$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa File: 305f28da-be5f-3a06-b9df-40c6e00684ad.roa (raw, json) Hash identifier: j3a4DvqtbtmuBzK8I7GvRZp8t5fUU6sB4Au0xQqe7w0= Subject key identifier: D0:AA:24:EE:44:5A:9C:48:E2:F3:C8:13:B8:64:27:CF:D1:B4:E0:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D734A6C8DBDFB9C4F9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 36621 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d7:34:a6:c8:db:df:b9:c4:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=224d4bcf-e871-4a40-a9aa-25688f60e1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:38:0a:08:15:e0:0f:5d:a4:3c:a2:f5:7c: a8:65:5c:91:94:76:a6:5d:6d:bb:25:5d:5a:6a:7c: 0a:84:7a:d6:b7:7f:49:2b:12:76:90:70:3a:b8:44: c7:5f:db:06:a5:56:30:c6:86:f3:ac:ec:6b:00:5a: b7:e4:34:14:eb:9e:b7:be:00:46:20:7a:b6:04:0f: 82:63:ca:84:a3:24:b8:f5:a9:41:24:09:e6:b0:28: 5f:dd:bf:7a:e5:f1:af:29:94:ed:b3:b7:77:9b:6b: fb:47:18:c2:80:6e:e9:4b:3f:8a:52:75:21:eb:20: f4:16:02:03:ff:0f:8b:7c:eb:71:80:0a:01:a4:07: bf:5a:b4:97:7b:97:9f:c3:98:2d:5e:29:3d:3d:39: 0c:95:da:19:17:b1:44:b5:81:2c:4d:f2:7f:58:6d: 03:cd:b4:f7:e9:10:09:b3:b6:df:27:1d:f6:bb:78: ee:0a:6c:d0:bf:c4:69:23:70:97:89:71:b3:1f:60: 44:87:59:e7:e1:92:77:fe:00:a9:88:0d:5d:33:f8: 47:d4:0a:c0:32:ca:9d:4f:7b:7b:e8:16:93:bc:b9: f0:46:b1:8c:20:ac:7f:6c:f6:c4:5a:e2:39:64:54: c6:c1:74:c6:5d:5e:7a:72:77:7e:02:f0:ac:6e:01: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AA:24:EE:44:5A:9C:48:E2:F3:C8:13:B8:64:27:CF:D1:B4:E0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cd:f1:3f:69:00:fb:2b:2b:62:52:e7:7f:de:88:28:16:29: 57:30:f3:6d:77:7a:76:8b:c8:6d:09:0c:4c:f2:22:32:c6:9f: 74:78:22:42:80:4e:3c:dc:4a:79:7b:81:1a:20:2d:87:35:7a: ef:e7:28:86:6b:94:ee:7a:13:fd:92:ba:b3:d2:4f:4b:05:bb: 64:72:85:8e:72:65:ea:91:5a:55:39:98:6d:7f:dc:32:b3:01: f3:85:fd:3a:1d:4c:cc:c8:f4:ac:21:16:5c:5f:d2:ce:84:fc: 58:9a:1e:67:55:0f:cb:79:39:f4:60:6a:30:76:e3:0b:fc:89: e8:dd:14:c0:dc:47:fc:0e:db:ba:a8:10:fc:fa:7f:ca:57:99: f1:a3:fe:96:2a:7e:a4:85:09:be:4d:89:09:90:14:ee:d3:ef: 15:32:d4:e6:f6:f6:84:a7:cf:ac:98:af:8a:59:f6:11:f3:35: f1:49:6b:05:85:97:47:c3:29:87:ee:b6:5d:9a:64:91:d7:e5: 17:77:30:a4:02:e3:9f:bc:b0:eb:7e:e5:19:4f:43:9b:11:e1: 43:e5:f9:d9:b0:fa:4a:ea:55:61:59:a9:0e:f4:31:b9:07:fc: 06:e8:e7:2e:2e:a8:f1:bd:ad:55:0b:5f:ab:42:53:17:db:2f: b9:f9:79:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49c0psjb37nE+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk MjI0ZDRiY2YtZTg3MS00YTQwLWE5YWEtMjU2ODhmNjBlMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0w4CggV4A9dpDyi9XyoZVyRlHamXW27JV1a anwKhHrWt39JKxJ2kHA6uETHX9sGpVYwxobzrOxrAFq35DQU6563vgBGIHq2BA+C Y8qEoyS49alBJAnmsChf3b965fGvKZTts7d3m2v7RxjCgG7pSz+KUnUh6yD0FgID /w+LfOtxgAoBpAe/WrSXe5efw5gtXik9PTkMldoZF7FEtYEsTfJ/WG0DzbT36RAJ s7bfJx32u3juCmzQv8RpI3CXiXGzH2BEh1nn4ZJ3/gCpiA1dM/hH1ArAMsqdT3t7 6BaTvLnwRrGMIKx/bPbEWuI5ZFTGwXTGXV56cnd+AvCsbgFJRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNCqJO5EWpxI4vPIE7hkJ8/RtOB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA1ZjI4ZGEtYmU1Zi0z YTA2LWI5ZGYtNDBjNmUwMDY4NGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwzfE/aQD7KytiUud/3ogoFilXMPNtd3p2i8ht CQxM8iIyxp90eCJCgE483Ep5e4EaIC2HNXrv5yiGa5TuehP9krqz0k9LBbtkcoWO cmXqkVpVOZhtf9wyswHzhf06HUzMyPSsIRZcX9LOhPxYmh5nVQ/LeTn0YGowduML /Ino3RTA3Ef8Dtu6qBD8+n/KV5nxo/6WKn6khQm+TYkJkBTu0+8VMtTm9vaEp8+s mK+KWfYR8zXxSWsFhZdHwymH7rZdmmSR1+UXdzCkAuOfvLDrfuUZT0ObEeFD5fnZ sPpK6lVhWakO9DG5B/wG6OcuLqjxva1VC1+rQlMX2y+5+Xnz -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:24 2025 by rpki-client