$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa File: 3213d982-8960-312b-8508-7c0a21e62a7d.roa (raw, json) Hash identifier: ILfxnH1pX5YOwL+8vvk+96iclEs2MDfIHmsvq7k4Bc4= Subject key identifier: 5B:7E:8D:5F:A8:F6:C7:D0:34:CB:8F:2E:83:35:96:3F:C9:8B:8F:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183F2B3292AB2CFF8C35280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397212 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:f2:b3:29:2a:b2:cf:f8:c3:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4f8474a6-a977-4a55-ad8b-cba130edbae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:80:1e:6f:fd:a8:c3:ec:b8:ec:a2:56:c4: cd:40:d7:e1:22:67:70:a7:75:e6:e9:79:4e:f3:72: 87:c6:35:dc:4d:7b:3d:47:a2:13:b7:5f:2c:37:d6: a5:64:21:91:e6:b4:89:99:f0:47:1e:24:8c:35:ed: 6f:f8:2e:54:3b:b2:2b:f5:ea:7a:f4:a9:8b:69:89: 4a:7a:e9:26:3c:e0:6f:f6:54:04:c8:32:16:bd:47: f7:f7:62:d4:5e:b5:42:ae:d1:33:a4:6d:04:9c:4b: 29:76:da:71:ae:a6:78:a3:67:c4:4a:85:74:da:b8: ec:ce:07:00:94:e8:1e:45:9e:d4:71:f6:44:92:3e: 52:39:66:cb:0f:23:94:97:1e:9d:27:8f:67:70:00: d4:0f:cd:e0:35:48:ad:3a:2a:69:1c:28:24:38:57: e2:0b:62:25:97:b3:2b:03:a8:aa:cf:a6:54:b5:e0: 07:30:31:64:c1:85:25:cc:1d:45:e7:ab:27:7b:69: e3:08:93:80:d4:54:bb:04:0c:35:1b:dc:d2:2d:02: 5c:2e:d4:fe:9e:a7:b3:83:d7:ab:c1:db:fb:5b:37: d8:6f:9e:f6:b1:46:91:9b:11:cb:1b:ee:13:e5:40: 8c:b4:ed:fa:98:60:83:20:62:1f:bb:2b:93:d1:fb: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:8D:5F:A8:F6:C7:D0:34:CB:8F:2E:83:35:96:3F:C9:8B:8F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3213d982-8960-312b-8508-7c0a21e62a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3b:29:49:be:dc:ea:78:ad:af:7d:57:f2:4f:bb:88:58:d2: cb:fa:09:c0:df:ff:91:39:2d:fc:3f:51:89:43:e4:3b:0f:b6: 9f:14:73:7a:5f:8b:c7:5c:c4:7b:77:be:6e:53:7e:ad:a7:b0: 30:2f:14:91:b8:62:ff:3d:d0:3c:77:7e:98:56:a7:9a:28:97: 50:4a:34:cc:bb:b2:ec:f0:c8:65:c1:56:93:2e:c8:25:21:a9: 84:96:ca:85:db:6c:d1:e9:5d:59:88:79:72:f5:9c:f1:cd:36: 59:87:b2:55:9d:57:2b:0b:bc:7f:13:db:e3:42:c7:95:b0:5e: 41:4f:77:b8:38:ba:8f:7a:36:ac:fa:67:c1:8d:f1:f6:ee:ff: 2c:9f:e4:0e:c1:5e:ae:19:e1:33:80:66:3d:6f:b4:da:c9:86: 97:2b:cc:1b:0c:80:cd:82:61:6c:79:76:27:ff:10:79:84:e0: 92:2b:da:e5:4d:cc:5e:18:85:7a:2e:c8:ea:17:ea:b1:2b:f0: c9:94:79:3a:cb:aa:33:c5:55:ce:c9:e4:b3:af:a0:7c:3e:60: c7:65:4e:b5:52:71:a1:78:21:6b:8a:9e:f1:e1:cf:9e:68:14: 2d:ea:fc:35:9b:18:3c:bd:c8:60:0c:05:1e:e6:92:17:2f:72: 3a:4d:9e:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/KzKSqyz/jDUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NGY4NDc0YTYtYTk3Ny00YTU1LWFkOGItY2JhMTMwZWRiYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoGAHm/9qMPsuOyiVsTNQNfhImdwp3Xm6XlO 83KHxjXcTXs9R6ITt18sN9alZCGR5rSJmfBHHiSMNe1v+C5UO7Ir9ep69KmLaYlK eukmPOBv9lQEyDIWvUf392LUXrVCrtEzpG0EnEspdtpxrqZ4o2fESoV02rjszgcA lOgeRZ7UcfZEkj5SOWbLDyOUlx6dJ49ncADUD83gNUitOippHCgkOFfiC2Ill7Mr A6iqz6ZUteAHMDFkwYUlzB1F56sne2njCJOA1FS7BAw1G9zSLQJcLtT+nqezg9er wdv7WzfYb572sUaRmxHLG+4T5UCMtO36mGCDIGIfuyuT0fsuLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFt+jV+o9sfQNMuPLoM1lj/Ji48MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzIxM2Q5ODItODk2MC0z MTJiLTg1MDgtN2MwYTIxZTYyYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdOylJvtzqeK2vfVfyT7uIWNLL+gnA3/+ROS38 P1GJQ+Q7D7afFHN6X4vHXMR7d75uU36tp7AwLxSRuGL/PdA8d36YVqeaKJdQSjTM u7Ls8MhlwVaTLsglIamElsqF22zR6V1ZiHly9ZzxzTZZh7JVnVcrC7x/E9vjQseV sF5BT3e4OLqPejas+mfBjfH27v8sn+QOwV6uGeEzgGY9b7TayYaXK8wbDIDNgmFs eXYn/xB5hOCSK9rlTcxeGIV6LsjqF+qxK/DJlHk6y6ozxVXOyeSzr6B8PmDHZU61 UnGheCFrip7x4c+eaBQt6vw1mxg8vchgDAUe5pIXL3I6TZ4k -----END CERTIFICATE-----Generated at Fri Apr 11 23:03:47 2025 by rpki-client