$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca9561c-75c7-3508-84e3-fc8f1b0dce81.roa File: 2ca9561c-75c7-3508-84e3-fc8f1b0dce81.roa (raw, json) Hash identifier: QOziJIZnBWm6w/8FFKs/kmQmFTO1kcgqGuKOvflMzYU= Subject key identifier: E0:27:09:3A:81:CB:04:8F:0C:B9:01:7C:C9:2F:D0:37:51:47:DD:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E91F138A6EAF15B396CE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca9561c-75c7-3508-84e3-fc8f1b0dce81.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 36632 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:91:f1:38:a6:ea:f1:5b:39:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=2a825c5b-8d8b-4d4d-9508-810876b136b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:4f:a4:2b:e4:42:59:6a:63:a7:9e:32:c2: d9:7f:a8:1a:83:48:28:cb:92:ec:1c:3a:66:c6:76: 35:73:1e:47:50:58:c8:a7:a7:0f:6c:75:60:cf:5b: 0d:7c:e3:5a:ed:19:9c:11:98:7d:82:1e:0b:9c:c8: ec:40:eb:e8:ff:e1:50:b6:56:25:57:35:b9:69:1b: 89:d3:e1:cf:e4:a5:66:69:07:e0:fa:32:56:77:79: 5c:da:86:ae:47:df:ea:a4:93:60:67:22:38:32:6c: f5:2c:30:6b:cf:a1:47:76:bf:66:f1:76:dd:82:be: 29:9a:40:24:ee:85:0b:9e:80:19:f1:7d:1b:8e:b7: 1c:9b:66:22:54:56:e1:b8:fd:bc:80:e5:dd:cd:0a: 1c:c7:ad:c7:31:0b:e8:d5:e7:76:02:59:3f:0e:db: e1:81:1d:57:56:b3:a9:e8:32:a4:c1:2e:d1:01:b7: 59:02:87:05:73:3e:be:cd:dc:bf:9f:d2:61:33:50: 29:0b:93:f5:74:b8:b1:dd:5f:92:7e:f0:5b:88:d7: 96:41:81:61:18:86:f4:53:72:03:95:4a:35:99:b2: 0d:7b:44:1e:c9:1b:5d:75:2e:33:66:81:b2:82:97: 54:7b:c2:ec:d6:19:55:cc:43:9b:00:28:be:af:a6: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:09:3A:81:CB:04:8F:0C:B9:01:7C:C9:2F:D0:37:51:47:DD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca9561c-75c7-3508-84e3-fc8f1b0dce81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:92:78:e0:d2:da:a5:d1:a4:49:2b:cf:84:43:e6:6d:61:7d: a8:71:0a:88:b5:b1:50:34:42:4d:d5:81:2a:c5:04:64:e4:f4: 8a:2a:5a:21:8a:13:69:3f:da:7c:e6:33:56:70:fa:2d:ff:42: 11:bb:f4:f6:3f:c9:55:76:de:c9:6c:bf:1c:fb:ad:53:20:94: 6e:11:9c:70:f7:99:19:35:f5:78:b2:08:30:58:9a:4d:a4:96: 52:ae:41:23:46:2a:07:36:7b:fb:2e:f2:f0:53:5c:fd:3a:44: 72:34:51:74:a0:26:b6:6d:58:5f:b1:4c:18:ff:91:62:1c:f1: a5:ea:d9:31:3c:cd:2e:57:d7:49:bc:1d:94:06:9f:9d:8c:30: 50:dd:38:73:79:bf:74:33:c2:b0:35:4e:76:3e:6c:5f:9d:1d: 30:57:11:90:6d:91:d4:c3:a6:93:cb:46:b1:96:08:5e:82:bb: 7f:1c:ec:72:d0:51:29:8c:12:5d:38:a3:e5:25:30:0b:bd:ec: 64:17:94:1e:9a:96:95:90:ad:08:75:74:cb:9c:05:c9:68:e7: 3a:90:91:af:28:ca:f7:43:84:b6:63:07:8e:07:49:81:13:e6: 7f:6c:89:a7:01:3e:64:c5:17:51:3e:fa:e8:2d:29:0b:65:6a: 03:73:c9:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpHxOKbq8Vs5bOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MmE4MjVjNWItOGQ4Yi00ZDRkLTk1MDgtODEwODc2YjEzNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHBPpCvkQllqY6eeMsLZf6gag0goy5LsHDpm xnY1cx5HUFjIp6cPbHVgz1sNfONa7RmcEZh9gh4LnMjsQOvo/+FQtlYlVzW5aRuJ 0+HP5KVmaQfg+jJWd3lc2oauR9/qpJNgZyI4Mmz1LDBrz6FHdr9m8Xbdgr4pmkAk 7oULnoAZ8X0bjrccm2YiVFbhuP28gOXdzQocx63HMQvo1ed2Alk/DtvhgR1XVrOp 6DKkwS7RAbdZAocFcz6+zdy/n9JhM1ApC5P1dLix3V+SfvBbiNeWQYFhGIb0U3ID lUo1mbINe0QeyRtddS4zZoGygpdUe8Ls1hlVzEObACi+r6ZrXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOAnCTqBywSPDLkBfMkv0DdRR909MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNhOTU2MWMtNzVjNy0z NTA4LTg0ZTMtZmM4ZjFiMGRjZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnknjg0tql0aRJK8+EQ+ZtYX2ocQqItbFQNEJN 1YEqxQRk5PSKKlohihNpP9p85jNWcPot/0IRu/T2P8lVdt7JbL8c+61TIJRuEZxw 95kZNfV4sggwWJpNpJZSrkEjRioHNnv7LvLwU1z9OkRyNFF0oCa2bVhfsUwY/5Fi HPGl6tkxPM0uV9dJvB2UBp+djDBQ3Thzeb90M8KwNU52PmxfnR0wVxGQbZHUw6aT y0axlghegrt/HOxy0FEpjBJdOKPlJTALvexkF5QempaVkK0IdXTLnAXJaOc6kJGv KMr3Q4S2YweOB0mBE+Z/bImnAT5kxRdRPvroLSkLZWoDc8lW -----END CERTIFICATE-----Generated at Fri Apr 11 22:28:17 2025 by rpki-client