$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa File: 30406605-4c67-37ce-aa10-4258fa27d89b.roa (raw, json) Hash identifier: zanNbsKCbxQY4T0TQLnwH41JKW/Vot9CDTABteq2l4k= Subject key identifier: 1C:7E:BB:07:29:C7:96:74:8B:96:92:A2:C0:A1:2C:C4:35:C0:EE:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183EED3A0F0D2DAE77F04A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396826 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ee:d3:a0:f0:d2:da:e7:7f:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=51c15b94-2e18-48ac-9a62-3bb097d5fbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:c5:46:9d:d4:ec:1e:0c:b4:e9:9f:27:40: 95:32:a2:e6:ab:de:5f:f7:78:f5:46:b0:e7:49:6f: f4:76:65:89:dc:74:b1:37:0b:09:80:fa:c4:1c:b7: 9b:17:0a:24:6d:89:23:8a:e7:4e:d6:64:11:f1:28: d4:6b:c4:55:5d:d7:91:36:fd:74:71:0e:0f:64:fd: bf:1f:9e:1d:55:d6:d4:a8:3b:71:a2:63:d9:a3:f6: a5:d7:74:cf:4b:25:da:8d:76:17:79:d9:71:5d:62: 6d:db:ab:5a:d1:9b:da:c5:78:7b:7f:58:fe:4a:e9: 3e:e0:80:77:b7:6c:1c:d9:97:eb:85:05:df:bd:7d: 47:a6:ab:2d:32:b7:fd:6a:67:ea:60:8e:0b:97:72: 96:5e:de:c3:95:0b:86:1e:66:d8:36:61:4d:f7:b7: 40:d0:3b:a9:41:f1:ec:69:85:19:10:5e:9a:27:ec: 0a:0a:60:35:ae:47:6e:f6:a9:8f:cd:c6:d4:3b:ea: 73:42:52:91:06:67:79:68:fc:be:d8:9a:b9:59:61: 03:5a:5e:aa:e7:09:8c:7a:7b:7d:2b:fc:1b:1a:86: 4e:42:21:7f:68:06:ed:85:e2:b4:68:0d:12:5b:51: fa:14:39:79:1c:2d:e8:39:b3:7a:af:7d:fc:41:0e: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7E:BB:07:29:C7:96:74:8B:96:92:A2:C0:A1:2C:C4:35:C0:EE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30406605-4c67-37ce-aa10-4258fa27d89b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:18:57:d5:1c:16:62:76:11:85:89:e4:3d:62:61:7a:9d:f9: 69:ca:2e:d7:78:12:56:5f:8b:b8:a7:06:54:22:ce:c1:11:b6: 55:ef:50:46:ad:d6:d8:02:1d:aa:e7:36:08:6f:66:4c:b7:a0: b9:13:60:7e:2d:1a:53:e5:fe:ac:f9:69:ae:1e:fa:8e:c1:ee: 52:b3:87:df:d5:f2:b8:96:69:56:95:2a:bf:19:2b:ae:b1:62: 71:29:fd:5d:b6:91:96:c8:b8:48:f3:32:f2:0e:b0:55:83:cf: 87:9e:f1:4a:bf:41:83:1e:70:de:33:37:c2:06:2a:71:dd:52: bc:b8:ae:fb:89:f3:d9:20:51:34:1e:3a:17:e4:90:1b:8f:4f: 27:4f:d1:99:4b:da:03:ce:88:7e:83:bc:b0:df:0b:ac:70:c2: 71:29:77:7d:5b:ff:69:1c:85:f7:4d:b3:67:5e:53:cf:cd:f3: c0:9c:a8:ef:01:e2:cc:10:e0:c8:b3:a2:5d:15:12:83:e8:0e: 5f:8a:b3:fb:b1:c1:37:8b:47:af:77:29:89:57:bc:0b:77:38: 53:fa:a6:61:44:72:26:b7:28:0b:38:c9:57:59:54:e2:a4:f0: 12:e8:a2:6c:bd:e6:b5:6e:f4:57:14:ee:4b:97:79:98:ff:8d: 33:a6:ed:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+7ToPDS2ud/BKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTFjMTViOTQtMmUxOC00OGFjLTlhNjItM2JiMDk3ZDVmYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAjFRp3U7B4MtOmfJ0CVMqLmq95f93j1RrDn SW/0dmWJ3HSxNwsJgPrEHLebFwokbYkjiudO1mQR8SjUa8RVXdeRNv10cQ4PZP2/ H54dVdbUqDtxomPZo/al13TPSyXajXYXedlxXWJt26ta0ZvaxXh7f1j+Suk+4IB3 t2wc2ZfrhQXfvX1HpqstMrf9amfqYI4Ll3KWXt7DlQuGHmbYNmFN97dA0DupQfHs aYUZEF6aJ+wKCmA1rkdu9qmPzcbUO+pzQlKRBmd5aPy+2Jq5WWEDWl6q5wmMent9 K/wbGoZOQiF/aAbtheK0aA0SW1H6FDl5HC3oObN6r338QQ6HPQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBx+uwcpx5Z0i5aSosChLMQ1wO5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA0MDY2MDUtNGM2Ny0z N2NlLWFhMTAtNDI1OGZhMjdkODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAHGFfVHBZidhGFieQ9YmF6nflpyi7XeBJWX4u4 pwZUIs7BEbZV71BGrdbYAh2q5zYIb2ZMt6C5E2B+LRpT5f6s+WmuHvqOwe5Ss4ff 1fK4lmlWlSq/GSuusWJxKf1dtpGWyLhI8zLyDrBVg8+HnvFKv0GDHnDeMzfCBipx 3VK8uK77ifPZIFE0HjoX5JAbj08nT9GZS9oDzoh+g7yw3wuscMJxKXd9W/9pHIX3 TbNnXlPPzfPAnKjvAeLMEODIs6JdFRKD6A5firP7scE3i0evdymJV7wLdzhT+qZh RHImtygLOMlXWVTipPAS6KJsvea1bvRXFO5Ll3mY/40zpu2v -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:26 2025 by rpki-client