bb:0c:64:a4:ea:02:dd:50:cd:95:07:74:d6:a2:ed: 45:45:b4:41:a6:c4:df:05:fc:79:df:fb:0c:ae:c0:54:e3:7f: b9:5e:7a:e3:d9:da:5b:9d:42:71:10:3b:82:2c:a2:77:4b:c7: a5:88:da:bc:2d:87:59:07:1a:fd:60:15:27:0d:45:69:bb:fa: 2d:92:fa:23:5b:aa:fa:d6:1f:4c:c0:6c:86:13:6d:db:ff:de: 8b:d8:e3:6d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49UqFD0D2rlSDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YjU4NGI4N2UtNDE5NS00OTVmLTg2MTAtNjliMzBhZmIwN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7F+cGPKH4Sfy1Ca2HMT+EUJB5LjfDnsau8A vrA23jSDUM0JEB3f9pmb8TP8FJoqLaVOQpr1wTBROYEVcsMveO2iPTsu8jIVsavu vgGXbnhBY0C/rNhB3b0rVF6fsWuWsTA8ekk+bkZEyxipVum70eRdTOQpJskp8+Zd bPKQiIXd06dRymD3xz3p3YAM1f+jLTAX21Eqjc6NKu/rqPplyC1tyTAzuig4ajvb /KfphNSwns203dmVeOodo9cthBmEwg4DzeKTyCdi580ttkOOWtNpEpJnR3qQsQch gr+J/3wEC31TlleJ+0ZeBiKUtoEdw7N5vSmdGKuGzHTkC5gU0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBytwYop6u+8LP8CfZb6tLXKs+KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFhZDcwOTQtMTE1ZS0z YTc2LTk1ODEtOTUwZWI1NzQwMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6D6HYSPlxZEvlBxCgcc7jGEesUaX6bRZzpt0E W0ygXQZ5NUEMchgsKxU4VFBddpFq0RNPcE/WByg9103xhOpJvGyJc4M0mjn8mMz4 nvtAOkSiCW3ndX0oSaJqt6EndVwh+DSkPXNEa65R0yG4qcIPdpQnkAjJpUHQguE4 AA3i7xDqgOgEYu4It7Ke+ppAFJ/Q1UKUybD1i8RsFpeBlvBmxj7sB7u7DGSk6gLd UM2VB3TWou1FRbRBpsTfBfx53/sMrsBU43+5Xnrj2dpbnUJxEDuCLKJ3S8eliNq8 LYdZBxr9YBUnDUVpu/otkvojW6r61h9MwGyGE23b/96L2ONt -----END CERTIFICATE-----Generated at Fri Apr 11 23:25:50 2025 by rpki-client